Ibm security overview 2012 jan-18 sellers deck
Upcoming SlideShare
Loading in...5
×
 

Ibm security overview 2012 jan-18 sellers deck

on

  • 1,474 views

 

Statistics

Views

Total Views
1,474
Views on SlideShare
1,473
Embed Views
1

Actions

Likes
2
Downloads
131
Comments
0

1 Embed 1

http://www.linkedin.com 1

Accessibility

Categories

Upload Details

Uploaded via as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment
  • Organizational and Solution Silos: data without context Cost and Complexity of offerings: limited ROI Compliance does not deliver security: budget can enable security intelligence Proliferation of point solutions: too many, not proactive Scale, but at what cost: not architected for new normal
  • No one is immune and the costs are going up. Take the Sony breaches: Accounts affected: 77M Playstation Network, 25M Sony Online Entertainment Data stolen: Name, address, gender, date of birth, phone number, email address, login name, password, account number Lost revenue: $10M per week Law suits: $100M+ to $Bs Brand reputation: Incalculable
  • Sources Sony breach: http://www.search.sony.net/result/net/search.x?ie=utf8&site=&pid=ACsW7rd0W_Zt_QIz-sORfA..&qid=rOX1wPP0JvM.&q=security+breach&msk=1#5 HSBC breach: http://news.bbc.co.uk/2/hi/business/8562381.stm Epsilon breach: http://www.securityweek.com/massive-breach-epsilon-compromises-customer-lists-major-brands TJX breach: TJX Companies, Inc. press release, 8/14/2007, http://www.businesswire.com/news/tjx/20070814005701/en Lulzec breach: http://www.reuters.com/article/2011/08/01/us-britain-hacking-lulzsec-idUSTRE7702IL20110801 Zurich Insurance breach: (Financial Services Authority of Britain) http://www.fsa.gov.uk/pubs/final/zurich_plc.pdf
  • IBM is building integrated security solutions around four domains: People, Data, Applications, and Infrastructure. If you can secure across those domains, not just within each as a stand-alone, siloed area, you can build a secure environment and foster innovative use of technology.
  • Bringing of IBM’s security software and hardware products into one unified team will enable us to develop the integrated strategy and roadmap needed in today’s world of ever-increasing security complexity. We are building our team to provide and single voice of IBM security for the client and to support the CISO in developing
  • IBM has security consultancy practices and dedicated security research capabilities across the globe
  • security has to be everywhere.... layering on security intelligence....
  • IBM PULSE 2011 Steve Robinson_v11 02/27/12 09:17 Finally, attack sophistication is through the roof. I don ’t at all want to make light of the advanced persistent threat. It’s all of those things: advanced, persistent and threatening. It’s also well funded by state and non-state actors. And regardless, the motivation to break in and grab stuff has risen from just for kicks or money… no notoriety and activism being motivators. 02/27/12
  • Wherever they are in their current security posture, IBM is helping clients to a new level of security maturity through Security Intelligence.

Ibm security overview 2012 jan-18 sellers deck Presentation Transcript

  • 1.
    • IBM Security
    • Intelligence, Integration and Expertise
    • January 2012
  • 2. The world is becoming more digitized and interconnected, opening the door to emerging threats and leaks… Organizations continue to move to new platforms including cloud, virtualization, mobile, social business and more EVERYTHING IS EVERYWHERE With the advent of Enterprise 2.0 and social business, the line between personal and professional hours, devices and data has disappeared CONSUMERIZATION OF IT The age of Big Data – the explosion of digital information – has arrived and is facilitated by the pervasiveness of applications accessed from everywhere DATA EXPLOSION The speed and dexterity of attacks has increased coupled with new actors with new motivations from cyber crime to terrorism to state-sponsored intrusions ATTACK SOPHISTICATION
  • 3. Targeted Attacks Shake Businesses and Governments IBM Security X-Force® 2011 Midyear Trend and Risk Report September 2011 Attack Type SQL Injection URL Tampering Spear Phishing 3 rd Party SW DDoS Secure ID Unknown Mar April May June July Aug Feb Sony Epsilon L3 Communications Sony BMG Greece US Senate NATO AZ Police Turkish Government SK Communications Korea Monsanto RSA HB Gary Nintendo Brazil Gov. Lockheed Martin Vanguard Defense Booz Allen Hamilton PBS PBS SOCA Malaysian Gov. Site Peru Special Police Gmail Accounts Spanish Nat. Police Citigroup Sega Fox News X-Factor Italy PM Site IMF Northrop Grumman Bethesda Software Size of circle estimates relative impact of breach
  • 4. IT Security is a board room discussion *Sources for all breaches shown in speaker notes
    • Business results
      • Sony estimates potential $1B long term impact – $171M / 100 customers*
    • Supply chain
      • Epsilon breach impacts 100 national brands
    • Legal exposure
      • TJX estimates $150M class action settlement in release of credit / debit card info
    • Impact of hacktivism
      • Lulzsec 50-day hack-at-will spree impacts Nintendo, CIA, PBS, UK NHS, UK SOCA,
      • Sony …
    • Audit risk
      • Zurich Insurance PLc fined £2.275M ($3.8M) for the loss and exposure of 46K customer records
    • Brand image
      • HSBC data breach discloses 24K private banking customers
  • 5. Solving a security issue is a complex, four-dimensional puzzle It is no longer enough to protect the perimeter – siloed point products will not secure the enterprise People Data Applications Infrastructure Employees Consultants Hackers Terrorists Outsourcers Customers Suppliers Systems applications Web applications Web 2.0 Mobile apps Structured Unstructured At rest In motion
  • 6. In this “new normal”, organizations need an intelligent view of their security posture Proficient Proactive Automated Manual Reactive Proficient Basic Optimized Optimized Organizations use predictive and automated security analytics to drive toward security intelligence Proficient Security is layered into the IT fabric and business operations Basic Organizations employ perimeter protection , which regulates access and feeds manual reporting Security Intelligence
  • 7. IBM Security: Delivering intelligence, integration and expertise across a comprehensive framework Intelligence ● Integration ● Expertise
      • Only vendor in the market with end-to-end coverage of the security foundation
      • 6K+ security engineers and consultants
      • Award-winning X-Force ® research
      • Largest vulnerability database in the industry
  • 8. Intelligence : Leading products and services in every segment
  • 9. Analysts recognize IBM’s superior products and performance Network Endpoint * Gartner MarketScope Domain Report Analyst Recognition Security Intelligence, Analytics and GRC Security Information & Event Management (SIEM) 2011 2010 Enterprise Governance Risk & Compliance Platforms 2011 2011 People User Provisioning / Administration 2011 2010 Role Management & Access Recertification 2011 Enterprise Single Sign-on (ESSO) 2011* Web Access Management (WAM) 2011* Data Database Auditing & Real-Time Protection 2011 Applications Static Application Security Testing (SAST) 2010 2010 Dynamic Application Security Testing (DAST) 2011 Infrastructure Network Intrusion Prevention Systems (NIPS) 2010 2010 EndPoint Protection Platforms (EPP) 2011 Challenger Leader Visionary Niche Player Leader (#1, 2, or 3 in segment) Leader Contender Strong Performer
  • 10. Integration : Increasing security, collapsing silos, and reducing complexity
    • Increased Awareness and Accuracy
      • Detect advanced threats with real-time intelligence correlation across security domains
      • Increase situational awareness by leveraging real-time feeds of X-Force® Research and global threat intelligence across IBM security products, such as QRadar SIEM and Network Security appliances
      • Conduct comprehensive incident investigations with unified identity, database, network and endpoint activity monitoring and log management
    • Ease of Management
      • Simplify risk management and decision-making with automated reporting though a unified console
      • Enhance auditing and access capabilities by sharing Identity context across multiple IBM security products
      • Build automated, customized application protection policies by feeding AppScan results into IBM Network Intrusion Prevention Systems
      • Reduced Cost and Complexity
      • Deliver fast deployment, increased value and lower TCO by working with a single strategic partner
  • 11. Expertise : Unmatched global coverage and security awareness
    • 20,000+ devices under contract
    • 3,700+ MSS clients worldwide
    • 9B+ events managed per day
    • 1,000+ security patents
    • 133 monitored countries (MSS)
    World Wide Managed Security Services Coverage IBM Research Security Operations Centers Security Research Centers Security Solution Development Centers Institute for Advanced Security Branches
  • 12. How is IBM solving complex security challenges?
  • 13. Data Explosion IBM is integrating across IT silos with Security Intelligence solutions Sources Intelligence Most Accurate & Actionable Insight + =
  • 14. Solving complex problems that point solutions cannot Discovered 500 hosts with “Here You Have” virus, which all other security products missed Improving threat detection 2 billion log and events per day reduced to 25 high priority offenses Consolidating data silos Automating the policy monitoring and evaluation process for configuration changes in the infrastructure Predicting risks against your business Real-time monitoring of all network activity, in addition to PCI mandates Addressing regulatory mandates
  • 15. Consumerization of IT IBM is converging traditional endpoint and mobile security management into a single solution with complementary services Device Inventory Security Policy Management Device and Data Wipe Anti-Jailbreak and Anti-Root
      • IBM Mobile Security Software
    Lifecycle Management Mobile Enterprise Services (MES) Endpoint Management Hosted Mobile Device Security Management Secure Connectivity Secure Enterprise Smartphone and Tablets
      • IBM Mobile Security Services
  • 16. Allowing organizations to innovate with confidence Saved on deployment time (400K users in <6 months) and management costs while helping to achieve compliance with IBM’s end user device IT security policies (95% of patches applied within 24 hours) Significantly Reducing Costs
      • Deployed Tivoli Endpoint Manager to 1K endpoints in days, reduced the software update and patching process from 20 to 1 person, remediation time from weeks to hours, and call volumes from 100 to less than 20 calls per day
    Time-to-Value & Performance Improvements
      • Combining power, patch and lifecycle management along with security and compliance, Fiberlink was able to grow its cloud-based, mobile device management business by 25% annually over the last 5 years
    Ecosystem Value Creation
  • 17. Everything is Everywhere IBM is helping clients adopt cloud with flexible, layered security solutions IBM Security Intelligence Identity Federation Web Application Scanning Virtualization Security Network Security Image & Patch Management Database Monitoring
  • 18. Enabling security for new business models and delivery methods Enabled security for access to public SaaS applications – including Google Apps and Salesforce.com – using cloud-enabled federation Worldwide access to SaaS applications
      • Integrated security in a multi-tenant Infrastructure-as-a-Service environment using flexible, virtualized security managed from the cloud
    Best-in-class security for a cloud provider
      • Delivered identity and access management capabilities quickly and easily using a SaaS-deployed Tivoli solution
    Rapid Identity solution deployment European Energy Company
  • 19. Attack Sophistication IBM is helping clients combat advanced threats with pre- and post-exploit intelligence and action Prediction & Prevention Reaction & Remediation Network and Host Intrusion Prevention. Network Anomaly Detection. Packet Forensics. Database Activity Monitoring. Data Leak Prevention. SIEM. Log Management. Incident Response. Risk Management. Vulnerability Management. Configuration and Patch Management. X-Force Research and Threat Intelligence. Compliance Management. Reporting and Scorecards. IBM Security Intelligence What are the external and internal threats? Are we configured to protect against these threats? What is happening right now? What was the impact?
  • 20. Identifying and protecting against sophisticated attacks Deployed solutions to identify threats and vulnerabilities with protection across the entire infrastructure – from network to desktops in the customers’ showrooms and remote offices Securing across the enterprise ecosystem
      • Cross-correlated identity, access, and application data to identify trusted insider stealing and destroying key data
    Detecting insider fraud
      • Outsourced security management for critical credit card holding systems (318 network devices and servers), security-event log monitoring and reporting through a SaaS-based customer portal to detect and prevent attacks
    End-to-end monitoring and managed protection services Luxury Brand Retailer
  • 21. Security Intelligence is enabling progress to optimized security Security Intelligence Optimized Security Intelligence: Information and event management Advanced correlation and deep analytics External threat research Role based analytics Identity governance Privileged user controls Data flow analytics Data governance Secure app engineering processes Fraud detection Advanced network monitoring Forensics / data mining Secure systems Proficient User provisioning Access mgmt Strong authentication Access monitoring Data loss prevention Application firewall Source code scanning Virtualization security Asset mgmt Endpoint / network security management Basic Centralized directory Encryption Access control Application scanning Perimeter security Anti-virus People Data Applications Infrastructure
  • 22. Intelligent solutions provide the DNA to secure a Smarter Planet Security Intelligence, Analytics & GRC People Data Applications Infrastructure
  • 23. ibm.com/security © Copyright IBM Corporation 2012. All rights reserved. The information contained in these materials is provided for informational purposes only, and is provided AS IS without warranty of any kind, express or implied. IBM shall not be responsible for any damages arising out of the use of, or otherwise related to, these materials. Nothing contained in these materials is intended to, nor shall have the effect of, creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software. References in these materials to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. Product release dates and/or capabilities referenced in these materials may change at any time at IBM’s sole discretion based on market opportunities or other factors, and are not intended to be a commitment to future product or feature availability in any way. IBM, the IBM logo, and other IBM products and services are trademarks of the International Business Machines Corporation, in the United States, other countries or both. Other company, product, or service names may be trademarks or service marks of others.