Oracle Mobile Security Management

Transcription

1 <Insert Picture Here> Oracle Mobile Security Management Angelo Maria Bosis Technology Sales Consulting Director Milano, 19 Marzo 2014

2 Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle s products remains at the sole discretion of Oracle.

3 Agenda Changing Mobile Security Requirements Oracle Mobile Security Vision Identity Management and Mobile Security Mobile Security Solution Overview Q&A

4 Organizations Struggle to Secure Mobile BYOD (COPE) is the Norm and Security Measures are Inadequate 85% 50%+ 70%+ 90% 85% of organizations allow employees to bring their own devices to work. More than 50% of organizations rely on their users to protect personally owned devices. Over 70% of mobile professionals will conduct their work on personal smart devices by % of CIO expect to deploy more than 25 mobile apps in IDG Research Services - SANS Institute Research Survey - Forrester Forbes: Mobile Business Statistics For 2012

5 Changing Mobile Requirements Secure Mobile Access to Enterprise Apps & Content Mobile is a new threat vector BYOD poses security risks IT wants security while employees want userexperience Consumerization of IT is pushing the limits of enterprise productivity Infrastructure siloes are increasing IT complexity

6 Agenda Changing Mobile Security Requirements Oracle Mobile Security Vision Identity Management and Mobile Security Mobile Security Solution Overview Q&A

7 Oracle Mobile Solution MOBILE APPS MOBILE PLATFORM MOBILE SECURITY CRM ERP B2B

8 Oracle Mobile Security Addressing Customer Requirements for Mobile Security Mobile Security Suite that can extend the Oracle IDM platform Separate personal and corporate apps and data Application centric solution avoid device lockdown Extend Identity Management platform to manage the lifecycle of applications and containers Extend Access Management platform to mobile devices and applications Oracle/ADF Mobile Apps secure-by-default by consuming these security services

9 Oracle s Mobile Security Plan Extending IDM services Common users, roles, policies, access request, cert etc. SSO and authorization for native and browser apps Risk/policy based step up and strong authentication RESTful Identity Services

10 Oracle s Mobile Security Plan Secure Container for App Security and Control Separate, protect and wipe corporate applications and data Strict policies to restrict users from viewing/moving data out of container Consistent support across multiple mobile platforms

11 Oracle s Mobile Security Plan Secure Access, Device and App Management Secure communication with enterprise application servers No VPN and no CPU and network overhead (like IPSEC) Support for 3 rd party and social identities Provide context-driven, risk-aware access to enterprise apps Enterprise app store/catalog Device enrollment and provisioning Prevent rogue apps, access to internal network only for white-listed apps

12 Oracle s Mobile Security Plan Delegated security model with app containerization App Containerization adds security layer for bespoke and COTs apps after development Decouple security deployment & app development Injection-based approach. No SDK. SSO, secure access and DLP enforcement

13 Agenda Changing Mobile Security Requirements Oracle Mobile Security Vision Identity Management and Mobile Security Mobile Security Solution Overview Q&A

14 The Extended Enterprise A Platform for Enterprise, Cloud & Mobile One Identity Platform

15 One Identity Platform Open, Integrated, Best of Breed DIRECTORY SERVICES ACCESS MANAGEMENT IDENTITY GOVERNANCE To Handle 100s of Millions of Users Supporting Mobile, Social and Cloud With BYOD Support

16 Agenda Changing Mobile Security Requirements Oracle Mobile Security Vision Identity Management and Mobile Security Mobile Security Solution Overview Q&A

17 Mobile Security Oracle Identity Management Extending the Platform with a Discreet Mobile Security Solution Identity Governance Access Request Approval Workflows Automated Provisioning HR Reconciliation Access Certification and SOD Role Lifecycle Management Privileged Account Management User Management & Self Service Entitlement Catalogue/App Store Access Management Web Single Sign-on Federation Social Identity Access Externalized Authorizations SOA and API Security Integrated ESSO Token Services Mobile App Access Management Secure Mobile Gateway System Management and Monitoring LDAP Storage/ Virtual/ Meta Directory Device Store Management Directory Services Device and Container Management Secure Container

18 Oracle Mobile Solution Secure Mobile Workspace - Separate personal and corporate data Secure Intranet Browser Authentication/SSO Encryption at Rest Secure Mail PIM ( , calendar, contacts, tasks, notes) Encryption in Transit Data Leakage Control Policy Enforcement Secure Files Secure Apps Doc Editor File Manager Enterprise Apps App Distribution App Catalog

19 Oracle Mobile Security Solution Complete Protection of Enterprise Information on Mobile Devices Preserve User Experience Authentication Encryption at Rest Encryption in Transit Data Leakage Control Policy Enforcement Secure, touch-enabled enterprise workspace for ios and Android Trusted workspace for enterprise secure mail, browser, file manager, inhouse or 3 rd party apps Single sign-on just like from your desktop No restrictions or controls over personal apps or data Increase productivity for mobile workers Enable Enterprise Security and Control Data leaking control by policy to restrict or allow , copy/paste, sharing Isolate enterprise data access from personal data access Manage application and data lifecycle to ensure users only have access to authorized data Manage user credential lifecycle Deployment options include on-premise or in the cloud

20 Oracle Mobile Security Suite Secure BOTH containerized and non-containerized apps / Consumer Apps Corporate DMZ Corporate Network Containerized Apps Webgate / OHS OAM Protected Resources Oracle Access Manager With Mobile & Social Oracle Adaptive Access AppTunnel Active Directory OUD Oracle Mobile Access Server Oracle Mobile Security Admin Console Oracle Mobile Oracle Agent Mobile Apps Agent Oracle API Gateway SOAP/REST and Legacy Web Services

21 Mobile Security Suite Separately Managing Corporate And Personal Apps/Data On Mobile Devices Extending Enterprise Identity Services To Enable Mobile Security with Consistent Policies Seamless Single Sign-on For Bespoke Applications On Mobile Devices Reduce Costs, Reduced Risks And Increased Agility With Platform Approach

22 Join the Community Twitter twitter.com/oracleidm Facebook facebook.com/oraclesecurity Oracle Blogs Blogs.oracle.com/OracleIDM Oracle IdM Website oracle.com/identity

23