1. Investasi (1).ppt untuk masa depan dan pelajarannya bagi generasi muda

1. The Leader in Application Data
Security and Compliance
Thomas Drews, SE CEEU

2. - CONFIDENTIAL -
3
Security and Compliance Requirements
 Full Visibility
 Who is accessing your data?
 Who has accessed your data?
 Granular Controls
 Who is attacking your data and how?
 Is your data leaking outside the organization?
 How do you protect your data?
Imperva delivers the industry’s most robust and
widely deployed solution for addressing the entire
application data security and compliance lifecycle.

3. Web/Web services
Applications
Monitoring & Protecting Data
Browser
DBA
Thick Client
2 Tier App
Thin Client
3 Tier App
Application
Interface
SQL
Data

4. - CONFIDENTIAL -
5
Imperva Overview
 Founded in 2002
 The leader in Application Data Security and Compliance
 Global company with int’l revenue consisting of 40%+
 North American HQ in California; International HQ in Israel
 Local presence in all major markets (EMEA, APAC, Japan)
 Customers in 30 countries
 Strong global network of channel partners
 600+ customers and over 4500 organizations protected
 Shlomo Kramer, CEO & President
 One of 3 founders of Check Point

5. - CONFIDENTIAL -
6
SecureSphere Dominates Awards
Imperva Wins eWEEK
Excellence Award
“Imperva SecureSphere’s … in-line
protection for both Web applications
and communications with back-end
databases is simply unmatched.”
Editor’s Choice for
Database Extrusion
Prevention
“Right from the start, the Imperva
SecureSphere Database Security
Gateway impressed us with its plethora
of features…dynamic user profiling is
almost reason enough to choose it.
Editor’s Choice
for Web Application
Firewalls
“From beginning to
end, Imperva
SecureSphere is our
kind of WAF.”
“Imperva's SecureSphere
Database Security Gateway is
a win on both counts. It did a
fine job learning our user
behavior, and numerous
signatures let it handily block
known attacks.”
Imperva Wins
2007 Readers’
Choice Award
from Security
Magazine
“SecureSphere scored well in
every criteria: granularity of
access controls and integration
with existing infrastructure,
scalability and management…”

6. - CONFIDENTIAL -
7
Set Policies/Controls
• Set policies automatically and
quickly
• Keep up with changes
• Configurable policies and controls
based on situation
Monitor and Enforce
• Ensure separation of duties
• Ensure end user accountability
• Capture full details
• Provide security at all layers
• Alert/block in real-time
Measure
• Built in compliance reports
• Roll-up & drill down of data
• Security event analysis
Assess
• Test database configuration according
to standards
• Evaluate inherent risks
• Discover who uses the data
and what do they do?
Achieving Data Security & Compliance
IMPERVA
ADDRESSES
THE
ENTIRE LIFE
CYCLE

7. Protection Approaches (WAF)
 „Postive“ Security
 Protection from unknown
threats and vulnerabilities
 PROFILING of Applications
 „Negative“ Security
 Protection from known
threats and vulnerabilities
 Protocol Validation
 Signatures

8. Efficient Deployment and Operations
No Impact to IT, Easily Managed, Low TCO

9. Imperva SecureSphere Product Line
- CONFIDENTIAL -
14
ADC Insights
Database Monitoring
Gateway
Database Monitor
Agent
Management
Server (MX)
Web
Database
Internet
Database
Security Gateway
Web Application
Firewall

10. • Non-Inline Deployment
• Reverse Proxy Deployment
• Inline Bridge Deployment
Flexible Deployment Options
 Transparent Inline Bridge
 Supports full enforcement
 High performance, low latency
 Fail-open interfaces
 Transparent & Reverse Proxy
 High performance for
content modification
 URL rewriting, cookie signing,
SSL termination
 Non-inline Deployment
 Primarily for monitoring, zero network latency
Switch
SecureSphere
Data Center
SecureSphere

11. Unified, Scalable Management
Centralized administration
 Manages all devices from a single console
 Integrated auditing and reporting
 Easy deployment of new appliances
 Appliances auto-configured by MX server
 Task-oriented workflows
Hierarchical policy management
Granular role-based access control
Web browser interface
MX Management
Server
SecureSphere Appliances
Browser
Interface

12. Introducing SecureSphere
 Only complete solution for
enterprise data that includes:
 Data activity monitoring
 Real-time data protection
 Full visibility and granular control of data usage
 From end user through application and into database
 Full stack protection
 Unmatched ease-of-use and ease-of-deployment

13. SecureSphere Product Line
Gateway Models G4 G8/Crossbeam G16 FTL
Throughput 500MB/Sec 1GB/Sec 2GB/Sec
Max TPS (HTTP/SQL) 16k/50k 24k/100k 36k/200k
Recommended Web Servers 50 100 200
Form Factor 1U
FTL Model: 2U
1U
FTL Model: 2U
2U
Deployment mode Bridge, Router, Proxy
or Monitor
Bridge, Router, Proxy
or Monitor
Bridge, Router, Proxy
or Monitor
Max Inline Bridge Segments 2 2 2
Max Routing Interfaces 5 5 5
Management Interfaces 1 1 1
High Availability Fail Open, IMPVHA,
VRRP
Fail Open, IMPVHA,
VRRP
Fail Open, IMPVHA,
VRRP
Fault Tolerance Available Available Yes

14. Demo
Imperva, Inc.
950 Tower Lane, Suite 1550, Foster City, CA 94404
Sales: +1-866-926-4678 www.imperva.com

15. Demo-Setup
SuperVeda (IIS + MS-SQL)
SecureSphere
(single-box)
DB-Agent
Browser
SQL-Tools
mgmt
data