Skip to main content

Application Security

Overview

Euler implements a comprehensive application security strategy that protects both the protocol and its users through multiple layers of security measures. This document outlines the various security implementations and best practices in place.

Network Security

HSTS​

HTTP Strict Transport Security (HSTS) is implemented to enforce secure connections to the application. This ensures that all communications between the client and server are encrypted, protecting against man-in-the-middle attacks and data interception.

DNSSEC​

DNS Security Extensions (DNSSEC) are used to safeguard against DNS spoofing and ensure that domain name requests are securely authenticated. Regular monitoring and updates to DNS configurations help prevent unauthorized domain transfers and maintain domain integrity.

DDoS Protection​

Advanced cloud-based Distributed Denial of Service (DDoS) protection services are utilized to identify and neutralize threats before they reach the application infrastructure. Scalable solutions ensure that the application remains accessible, even during periods of high request volume.

Application Layer Security

Content Security Policy (CSP)​

The application employs a robust Content Security Policy (CSP) to detect and prevent unauthorized modifications to front-end code. CSP helps mitigate the risk of cross-site scripting (XSS) attacks by specifying which dynamic resources are allowed to load.

Email Security​

To enhance email security and protect against phishing attacks, we utilize advanced solutions that incorporate:

  • DKIM (DomainKeys Identified Mail)
  • SPF (Sender Policy Framework)
  • DMARC (Domain-based Message Authentication, Reporting, and Conformance)

These protocols work together to verify the legitimacy of email messages, ensuring they are sent from authorized sources and have not been tampered with during transmission.

Monitoring and Detection

Endpoint Detection and Response (EDR)​

Endpoint Detection and Response (EDR) systems are deployed to monitor for suspicious activities and potential threats. These systems assist with rapid detection and response to protect user data and maintain application security.

Security Information and Event Management (SIEM)​

Our security strategy includes the use of Security Information and Event Management (SIEM) systems to:

  • Collect and analyze security data
  • Enable real-time threat detection
  • Facilitate incident response
  • Manage compliance requirements

AI-Powered Threat Detection​

Our application employs advanced AI-powered threat intelligence systems to provide real-time protection against:

  • Brand impersonation
  • Malicious actors
  • Fraudulent activities

The system utilizes:

  • LLM scanning
  • Image recognition
  • DMCA takedown capabilities
  • Blockaid integration for wallet alerts

Development Security

Security Tools​

Security tools are integrated into the development process to identify vulnerabilities in dependencies, maintain security and integrity, and address potential risks early in development.

Automated Security Testing​

Automated security testing is conducted to identify runtime vulnerabilities, ensure continuous security, and protect against emerging threats.

Penetration Testing​

Continuous comprehensive penetration testing audits are conducted on a regular basis, with a minimum frequency of once per year. These audits are also performed during major application updates to ensure security integrity. The testing is carried out through a collaborative approach involving both external security partners and our internal security team.

Infrastructure Security

Hosting Security​

Our robust security infrastructure combines real-time threat monitoring, automated alert systems, comprehensive incident investigations, rigorous authentication controls, and a unified access control system.

Domain Protection​

Custom Domain Protection services ensure protection against unauthorized transfers, prevention of unauthorized modifications, maintenance of domain integrity, and continuous domain availability.

Compliance and Standards

ISO 27001 Compliance​

The application adheres to ISO 27001 standards through comprehensive internal policies, regular security audits, continuous policy updates, and robust information security management.