ENTERPRISE-CMS – TYPO3
ABOUT THIS PROJECT
Security is now mandatory. This also applies explicitly to websites. The Bundesamt für Sicherheit in der Informationstechnik Federal Office for Information Security has made this binding in its BSI Act because it recognizes a security risk in a system landscape that is full of holes because it is outdated and unmaintained. Users who catch malware unnoticed on hijacked websites, stolen user data and bots from hostile governments are just some of the scenarios against which systems must be hardened in accordance with the BSI Act.
A large-scale study on the widely used enterprise system TYPO3 is the first step.
WE WANTED TO KNOW ABOUT THE SECURITY OF CURRENT TYPO3 SYSTEMS
To get to the bottom of this, we have developed a machine that crawls the entire German-language network and scans it for TYPO3 installations. This crawler not only scans which TYPO3 versions are running on these websites. At the same time, all so-called extensions that extend the functional scope of TYPO3 are recorded.
A FIELD STUDY ON THE SECURITY OF CURRENT TYPO3 INSTALLATIONSN
This resulted in a real field study on the runtime of the systems. We have not simply cataloged all extensions stored in public repositories, but also all in-house and special developments on real systems. The incidental result is probably the most comprehensive collection of TYPO3 extensions ever written.
Another result is not good news for many website operators. After analyzing tens of thousands of websites, it turns out that a significant number are running on outdated systems. Although some of them still have so-called long-term support from the developer community on their site, in many cases they are running on outdated PHP versions, which in turn are no longer supported and run considerably slower than the current version.
All of this leaves security holes for attacks of all kinds. Many of these TYPO3 installations should therefore be updated immediately in order to meet the requirements of the BSI law – and to avert dangers.
If you are looking for further information on a specific TYPO3 extension or need help with it, simply use the search function at the top of this page.
The most frequently used TYPO3 extensions and their share of all TYPO3 installations.
OUR PILOT PROJECT FOR BIG DATA ANALYSIS THROUGH ARTIFICIAL INTELLIGENCE
We went one step further to make the resulting flood of data comprehensible and interpretable. We developed an AI solution that does this work for us and uses machine learning under the hood to constantly search for new correlations and display them.
This basic research is now benefiting a large number of customer projects – in which it is helping to automate content marketing processes, for example.
