Pivoting to Data-less Endpoints with High Security and Cloud Services. Robert Pell, Principal Architect, East Region Code42 Software

Transcription

1 Pivoting to Data-less Endpoints with High Security and Cloud Services Robert Pell, Principal Architect, East Region Code42 Software

2 Trend 1: Secure Cloud Storage Services On-premise Security Unlimited Secure Cloud Storage Enormous customers Proving to be more secure than what most customers would like to implement themselves.

3 Trend 1 continued Mobile devs, tablets out- pacing laptops Virtual desktops (VDI) User directories redirected to NAS or Cloud- based exports

4 Trend 2: Data is Currency 72% of financial institutions have experienced data theft by an employee PivotPoint Security

5 Trend 2: Data is Currency 2,000,000 individual customer records stolen from a Vodafone trusted source Wall Street Journal

6 Trend 2: Data is Currency 10% of all wealth management customers records stolen from Morgan Stanley by a financial advisor Wall Street Tech

7 Trend 2: Data is Currency ½ of South Korea citizen s personal data stolen from a government contractor The Register

8 We ve got security today! Custom user roles Lock-down Settings Checksum data transfers and archives Encrypt data in-flight & at-rest AES & Blowfish Extra passwords on sensitive archives Lock-down database: no open sockets, encrypted Lock-down targets: no open ports, services, firewall LDAP, Radius 2FA and SSO integrated multiple services in the same organizational unit.

9 PrevenFon IT Risk MiFgaFon Security Incident DetecFon Response RemediaFon Legal Compliance

10 Allow users to work Reduce security risks Shine light on blind spots Reduce cost of forensics IT Security Incident PrevenFon Detec%on Response Risk MiFgaFon Remedia%on Legal Compliance

11 REDUCE RISK: PROTECT PRODUCTIVITY THROUGH ENDPOINT DATA SECURITY DYNAMIC MONITORING AND EXPLOIT PREVENTION PreempFvely protect endpoint data through acfvity monitoring and threat signal intelligence. Dynamically disable file exits and provide truly valuable alerts to security pracffoners and risk managers. Dynamic PrevenFon H AUTOMATIC FILE QUARANTINE AND INSPECTION Easy sandboxing and automated inspecfon of files and full content versions. Deeper integrafon with best of breed threat detectors and threat intelligence aggregators. Automated RemediaFon H REAL- TIME AND POST- BREACH INVESTIGATION Rich forensics and data reporfng integrafons for endpoint acfvity on disk, removable media, in the cloud (OneDrive, DropBox, etc.), and via browser- based file uploads. Provide indexing and search in Code42 cloud of files, keywords, content pa]erns, and MD5 hashes. DetecFon & Forensics 2015

12 Employee Data Risk Mi1ga1on When they leave, what goes with them? How risky is their acfvity personal cloud? What goes on a USB they put in their pocket? How can I get highly reliable answers to these quesfons quickly?

13 Scenario: Hank 1. Hank has a relafvely normal day 2. IT is alerted that Hank has suddenly resigned 3. IT easily gathers and forwards forensic data to legal team 4. Legal uses data provided by IT

14 Hank s normal day

15

16 Hank resigns

17 Fundamental Questions to Ask Can you say with certainty what data was on Hank s machines? How about 205 days ago? When Hank quits, do you know what data is deleted off his machine or what data he took? How will you limit your exposure when faced with reporting a possible leak without the certainty of what data Hank had?

18 Code42 Already Does This Identify Protect Detect Respond Recover Endpoint Data Protection End Point Data Protection Recovery API Solutions Admin Restore API Solutions Restore Admin Restore Device Migration

19 IT gathers forensic data

20

21 Legal leverages the data

22 Preserve In- Place Legal Holds PROBLEM Hank didn t quit. He s still an employee. How do we handle now? ACTION Use Code42 administration console Move user into different organization User s devices automatically inherit retention policies IMPACT Legal hold applied in minutes No disruption to Hank IT saves limited time and resources 22

23

24 Beyond Backup Benefits Continuous engine already does the heavy lifting No more Agent Pollution Alert on policy violations Gapless endpoint event monitoring and record Discover where sensitive information resides Aggregated threat intelligence support Baseline and anomalous behavior CRASHPLAN/SHAREPLAN Secure Data Protection and Sharing

25 Market Message: Endpoint Data Protection is a pillar of a comprehensive data security strategy