The document discusses the need to rethink traditional endpoint security strategies. It notes that the threat landscape has evolved, with intellectual property and sophisticated attacks becoming bigger risks. Traditional antivirus and threat-centric approaches are no longer sufficient. The document recommends implementing a trust-centric, defense-in-depth strategy with integrated technologies to reduce complexity. It emphasizes taking a holistic people, policy and technology approach to endpoint security.

1. RETHINKINGYour Endpoint Security Strategy Paul Henry | Security and Forensics Analyst

2. The Threat Landscape has Evolved…

3. Shift in Information that is Targeted Market for stolen data is saturated Then - Stolen personally identifiable information sold on the black market for up to $15 per record Now - Credit card data has dropped to about 20 cents per record New, more valuable target is now intellectual property (IP) Revenue-generating information Much larger impact and value – organization versus individuals 3

4. Data Breaches Impact Your Bottom Line 4

6. Now-PC and 3rd party apps are the biggest source of enterprise risk5

8. Rising Cyber Terrorism… Impact of WikiLeaks 7

10. Physical access through data ports

12. Sony

13. Stuxnet

14. RSA8

15. APT Example… Stuxnet 9

17. Social media opens the door to even more risk of social engineering

18. The applications we use for productivity open networks and information to risk

19. Removable devices provide easy access, data mobility and… risk if not managed* Ponemon Institute, Annual Cost of Data Breach 2011 10

20. Security Status Quo is No Longer Effective

22. Data protection practices

24. Only19% of new malware is detected on first day

25. 50% of IT professionals point to malware as the leading cause of rising endpoint TCO12

26. Traditional Endpoint Security Strategy Traditional “Threat Centric” Endpoint Security Is No Longer Relevant “Basic security protection is not good enough.” Rowan Trollope SVP BlacklistingAs The Core Endpoint Protection Volume of Malware “You can’t just rely on antivirus software – and we’re an antivirus company.” George Kurtz Worldwide CTO Zero Day MalwareAs a Service 3rd Party Application Risk 13

28. Increasing agent bloat

29. Increasing and costly back-end Integration

30. Lack of visibility and collaboration with IT security

31. Need for better accuracy

32. User access rights (Local Admin)

33. Lack of scalability

34. Silos and insufficient collaboration between IT and business operations* *Worldwide State of The Endpoint Report 2009 14

35. What’s the Impact to Your Business?

37. Decreasing visibility – disparate data

40. What apps are being used?

41. What devices are being used?

42. What user actions are concerning?

43. How is data being used?17

44. Increased Complexity & Risk. Increasing Cost Malware Signatures Increasing Malware Fractured Visibility Complex Technology Endpoint TCO Current Endpoint Security Effectiveness 2007: 250K Monthly Malware Signatures Identified 2011: 2M Monthly Malware Signatures Identified 18

45. Traditional Balancing Act 19 security productivity Vs.

46. Shift to a New Endpoint Security Approach

47. Key Strategies …to improve endpoint security and reduce complexity Rethink Endpoint Security from the Outside In Shift from “Threat-Centric” to “Trust-Centric” Approach Implement Defense-in-Depth Strategy Reduce Complexity through Integration and Standardization People, Policy and Technology Must All Play a Role in Your Strategy 21

48. Strategy 1: Rethink Endpoint Security Data has effectively moved away from the data- center to a borderless endpoint Cloud-based Computing Remote Offices & Subsidiaries Mobile Endpoints WAN Internet Start to view your IT security requirements from the outside-in and not the inside-out Corporate HQ Data Center 22

49. Strategy 2: Shift to Trust-Centric Security THREAT CENTRIC TRUST CENTRIC

50. Strategy 3: Implement Defense-in-Depth 24 Traditional Endpoint Security Defense-in-Depth AntiVirus Device Control Device Control Application Control Application Control BlacklistingAs The Core Patch & Configuration Mgmt. Volume of Malware Zero Day 3rd Party Application Risk MalwareAs a Service

52. Reduced integration and maintenance costs

53. Improved endpoint performance

54. Holistic endpoint visibilitySingle Console Agile architecture Disparate Architecture Single Promotable Agent Many Agents 25

55. All three are dependent on each other for effective and operational endpoint security. Strategy 5: People, Policy and Technology 26 policy technology people

56. Summary

58. Integrated platform

59. Single console

60. Single agent

61. Standardized processes

62. Proactive, real time

63. Continuous monitoring

65. Q&AFor more information come visit us at Booth #19 during these show hours:Tuesday, June 2111:45 a.m. – 1:45 p.m.Wednesday, June 22 12:00 p.m. – 1:30 p.m.

66. Global Headquarters 8660 East Hartford Drive Suite 300 Scottsdale, AZ 85255 1.888.725.7828 info@lumension.com