Prezentace z akce "Oracle Data Protection" Prezentoval Jaroslav Malina, Oracle, 19.4.2016

2. Copyright
©
2015
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
Note
to
presenters
The
focus
of
this
presentaBon
is
the
security
provided
by
SPARC/Solaris
servers
for
private
cloud
deployments.
Security
is
of
paramount
importance
for
any
deployment
and
certainly
for
private
cloud
deployments.
This
presentaBon
does
not
detail
all
of
Oracle’s
security
features
as
that
would
take
a
much
longer
presentaBon
but
focuses
on
the
SPARC
and
Solaris
parts
of
the
Oracle
red
stack.
You
need
to
point
out
that
Oracle
has
a
layered
security
story
but
this
presentaBon
focuses
on
just
a
couple
of
those
layers.
The
presentaBon
tries
to
educate
the
the
customer
as
to
the
nature
of
many
threats
and
follows
that
up
with
how
Solaris
on
SPARC
can
fix
many
of
those
threats.
The
goal
isto
show
that
securing
the
network
is
not
enough,
you
much
secure
every
layer.
Abuse
of
credenBals
is
a
vector
of
aPack
and
the
access
control
of
Solaris
can
dramaBcally
reduce
the
thread
of
stolen
credenBals.
Another
major
aPack
vector
is
aPacking
servers
that
are
mis-­‐configured
or
clearly
out
of
date
with
regards
to
patches.
Poor
patching
leaves
many
fixed
vulnerabiliBes
un-­‐fixed.
The
level
of
the
presentaBon
is
designed
for
sales
reps.
Hopefully,
this
presentaBon
will
generate
follow
up
discussions
to
drill
down
to
specific
security
capabiliBes
of
SPARC/Solaris
and
the
other
layers
of
the
stack.

3. Copyright
©
2014
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
The
“Security”
in
Oracle’s
Secure
Cloud
Infrastructure
Why
is
security
on
the
rise
?
Jaroslav
Malina
Senior
Channel
Sales
Manager
Oracle
Systems
CEE
North

4. Copyright
©
2015,
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
4
Market
Forces
Are
Driving
Change
Managing
and
Securing
Data
is
Crucial
40
Billion
Devices
3.8
Billion
Mobile
Users
24
ZeJabytes
of
Data
77
Billion
Datacenter
Cores
Market
Forces:
2014
-­‐2018
-­‐
IDC
Oracle
Briefing
Jan
2015
Security
Threat
#1:
Stolen
Privileged
User
CredenUals
Security
Threat
#2:
Unpatched
and
misconfigured
Systems
Security
Threat
#3:
Direct
Data
Access

5. Copyright
©
2015,
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
5
Has
Changed
Everything

6. Copyright
©
2015
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
Journey
to
Private
Cloud
Private
Cloud
• Security
• Self-­‐service
• Auto-­‐scaling
• Metering
&
chargeback
Consolidated
TradiUonal
Silos
• Physical
• Dedicated
• Heterogeneous
• Virtual
• Shared
• Standardized
Start with consolidation • Extend to private cloud • Secure the environment

7. Copyright
©
2015
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
NEJSTE
DOST
PARANOIDNÍ
?
hPps://www.privacyrights.org/data-­‐breach
7

8. Copyright
©
2015
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
200M
Experian
Mar
‘14
150M
eBay
May
‘14
22M
EducaBon
July
‘14
SA
Banks
OCT
‘13
Credit
Cards
150M
+
Code
Adobe
Oct
‘13
98M
Target
Dec‘13
20M
Credit
Bureau
12M
Telecom
Jan
‘14
56M
Home
Depot
Sep
‘14
ImmigraUon
June’14
Personal
Records
76M
JPMC
Oct
‘14
The
Age
of
Mega
Breaches
8
Copyright
©
2015,
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
53M
Sony
Dec
‘14
227M
80M
Anthem
Feb
‘15

9. Copyright
©
2015
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
82%
of
APacks
Are
User,
System,
or
Database
VulnerabiliBes
9
Abuse
and
misuse
of
credenBals
Poorly
configured
systems
Un-­‐patched
systems
Unprotected
Data
50%
19%
13%
82%
Source:
2014
Verizon
DBIR
• Many
2014
aPacks
used
old
vulnerabiliBes
• Fixes
published
many
years
prior
to
2014
• Fixes
not
deployed
due
to
patching
difficulBes

10. Copyright
©
2015
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
Risks
are
Outside;
VulnerabiliBes
Within
10

11. Copyright
©
2015
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
How
the
Sony
Breach
Changed
Security
Not
once
but
twice!
11

12. Copyright
©
2015
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
Threat
#1:
Stolen
Privileged
User
CredenBals
12
100%
Of
invesBgated
data
breaches
involved
stolen
credenBals

13. Copyright
©
2015
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
Threat
#2:Unpatched
and
Misconfigured
Systems
13
99.9%
Of
the
exploited
vulnerabiliBes
were
compromised
more
than
a
year
aker
the
fix
was
published

14. Copyright
©
2015
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
14
Fixes
are
not
being
applied
Fixed
VulnerabiliBes
SBll
Exposed
74%
OF
ORGANIZATIONS
TAKE
3
MONTHS+
TO
PATCH
Source:
Verizon
Data
Breach
InvesBgaBons
Report,
2015;
IIOUG
Data
Security
Survey,
2014
Breaches
in
2014
and
Year
Fixed

15. Copyright
©
2015
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
Threat
#3:
Direct
Data
Access
15
$194
The
average
cost
per
record
stolen
in
a
data
breach

16. Copyright
©
2015
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
0%
10%
20%
30%
40%
50%
60%
70%
80%
Database
Network
ApplicaBon
Middleware
52%
34%
11%
4%
15%
67%
15%
3%
Source:
CSO
Online
MarketPulse,
2013
IT
Execs
Consider
Most
vulnerable
IT
OrganizaBons
Are
Over-­‐InvesBng
in
Technologies
that
Don’t
Directly
Protect
Databases
Resource
allocaBon
Only
24%
of
breaches
are
stopped
by
network
security

17. Copyright
©
2015
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
17
SECURING THE COMPLETE STACK INSIDE
OUT SAVES TIME, MONEY AND REDUCES RISK
MiUgates
credenUal
abuse/
misuse
Patching
done
right
End-­‐to-­‐End,
always
on
cryptography

18. Copyright
©
2014
Oracle
and/or
its
affiliates.
All
rights
reserved.
|
18