Security in web conferencing Shawn Shadfar Chief Executive Officer Copyrights 2003 – 2008 Confidential

Usage patterns Web conferencing market $2.5 bn worldwide (Frost & Sullivan) > 22% annual growth Across the board: small, medium and large organizations Internal usage Remote Collaboration Trainings Presentations Executive Board communications External Sales webinars Meetings with customers and partners Trainings for Resellers and Partners Online courses Security sensitive applications Live chat, audio and video Desktop Applications projecting and sharing File storage and sharing Copyrights 2003 – 2008 confidential

Web conferencing market

$2.5 bn worldwide (Frost & Sullivan)

> 22% annual growth

Across the board: small, medium and large organizations

Internal usage

Remote Collaboration

Trainings

Presentations

Executive Board communications

External

Sales webinars

Meetings with customers and partners

Trainings for Resellers and Partners

Online courses

Security sensitive applications

Live chat, audio and video

Desktop Applications projecting and sharing

File storage and sharing

Web conferencing architectures Peer-to-Peer (P2P) Ideal for very small group presentations Copyrights 2003 – 2008 confidential Centralized Intranet or Internet Server(s)

Peer-to-Peer (P2P)

Ideal for very small group presentations

Centralized

Information Security Golden Rules I) Your system is as secure as its weakest link. II) 100% secure does not exist! It is about setting the bar higher or lower. III) Adequate security level can be only reached with a balanced combination of Technology, People and Processes. Copyrights 2003 – 2008 confidential

I) Your system is as secure as its weakest link.

II) 100% secure does not exist! It is about setting the bar higher or lower.

III) Adequate security level can be only reached with a balanced combination of Technology, People and Processes.

Security risks Authentication and Authorization Prevent access from unauthorized persons Communication eavesdropping Chat, audio, video Unauthorized access to files on hosting servers PowerPoint presentation files as well as other files in Shared Folders Archived sessions Unauthorized access to databases containing reports and other user information Reports on attendees and their demographic info Transcripts of chat messages Data Loss Reports Sensitive Information in hosted files Service interruption Copyrights 2003 – 2008 confidential

Authentication and Authorization

Prevent access from unauthorized persons

Communication eavesdropping

Chat, audio, video

Unauthorized access to files on hosting servers

PowerPoint presentation files as well as other files in Shared Folders

Archived sessions

Unauthorized access to databases containing reports and other user information

Reports on attendees and their demographic info

Transcripts of chat messages

Data Loss

Reports

Sensitive Information in hosted files

Service interruption

Solutions Common methods Password protection, 2-factor authentication, Identity Management Encrypted communication channels Backend security Internal Servers Backups Intrusion detection Disaster recovery Business Continuity Internal VS. Hosted (ASP) Large firms: Internal Small and Medium-sized: Hosted Cost Factor Processes Copyrights 2003 – 2008 confidential

Common methods

Password protection, 2-factor authentication, Identity Management

Encrypted communication channels

Backend security

Internal Servers

Backups

Intrusion detection

Disaster recovery

Business Continuity

Internal VS. Hosted (ASP)

Large firms: Internal

Small and Medium-sized: Hosted

Cost Factor

Processes

Challenges with the real-time interactions Speed and Performance VS. security Encrypting and Decrypting image slows down the flow Lag in audio Solutions Newer computers are more powerful New encoding algorithms generate smaller data Real Time  Rush  weakened security When in a Rush people do not observe rules and do not always follow processes Copyrights 2003 – 2008 confidential

Speed and Performance VS. security

Encrypting and Decrypting image slows down the flow

Lag in audio

Solutions

Newer computers are more powerful

New encoding algorithms generate smaller data

Real Time  Rush  weakened security

When in a Rush people do not observe rules and do not always follow processes

Contact Info w w w . o m N o v i a . c o m [email_address] Copyrights 2003 – 2008 confidential

w w w . o m N o v i a . c o m

[email_address]