Webinar hiware

netand.info
How to Manage IT Infrastructure for Remote
Access in the Age of COVID-19
AP Webinar

Copyright NETAND Co., Ltd. All rights reserved.
Contents
HIWARE, an integrated IAM solution which has adopted the latest technologies such as artificial intelligence and cloud,
is the flagship product of NETAND that has developed various solutions with the best technology.
01
02
03
04
Company Introduction
Solution Overview
Product Introduction
Reference

1. Company Overview
2. Profit History
3. HIWARE History
4. Marketing Vision
1. Company Introduction

Copyright NETAND Co., Ltd. All rights reserved. 4 47
A Complete IAM(Identity and Access Management) Solution
specialized in Asia Security Standard.
Company Overview01
HQ and R&D center in Seoul, Korea
R&D center in Silicon Valley , USA
13Years
Experiences
121
Employees
1
In Korea
`1200+
Customers
Platform & Service provider for
Infrastructure Security management
Number

Company Overview01
85%
RnD
RnD
Consulting
Customers
Partners
Sales
Marketing
HQ and R&D
Seoul, Korea
R&D center in
Silicon Valley, USA
Knowledge Data
Customer Experience
Customer Needs
Tech-people

Profit History02
Revenue Net Profit
8.23%
3 years Average
8.23%
Average net
Profit for
Last 3 years
9.09%
FY 2018’
Net Profit
No. 1
In Korea
45%
6 years CAGR
(million$)USD1$=KRW1,100Won
45%
6 years CAGR
Proven of Growth and Profitability

Profit History02
License Maintenance Cloud
Cloud Service opened end of 2017’
Total: 40 customers
(million$)USD1$=KRW1,100Won
Revenue model is on premise solution, License fee and Maintenance fee
Cloud service started from end of 2017

Consistent Growth and Development
8 47
HIWARE History03
2007 Started 2009 2011
Access Management ver.1.0 Access Management ver.2.0 Identity Management ver.1.0
2012 Total IAM 2013 Entered Global 2014
Total IAM platform ver.1.0
- HIWARE 4.0
Oracle Open World San Francisco
Oracle Open World Shanghai
China Xian Samsung
HIWARE 5.0
Hyundai Motors Turkey and India
China Suzhou Samsung
2015 Southeastern Market 2016 R&D center in US
Southeast Asia Market
INT’L SOFT CHINA
Global Security Philippines Expo
Philippines Smart Communications
R&D Center in U.S
ACLEDA BANK Cambodia and Laos
Hyundai Motors Mexico
2017 Cloud Service 2018 HIWARE 6.0 for Global
Acquired 2 Patents
AWS open
HIWARE 6.0 (Global)
Acquired 3 Patents
CDIC 2018 in Thailand
PT.IONPAY Networks Indonesia

1. Background
2. Concept of IAM
3. AS-IS & TO-BE
2. Solution Overview

Security Threats in the age of COVID-19
As recently various security threats by COVID-19, the demand of telecommuting has been increasing.
As a result, it would lead for malicious users illegally to access corporate infra assets from a vulnerable remote environment.
Background01
The indicator of searching of ‘Remote Work’
SK Infosec EQST, 2020
Google Trends, 2020
9.7%
Year
2020
2019
JAN FEB MAR ¼ Average
The indicator of searching of ‘Remote Work’
Statistics of cyber attacks
Statistics of cyber attacks

Security Threats in the age of COVID-19
As recently various security threats by COVID-19, the demand of telecommuting has been increasing.
As a result, it would lead for malicious users illegally to access corporate infra assets from a vulnerable remote environment.
Background01
Examples - Information Security Incident
Insufficient use of remote working system (VPN)
Incomplete management of account and access permission for
telecommuters
No remote access monitoring
Insufficient environment for session block when the user is
absent
Impossible detection for access & work history by users
Incident
From home office
Difficulty in analyzing causes of security incidents and
slow recovery to normal operation

What is identity?
Concept of IAM02
User
SAM FILE
SAM FILE
SAM FILE
SAM FILE
Linux Server
Windows Server
AIX Server
HP Server
12 47

02 Concept of IAM
Linux Server
Windows Server
AIX Server
HP Server
Integrated ID
Database
Identity Management
Solution
User
13 47
What is identity?

02 Concept of IAM
Integrated ID
Database
AM 이미지
Identity Management
Solution
Access Management
Solution
ID/PW
Linux Server
Windows Server
AIX Server
HP Server
User
14 47
What is authentication?

02 Concept of IAM
Integrated ID
Database
AM 이미지
Identity Management
Solution
Privileged Access
Management Solution
ID/PW OTP
Linux Server
Windows Server
AIX Server
HP Server
User
IP/MAC
15 47
What is advanced authentication?

02
Manager
Developer
Illegal User
ID/PW
ID/PW
Linux Server
Windows Server
AIX Server
HP Server
Integrated ID
Database
OTP
OTP
IP/MAC
IP/MAC
Identity Management
Solution
Privileged Access
Management Solution
Concept of IAM
16 47
How to enhance security in IT infrastructure?

03 AS-IS & TO-BE
AS-IS
Windows Network
Security
devices
Unix/
Linux
Oracle
Ms-sql
Mysql
Windows
Windows
AD
ID/PWD
authentication
ID/PWD
authentication
System operators from most of customers are accessing target equipment
with basic authentication only. Passwords are also incompletely managed.
The current situation can lead to control the access and behavior of illegal
users insufficiently.
Administrator
Users
Outsourced
users
Retired
users
17 47

03 AS-IS & TO-BE
Approval server
OTP server
SMS server
HR DB
DR server
ID/PW
IP/MAC
Two
factor
External
RDP | Telnet | SSH | FTP | SFTP
Identity &AccessManagement
Windows
N/W
devices
Security
devices
Unix/
Linux
Oracle
Ms-sql
Mysql
AD
Windows
Windows
Manage ID life-cycle
Detect
Unauthorized ID
Manage password
automatically
Create
System ID
TO-BE
HIWARE is integrated IAM solution to control access to target equipment
by users and to manage ID lifecycle in operation. By HIWARE,
unauthorized users will be blocked and unclear ID can be dealt with
processing policy under ID policy. By interworking other system, work
process can be more efficient and secured.
Administrator
Users
Outsourced
users
Retired
users
Block
18 47

Success
Case
Success Case04
1000
In this case, both DBMS Privileged Access management solution and identity management solution are established together and they are integrated with
diverse authentication DBMS to strengthen security and improve stability through dualization of gateways. Also, the solutions are integrated with the client’s
existing in-house DBMSs such as HR DBMS, approval DBMS, and the server for managing automation to implement a single interface and enhance
convenience of use and efficiency at work at the same time.
User Target
device
User No. of Equipment Server 1500 / N/W 12000 / DB 500
Functionality
- IP / MAC authentication
- SMS OTP double authentication
- History management of major query
- Users’ Access authority control by DBMS account
- Controlling authorities over SU login to public
accounts based on the policy of personal account
- NT account management through AD account
management
- Simultaneous management of NT local accounts
- Manual password change of the person responsible
for public accounts
- Randomly changing root accounts at once
- Using one time passwords for root accounts
- Manual change of personal accounts
- Locking inactive accounts
- Locking ghost/broken accounts
- Locking and deleting Retired employees’ accounts
- server security configuration (Red Castle)
- NT server : Applying local security policies (IP-SEC)
Access
control
interworking
GATEWAY
HA configuration
Administrator
Users
Partners
WINDOWS server
LINUX/UNIX server
network
DR server
Gateway #1
Gateway #2
DBMS #1
DBMS #2
E-mail server SMS server AD
server
Approval
DBMS
H.R DBMS
Category
Policy of user
authentication
query control
Management
of
personal/publi
c accounts
NT account
management
Password
management
Management
of illegal
accounts
Blocking
Access
through
bypassing
AD
IP/MAC
SMS
OTP
Authentication
DBMS GATEWAY
Oracle,
Ms-sql,
MariaDB
VPN Client
VPN Client
VPN Client
VPN Client
Customer

1. Product Line-up
2. Solution Strength
3. IAM for System
4. IAM for DB
5. IM for AD
3. Product Introduction

NETAND., Ltd. of the top-tier technology and variety of experience supplies HIWARE, a package of integrated Identity and Access
Management(IAM) which consists of seven products managing security of IT infrastructure and systems of companies and institutions.
02
1. HIWARE PrivilegedAccess Management for System v6.0
2. HIWARE Identity Management for System v6.0
3. HIWARE PrivilegedAccess Management for Database v6.0
4. HIWARE Identity Management for Database v6.0
5. HIWARE Identity Management for Active Directory v6.0
6. HIWARE Mobile One Time Password v6.0
7. HIWARE ThreatAnalytics v6.0
StandardScalable
Product Line-up

Making work environment smarter and more stable
Solutions have to change, following rapidly changing business environment and IT infrastructure. HIWARE is the next Access control solution
which perfectly supports not only users’ work environment but also diverse IT infrastructure such as cloud and network segmentation.
Create a smart work environment in a rapidly changing IT environment under security threat without concerns about security.
03
User Environment
Cross browsing Multi-languages
Windows / MAC IPv6
Infrastructure
Network segmentation
Cloud environment
Work Internet
Auto-scaling, Processing Tag
Solution Strength

HIWARE is integrated IAM solution to control access to target
equipment by users and to manage ID lifecycle in operation. By
HIWARE, unauthorized users will be blocked and unclear ID can
be dealt with processing policy under ID policy. By interworking
other system, work process can be more efficient and secured.
04
HIWARE Identity Access Management for System v6.0
IAM for System Identity & Access Management for System
Access
Management Access
management
Session
Management
Command
Control
Logaudit
Basic
Multi-factor
Integration
ID/PW, IP/MAC, MOBILE OTP
SMS, OTP, Smart-card, RADIUS
LDAP *Provide API for integration
Authentication
Management
Identity
Management Life-Cycle
Management
Password
Management
Accountpolicy
Management
Detect
illegalaccount
Inter
work
Block
Administrator
Staff
Outsource
Retiredstaff
WINDOWS
server
UNIX/LINUX
server
Network
Security devices
Approval server
OTP server
SMS server
HR DB
DR server
ID/PW
IP/MAC
Two
factor
External
RBAC
Identity & Access Management Solution
RDP | Telnet | SSH | FTP | SFTP
Authority
Access
Identity
Access
Management
Identity
Management

ID/PW login
24 47
Unifying access channel
API for integrating diverse
authentication
IP/MAC address authentication
Optional additional OTP
authentication
Supporting combination of
diverse authentication types
(RSA, accredited certificate,
LDAP, etc.)
Login
2 Factor Authentication
basic
Two-factor
external
SMS, OTP, SSO, Smart card, RADIUS, PKI, biometrics, etc.
LDAP, etc.
*Providing api for integration
Mobile Authentication v1.0
Clientscansavethecosttoestablishasecuritysolutionsinceweprovide amobile
OTPproduct thatwedeveloped byourselves
Retired
employee
H.RDB
A user tries to
access
Retired employee’s try to
access
Integration with H.R DB
Impossible to access automatically after
retired company/ notifying the threat
IP/MAC
authentication
2 factor
authentication
Automatic login to
equipment
IAM for System04
Enhance user authentication
- Support Android/IOS - Support off-line environment
Retired
employee
management
Administrator
Retired
employee
Block Notify
Identity & Access Management for System
User
server#1
server#2

Equipment
25 47
04
Auto
Login
Auto
Login
User
FARM #1
FARM #2
FARM#1 User
FARM#2 User
Access authority control by
user
Stronger authentication (Two
Factor)
Access time control
Automatic login to system
Feature to Access by network
Support IPv6
IAM for System
System Access authority control
Basic
authentication
Two-factor
authentication
Basic
authentication
Two-factor
authentication
User’ Equipment Tree Auto Login

System command control
IAM for System04
Inputting
command
prohibited command
Processing depending on command policies
Warning Massage
Not accept
command
Block if many times of
attempts to input
Notification
Access for
approval
Filling request
form
Request
approval
Administrator’s
approval
Using the command
within a period
The command is
executed.
Worker
Permitted
commands
Important
commands
Prohibited
command
Exceptions
Risky
user
Equipment
Prevent
User’s mistake
Permitted
command
Important
command
Immediately
accepted
Warning!
Bad Command!
Access Denied Administrator
Command control
(permitted/prohibited)
Monitoring/blocking
/notification of commands
Requesting approval of
important commands
Exception commands by
period
Block risky command
Command usage history
Confirmation text Accepted
User
Time
Device
Command Administrator
Possible to use
the requested
command

Real-time session monitoring / control
IAM for System04
Real-time session statistics
Real-time event monitoring
Real-time session monitoring
Real-time Access monitoring
Event monitoring
Forced block user session
Real-time dashboard
Session timeout

Monitoring all events after access
28 47
System log / audit
IAM for System04 Identity & Access Management for System
Logging
Auditing
Detailed history managementLogging audit information
Provide various search
filters
Access history by user
Change history by device
Usage history by
command
History of work details
Auditing variety of work details
Logging audit
information
Searching
diverse history
Logging information of
auditing work details
Diverse statistics and audit
reports
Store compressed
system logs
Various search filters
Statistics by user/
device/command
Provide saving options by
time/event
[TEXT audit] Displaying texts by
command
[Video audit] Displaying video by
command
[Dashboard] Multivariate statistics
Auditing work details in real time
device
Working
user

Automatic collection/
synchronization of accounts
29 47
ID life-cycle policy management
IAM for System04
Provisioning management
(create/change/delete)
Suspension in Implementing
policies
Handling accounts at once
Personal setting
(password / unlock)
Requesting a new
account
Providing solutions to
normalize accounts depending
on their status
Tracking down change history
by account
Limited approval
Creating/ using the
account
Setting up account
policies
Policy-based automatic
account management
Management of account modification / password
change
Monitoring Retired employees’
accounts / illegal accounts
Automatically finding/deleting /
notifying Retired employees’/
illegal accounts
Worker
Automatic
provisioning
AUTO
delete notify
Retired
employee
Equipment#1
Account takeback / Deletion Change account / password
Account creation Policy management
Administrator
Administrator Administrator
PW change
Usage period
Usage authority
Equipment#2

Password complexity
management
30 47
Password policy management
IAM for System04
Management of password
change frequency
Automatic/manual/random
change of passwords
Password management report
Password change history
management
Managementof risky passwords
of privilegedaccounts
Collectingand verifying
passwordsecurity policies by
system
Setting up
password policies
Automatic change of passwords
based on policies
Automatic provisioning
of accounts
Reporting change
history
Efficiency
in managing passwords
Security of passwords Password management
report
Automatic change
Automatically changing on a
scheduled date
Manual change
Directly changing by booking
change on a certain date
Bulk change
Changing all passwords at
once
One time password
Using one time passwords
Random change of
passwords
Randomly changing by
setting up complexity
Setting up complexity
of passwords
Numbers, capital letters,
special characters, etc.
Password management
report
(The report that passwords can
be viewed)
Password change
history
report
History of viewing
passwords
Report on the history of
viewing passwords

HIWARE is integrated IAM solution to control access to target
equipment by users and to manage ID lifecycle in operation. By
HIWARE, unauthorized users will be blocked and unclear ID can
be dealt with processing policy under ID policy. By interworking
other system, work process can be more efficient and secured.
05
HIWARE Identity Access Management for DBMS v6.0
IAM for DBMS Identity & Access Management for DBMS
DR server
Foreign
HR DB SMS server
OTP server
Approval server
Administrator
Staff
Outsource
Retired staff
Block
ID/PW
IP/MAC
Two
factor
Inter
work
Access
Management
Identity
management
RBAC
DB Connector
Authority
Access
Account
MySQL
MS-SQL
Oracle
Access
Management Access
management
Session
Management
Query
Control
Logaudit
Basic
Multi-factor
Integration
Authentication
Management
Identity
Management
Password
Management
Accountpolicy
Management
Detect
illegalaccount
Identity &AccessManagement

DBMS
32 47
05
DBA
Administrator
Oracle
MS-SQL
Oracle DBA
MS-SQL DBA
Access authority control by
user
Reinforce authentication (Two
Factor)
Access time control
IAM for DBMS
DBMS Access authority control
Basic
authentication
Two-factor
authentication
Basic
authentication
Two-factor
authentication
Identity & Access Management for DBMS
User’ Equipment Tree

DBMS query control
IAM for DBMS05
Inputting a query
Inputting a prohibited
query
Processing depending on query policies
Warning Massage
The query is not
accepted.
Blocked if N times of
attempts to input are made
Notification to an
administrator
Access for
approval
Filling in
a request form
Requesting
approval
Administrator’s
approval
Using the query
within a period
The query is
executed.
Worker
Permitted
query
Prohibited
query
Exceptions
suspect
user
Preventing
a security incident
caused by a user’s
mistake
Permitted
query Immediately
accepted
Warning!
Bad query!
Access Denied Administrator
query control
(permitted/prohibited)
Managing monitoring/
blocking/notification of query
Requesting approval of
important query
Managing query usage history
User
Time
DBMS
query Administrator
Possible to use
the requested
query
DBMS

IAM for DBMS05 Identity & Access Management for DBMS
Privileged Access Management for DBMS
5
1
4
2
3
Control large volume data
Control data inquiry number
Masking sensitive data
Notification to administrator
Control result data(1/2)

Passport_number name Passport_number
User1
User2
User3
…
Privileged Access Management for DBMS
Control result data(2/2)

Control DB tool
DBMSDBA
Administrator
DBMS #1
DBMS #2
Oracle DBA
MS-SQL DBA
Control DB tool to use
Prevent using DB tool that
have license
Notification to administrator
Basic
authentication
Two-factor
authentication
Basic
authentication
Two-factor
authentication

Monitoring all events after Access
37 47
DBMS log / audit
Logging
Auditing
Detailed history management
Logging audit information
of work details
Providing various search
filters
Access history by user
Change history by DBMS
Usage history by query
History of work details
Auditing variety of work details
Logging audit
information
Searching
diverse history
Logging information of
auditing work details
Diverse statistics and audit
reports
Various search filters
Statistics by user/
DBMS/query
Inquiry query result
Auditing work details in real time
DBMS
Working
user
[Audit Log]
Confirming access and query log
[Dashboard] Multivariate statistics

Automatic collection/
synchronization of accounts
38 47
IAM for DBMS05
(create/change/delete)
Suspension in Implementing
policies
Handling accounts at once
Personal setting
(password / unlock)
Requesting a new
account
Providing solutions to
normalize accounts depending
on their status
Tracking down change history
by account
Limited approval
Creating/ using the
account
Setting up account
policies
account management
change
Monitoring retired employees’
accounts / illegal accounts
Automatically locking /deleting /
notifying retired employees’/
illegal accounts
Worker
Automatic
provisioning
AUTO
delete notify
Retired
employee
Account takeback / Deletion Change account / password
Administrator
PW change
Usage period
Usage authority
DBMS#1
DBMS#2

Password complexity
management
39 47
IAM for DBMS05
change frequency
change of passwords
Password management report
management
Setting up
password policies
Automatic change of passwords
based on policies
Automatic provisioning
of accounts
Reporting change
history
Efficiency
Security of passwords Password management
report
Automatic change
Automatically changing on a
scheduled date
Manual change
Directly changing by booking
change on a certain date
Bulk change
once
Random change of
passwords
Randomly changing by
setting up complexity
of passwords
Password management
report
(The report that passwords can
be viewed)
Password change
history
report
History of access
passwords
viewing passwords

HIWARE Identity Management for Active Directory v6.0
HIWARE Identity Management for AD collects accounts
from multiple domains and automatically manages
account life cycle and passwords from creation to
deletion according to policy.
IM forAD06
Block
Administrator
Employee
Partner
Retired
Approval server
OTP server
SNS server
HR DB
DR server
Password
Auto-management
Create Account
Account Life-cycle
Management
Windows
server
Windows
server
AD
Domain#1
AD
Domain#2
Identity Management forActiveDirectory
Unauthorized account
Detection
Provisioning
Collect
Accounts
Audit
Report
Policy
Setting
Multiple
Authentication
interworking
Identity Management for AD
Basic
Multi-factor
Integration
Authentication
Management
Identity
Management
Password
Management
Accountpolicy
Management
Detect
illegalaccount

IM forAD06 Identity Management for AD
Worker
Automatic
provisioning
AUTO
delete notify
Retired
employee
Collecting / deleting accounts Account/password change
Administrator
PW change
Usage period
Usage authority
Domain#1
Domain#2
(Create/Modify/Delete)
Bulk processing
Self-Service
(Password/ Release locked)
Detecting the change
history of accounts
Manual/automatic accounts
collection/synchronization
Requesting a new
account
Authorization
processes
Creating using the
account
Setting up account
policies
Account management
change
Monitoring Retired employees’
accounts / Misuse accounts
Automatically locking / notifying
Retired employees’ unauthorized
accounts

IM forAD06 Identity Management for AD
Password complexity
management
change frequency
change of passwords
Password management
report
management
Setting up
password policies
Automatic change of passwords based on
policies
provisioning of
accounts
Reporting change
history
Automatic change
Automatically changing on
a scheduled date
Efficiency
Security of passwords
Password management
report
Manual change
Changing the password
by scheduling a change date
Bulk change
once
of passwords
Password management
report
(The report that passwords
can be viewed)
report
History of access
passwords
viewing passwords

1. In Domestic market
2. In Overseas market
4. Reference

Domestic market01
Reference in domestic market

Domestic market01
중앙연구원 울진원자력본부
Reference in domestic market

Overseas market02
USA
Branch office in USA
R&D Center
Mexico
Hyundai- Kia Motors
Turkey
Hyundai- Kia Motors
Korea
Head office in KOREA
R&D Center
China
Samsung Electronics
SK Hynix
Hyundai- Kia Motors
Vietnam
Shinhan Bank
NICE INFO VIETNAM
Philippines
Smart Communications
BPI bank
1,200+ customers in global market
India
Hyundai- Kia Motors
Laos
ACLEDA BANK
Cambodia
ACLEDA BANK
Indonesia
PT.IONPAY Networks
Reference in overseas market

Webinar hiware

Recommended

Recommended

More Related Content

What's hot

What's hot (7)

Similar to Webinar hiware

Similar to Webinar hiware (20)

Recently uploaded

Recently uploaded (20)

Webinar hiware