Learn how security solutions built into Intel® Core™ vPro™ processors address top threat vectors. Our comprehensive approach to hardware-enhanced security starts with identity protection with Intel® Authenticate delivering customizable multi factor authentication options, and supports remote remediation with Intel® Active Management Technology.

1. Don’t rely on Software alone …
Protect Endpoints with Hardware-Enhanced Security
Yasser Rasheed
Global Director of Endpoint Security, Intel Corporation
October 2, 2017

2. Intel® Confidential 2
Security is a growing concern; are
you protected?“There are only two types of companies: those that have been hacked,
and those that do not know they’ve been hacked.” ~ Robert Mueller, ex-FBI Director
1,378,50
9,261Number of data records
compromised in 20163
$141 per
recordThe average cost per
lost or stolen data
record in 20172
31,000,000Of hacking-related
breaches involved
stolen and/or weak
passwords1
81%
4.2%
In only 4.2% were
encryption was used and
the stolen data was
rendered useless.3
Of incidents result from
exploits in software490%
1.8%
Severe data breaches
have caused an
average fall in share
prices, on a permanent
basis6
New malware counts grew from
24M in Q4’16 to 31M in Q1’175
1: Verizon 2017 Data Breach Investigations Report
2: Security Intelligence, Cost per record
3: 2016 Gemalto Breach Statistics
4: CSO, Application Security Research, US Department of Homeland Security
5: McAfee, June 2017 Quarterly Threat Report
6: Fortune, Cyber Breach Shareholder Damage

3. Intel® Confidential
The anatomy of a breach …
3
CIO/CISO priorities:
• Identity protection
• Data protection
• Threat detection/prevention
• Recovery from breaches
HARDWARE-BASED SECURITY CHANGES THE GAME

4. Intel® Confidential 4
Why Hardware-based security?
TH E FIR MWAR E LAYER
THE SOFTWARE LAYER
TH E SILIC ON LAYER
• Creative and open by design
• A more visible surface for tampering
• Tightly closed by design
• Farther from sight, further from reach
• Talks to software, but hides things
• Makes tampering far more difficult

5. Intel® Confidential 5
Intel® Vpro™ Platform-optimized
Security Stack
Secure Platform Foundation
(CSME, VT, TXT, SGX, Bios Guard, Boot Guard, etc)
Threat
Coming soon!
Data
Intel® Data Guard*
HW-based, IT-policy managed,
File & folder encryption
Identity
Intel® Authenticate
HW-based, IT-policy managed,
Multi-factor Authentication (MFA)
Recovery
Intel® AMT Advanced Recovery
Quick reset to known configuration
Remote recovery automation
Comprehensive
End-Point Security
Rooted in Intel’s Hardware
(Designing out Software Attacks)
* Tech Preview

6. Intel® Confidential 6
Intel® Authenticate
Hardware-based, IT policy-managed, multifactor authentication solution
IO MEMORY NETWORK DISPLAY
HARDWARE
OPERATING SYSTEM
APPLICATIONS
NetworkDevices
Console
IT ConsoleOS & Domain
login
VPN login
Client
Intel® Authenticate
BiometricsLocation
Bluetooth
ProximityPIN
- SCCM
- Active Dir.
McAfee ePO
Walk-
Away
Lock
User Presence
IT Policy
(plugins)
• Critical security processes performed below the OS
• IT policies securely provisioned, stored and enforced in HW
• Virtual smart card authentication for end-to-end protection
Intel® Authenticate protects factors, credentials, policies, and decisions in hardware

7. Intel® Confidential 7
Intel® Authenticate Deployment
Overview
Policy
Management
Console
Install Intel®
Authenticate
Software Package
www.intel.com/authenticate
Client Mobile Phone
- SCCM
- Active
Directory
- McAfee
ePO
Biometrics LocationBluetoothPIN

8. Join US:
www.intel.com/endpointsecurit
y