1. Windows XP is
Coming to an End:
How to Stay Secure
Before You Migrate
Chris Merritt
Director of Solution Marketing

2. Introduction
2

3. Background
• Microsoft Windows XP End of Support is April 08, 2014
(146 days)
• Estimated 200M Enterprise WinXP Machines Worldwide
» 96% of US schools still running XP
» 72% of PCs in China still running XP
• Impact on Compliance
» FFIEC guidance – … identify, assess, and manage these risks to
ensure that safety, soundness, and the ability to deliver products and
services are not compromised.
» PCI-DSS v3.0 – Ensure that all system components and software are
protected from known vulnerabilities ….
• Impact from Supply Chain
3

4. Windows XP Usage
4
PROPRIETARY & CONFIDENTIAL - NOT FOR PUBLIC DISTRIBUTION

5. Windows XP Infection Rates
5
PROPRIETARY & CONFIDENTIAL - NOT FOR PUBLIC DISTRIBUTION

6. Windows XP Infection Rates
6
PROPRIETARY & CONFIDENTIAL - NOT FOR PUBLIC DISTRIBUTION

7. Strategy 0 – Ignore
Plan:
• Ignore EOS and Carry On
Pros:
• Reduced Cost / Effort
(for now)
Cons:
• Pwnage is Certain
• More Expensive Long-Term
Source: http://joshblackman.com/blog/wp-content/uploads/2011/11/bird.jpg
7

8. Strategy 1 – Isolate
Plan:
• Isolate WinXP boxes
Pros:
• Reduced Cost / Effort
Cons:
• User Productivity Hit
• Physical Attack Vector
Source: http://www.ida.liu.se/~g-robek/images/linguistics-AnechoicChamber_id.jpg
8

9. Strategy 2 – Extend
Plan:
• Get Premier Support from
MS for WinXP boxes
Pros:
• Push Off Migration
Cons:
• Expensive
• No Native OS Security
Improvements
Source: http://erstarnews.com/wp-content/uploads/2013/07/stack-of-money.jpg
9

10. Strategy 3 – Bandage
Plan:
• Apply AV Bandaid
Pros:
• Push Off Migration
• Better than Nothing
Cons:
• Pwnage is Certain
• More Expensive Long-Term
Source: http://jet-computing.com/wp-content/uploads/2010/12/patch-bandaid.png
10
PROPRIETARY & CONFIDENTIAL - NOT FOR PUBLIC DISTRIBUTION

11. Strategy 4 – Replace
Plan:
• Rip and Replace WinXP
[from OS only to entire box]
Pros:
• Latest & Greatest
Cons:
• Time / Cost / Effort
• End User Disruption
11

12. Other Options
• Windows 7 XP Mode
• Virtualization …
» with Microsoft MED-V
» with VMware or Citrix
• …
Source: http://www.cfpayne.com/images/buyPrints/Pleading-With-Computer.jpg
12

13. Strategy 5 – Lockdown
Plan:
• Add Application Whitelisting
Pros:
• Keep Existing Systems
• Prevent Unwanted Change
• Prepare for Wider Use
Cons:
• Still on WinXP
• Requires Some Planning
[time / cost / effort]
13

14. Application Whitelisting
Applications
Malware
Known
Authorized
Un-Trusted
• Operating Systems
• Business Software
14
• Viruses
• Worms
• Trojans
Unknown
Unauthorized
•
•
•
•
Games
iTunes
Shareware
Unlicensed S/W
•
•
•
•
•
Viruses
Worms
Trojans
Keyloggers
Spywares

15. More Information
Surviving WinXP EOS
https://www.lumension.com/windows-xp
» Whitepaper – learn how to stay secure before,
during and after your migration
» Free Application Scanner – discover all the
apps being used in your network
Whitepapers
» NSS Labs – Improving Windows Client
Performance and Security: Impact Comparison
of AC and Traditional AV
https://www.lumension.com/resources/freecontent/improving-windows-clientperformance-and-security.aspx
15
Get a Free Trial of
Lumension Application Control
https://www.lumension.com/
application-control-software/free-trial.aspx

16. Global Headquarters
8660 East Hartford Drive
Suite 300
Scottsdale, AZ 85255
1.888.725.7828
info@lumension.com