INFORMATION PROTECTION

Transcription

1 INFORMATION PROTECTION Johan Celis Principal Security Consultant Symantec Benelux

2 SYMANTEC ENTERPRISE SECURITY STRATEGY Users Data Cyber Security Services Monitoring, Incident Response, Simulation, Adversary Threat Intelligence Apps Threat Protection Information Protection ENDPOINTS DATA CENTER GATEWAYS DATA IDENTITIES Cloud Gateways Advanced Threat Protection Across All Control Points Built-In Forensics and Remediation Within Each Control Point Integrated Protection of Server Workloads: On-Premise, Virtual, & Cloud Cloud-based Management for Endpoints, Datacenter, and Gateways Integrated Data and Identity Protection Cloud Security Broker for Cloud & Mobile Apps User and Behavioral Analytics Cloud-based Encryption and Key Management Unified Security Analytics Platform Endpoints Data Center Log and Telemetry Collection Integrated Threat and Behavioral Analysis Unified Incident Management and Customer Hub Inline Integrations for Closed-loop Actionable Intelligence Regional and Industry Benchmarking

3 SYMANTEC ENTERPRISE SECURITY STRATEGY Users Data Cyber Security Services Monitoring, Incident Response, Simulation, Adversary Threat Intelligence Apps Threat Protection Information Protection ENDPOINTS DATA CENTER GATEWAYS DATA IDENTITIES Cloud Gateways Advanced Threat Protection Across All Control Points Built-In Forensics and Remediation Within Each Control Point Integrated Protection of Server Workloads: On-Premise, Virtual, & Cloud Cloud-based Management for Endpoints, Datacenter, and Gateways Integrated Data and Identity Protection Cloud Security Broker for Cloud & Mobile Apps User and Behavioral Analytics Cloud-based Encryption and Key Management Unified Security Analytics Platform Endpoints Data Center Log and Telemetry Collection Integrated Threat and Behavioral Analysis Unified Incident Management and Customer Hub Inline Integrations for Closed-loop Actionable Intelligence Regional and Industry Benchmarking

4 BACK TO THE BASICS TO RE-IMAGINE INFORMATION PROTECTION Where is it? Who Has Access? How Is It Being Used? What data exists where? Shadow IT for cloud apps What is my exposure? BYOD and Mobile growth Careless access to information Passwords are ineffective Cumbersome user experience Lack of context Rogue access to apps and data Users uploading to cloud apps Sharing data that shouldn t be shared Stored in unprotected manner

5 NEW INFORMATION PROTECTION RISKS AND CHALLENGES Cloud Mobile BYOD You don t own the app You don t own the infrastructure You can t say no Your security slows me down I expect an insanely great user experience You don t own the device You can t lock my device down I will use the device and app I want 5

6 INFORMATION PROTECTION FOUNDATION SYMANTEC DLP Single DLP for endpoints, mobile, network, storage, & cloud More accurate: Exact Data Matching & Classification Engines Automatically encrypt data based on DLP policy Monitor file usage and identify anomalies

7 INFORMATION PROTECTION FOUNDATION SYMANTEC ENCRYPTION Integrates across Symantec portfolio Support for strong authentication Single-Sign On support and key recovery Recognizable and trusted brand

8 INFORMATION PROTECTION FOUNDATION: STRONG AUTHENTICATION SYMANTEC ACCESS MANAGER SYMANTEC VIP SYMANTEC MPKI Single sign-on to all of your cloud-base applications Passwordless, two factor authentication Device fingerprinting and behavioral analysis Right for you authentication

9 SYMANTEC INFORMATION PROTECTION A CLOUD BASED CONTROL POINT DLP Encryption MAM 2FA SSO Cloud Access Security Broker

10 SYMANTEC DATA LOSS PREVENTION

11 INTRODUCING SYMANTEC DATA LOSS PREVENTION DISCOVER MONITOR PROTECT Locate where your sensitive information resides across your cloud, mobile, network, endpoint and storage systems Understand how your sensitive information is being used, including what data is being handled and by whom Stop sensitive information from being leaked or stolen by enforcing data loss policies and educating employees 12

12 SYMANTEC DATA INSIGHT IDENTIFY DATA OWNERS FOR IMPROVED REMEDIATION Document Owner File Activity Monitoring Technology 13

13 SYMANTEC DLP PROTECTS YOUR IMPORTANT, HIGH-VALUE INFORMATION Customer Information Company Information Credit Card Info Intellectual Property Medical Records M&A and Strategy SSNs and Government IDs Internal Auditing Financials HR Records

14 HIGHER DETECTION ACCURACY WITH ADVANCED CONTENT DETECTION TECHNOLOGIES Described Content Matching Exact Data Matching Indexed Document Matching Vector Machine Learning DESCRIBED DATA STRUCTURED DATA CUSTOMER DATA UNSTRUCTURED DATA IP UNSTRUCTURED DATA IP Non-indexable data Lexicons Data Identifiers Credit card, Government IDs, Pricing Partial row matching Near perfect accuracy Designs, Source Code, Financials Derivative match Near perfect accuracy Designs, Source Code, Financials Derivative match Very High Accuracy

15 VECTOR MACHINE LEARNING TRAINING

16 VECTOR MACHINE LEARNING TRAINING PROFILE

17 VECTOR MACHINE LEARNING TRAINING PROFILE POLICY

18 VECTOR MACHINE LEARNING RE-TRAINING TRAINING PROFILE POLICY

19 IT ALL STARTS WITH DATA LOSS POLICIES DETECTION RESPONSE Content Context Action Notification Credit Cards SSNs Intellectual Property Who? What? Where? Notify Justify Encrypt Prevent User Manager Security Escalate Find it. Fix it.

20 90% OF DLP IS INCIDENT RESPONSE! SOPHISTICATED WORKFLOW SIMPLIFIES REMEDIATION

21 Incidents Per Week PROVEN METHODOLGY FOR RISK REDUCTION Visibility Remediation Notification 0 Risk Reduction Over Time Competitive Trap Prevention

22 SYMANTEC DLP: A UNIFIED SOLUTION FOR ALL YOUR DATA LOSS CHANNELS Cloud & Mobile Endpoint Network Storage UNIFIED POLICIES, MANAGEMENT AND REPORTING

23 WHY SYMANTEC DLP? 8 Consecutive Years of Technology Leadership The Global Market Leader in DLP Used by over half of the Fortune 100

24 Thank you! Johan Celis Copyright 2015 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.