BELKIN BUSINESS INTRODUCTION

Transcription

1 BELKIN BUSINESS INTRODUCTION

2 Cyber Security Portfolio

3 Introducing Belkin s Cyber Security Portfolio What is Cyber Security to Belkin? Belkin understands that there are a vast array of hardware and software based offerings on the market for Cyber Security solutions. For Belkin, our Cyber Security portfolio is focused on secure hardware for desktop environments. What is Belkin s intent with offering Cyber Security solutions? With a growing need to secure the desktop, while offering seamless productivity, Belkin is taking the initiative to develop innovative solutions for the desktop environment. Is Belkin credible in this space? Since 2006, when Belkin entered the Secure KVM market, Belkin has been working directly with US Government agencies to understand, design, and develop certified solutions for secure environments. Starting with 0% market share in 2006, Belkin currently holds over 30% of the 36 million dollar market for Secure KVMs, and our market share is on the rise. 3

4 Cyber Defense Market Size Global Cyber Security spending was approximately $60 billion in 2011 and is expected to grow at close to 10% every year over the next 3-5 years. The US accounts for over half of the total. The next largest market is Japan, followed by the UK. 4

5 Cyber Defense Market Key Growth Factors Increasing Cyber Threats Greater Vulnerabilities Increasing Awareness Changes in Technology Increasing Regulations 5

6 Cyber Attack Mechanisms Attacks by use of industry weaknesses Attacks by an employee Social Attacks Supply Chain Attacks 6

7 Attack by use of industry weaknesses In 2013 Adobe was attacked and the source code of ColdFusion was stolen ColdFusion is used by the United States Senate, 75 percent of the Fortune 100 companies, and more than 10,000 other companies worldwide. Attackers used ColdFusion source to attack US National White Collar Crime Center The same hacker also broke into Dun & Bradstreet and LexisNexis, and stole millions of credit and background reports of American citizens. Attackers created a web site which sells identities online. That website has been breached as well. 7

8 Attack by an employee Recent events such as the Eduard Snowden NSA whistleblower incident emphasize that although internal cybercrime incidents occur less frequently than external ones, an internal breach can turn out to be disastrous since it is executed from within the organization s environment. Intentional privilege abuse goes hand by hand with the use of unapproved hardware. 8

9 Social Attack After the G20 summit which took place in St Petersburg, in September 2013, two Italian newspapers (La Stampa and Corriere della Sera) claimed that USB thumb drives and mobile phone chargers that were given as gifts to delegates, were equipped with Trojan Horse programs capable of illicitly picking up computer and mobile phone data. 9

10 Supply Chain Attack A supply chain attack is an attack where a product is tampered with during manufacturing or while it is still in the supply chain by persons with physical access. 10

11 Anti-Virus and Intrusion Detection Systems Effectiveness In 2012 only 2% of reported attacks were discovered using Intrusion Detection SW. Most protective SW are based on a DB of known threats and have no affect against specific, customized threats. Intrusion detection is not active in pre-boot or Bios environment. 11

12 Conclusion The only mechanism that actually works the best is network segregation. Two physical networks are created, one for sensitive data that is kept isolated within an internal network and another network for low security tasks where users are allowed to access the outside world for daily use activities, such as web browsing, access etc. 12

13 Example of Non-Secure KVM Usage Secure Secure LAN Secure Secure LAN Unsecure Unsecure LAN Networks are separated at the server room, but come together at the desktop via KVM Enterprise and infrastructure security can be compromised at the KVM 13

14 Desktop Vulnerabilities Secure Audio USB KVM/KM Switch Secure Webcam Headset Adapter 14

15 Belkin s Secure Value Adds So how does Belkin protect against these types of threats, while still providing value-adds to the End User? Isolation and Data Path Protection Tamper Prevention Usability/Error Reduction 15

16 Isolation and Data Path Protection Explained Tamper Proof Electrical Design All Microprocessors are One-Time-Programmable (OTP) and do not contain reprogrammable flash memory. This protects against the firmware being tampered with, locally or remotely. Dedicated Processors Per Port Every peripheral uses its own emulator, preventing signaling attacks and data leakage all together Restricted I/O USB device signals are monitored in real-time for unauthorized peripheral device traffic. Upon detection of an unauthorized device (thumb drive, etc.) all data is rejected from passing through the KVM. Uni-Directional Data Paths Optical diodes ensure data flows in one direction, preventing upstream signaling attacks and data leakage by using PHYSICS, not electronic circuits or firmware Opti-isolator: Showing source of light (LED) and sensor (phototransistor) Silicone dome cross-section of an Optical chip 16

17 Isolation and Data Path Protection Explained No Memory buffers Peripheral signals are passed-through, preventing data from being stored inside of the KVM Protected Display (EDID) Information Advanced Display Plug-and-Play emulation and protection guards against data leakages on each monitor connected to our Secure KVMs, preventing intruders from seeing when a switching event has occurred, as well as preventing the monitor from being used to move data from one computer to the next. Restricted Microphone Switching Only audio output can be switched inside of our Secure KVMs; preventing microphone signals from being tampered with by malicious software. For environments where microphone support is required, Belkin has separate, secure, products designed specifically to prevent microphone intrusions outside of the KVM. NIAP and Common Criteria Listed Belkin products are certified and tested by the NIAP body to ensure they meet and exceed the protection profile requirements for each applicable device category. 17

18 Uni-body Chassis Extruded Aluminum Enclosure Reduced entry points into the Switch s electronics Minimizes radiated signals that can be snooped or intercepted 18

19 Active Anti-Tamper Protection and Tamper Evident Labels Active Anti-Tamper Protection Opening the enclosure triggers anti-tamper switches which render the Secure KVM permanently inoperable Tamper Evident Labels Serialized Holographic Tamper Evident Labels provide a visual deterrent and indication of tampering 19

20 Tamper Evident Packaging Ensures secure delivery of the switch as it is routed from the security controlled manufacturing facility in the US to the end-user. Secure, easy to dispose of, one-time tear-away packaging. tamper evident package single use, tear away construction contents are visible and easily accessed packaging folds flat without cutting disposal is simplified for installers 20

21 Advanced SKVM Features Tamper Evident Label Model Number Area for Asset Tag Pre-Printed Port Labels Mounting Slot Customizable Color Chips 21

22 Advanced SKVM High Retention USB Ports Minimum Withdrawal Force: 15 Newton Reduce unnecessary IT calls by minimizing the chance that a USB cable is accidentally unplugged from the KVM by an end-user 22

23 Optional Mounting Bracket under desk side mounted F1D006 Single Monitor SKVM Bracket F1D008 Dual Monitor SKVM Bracket 23

24 Cyber Security Solutions 24

25 Secure Switching 25

26 Secure Windowing KVM The Secure KVM Combiner designed to provide users with native windowing environment across isolated networks. Connected computers may operate at different isolated networks having different security levels without exposing the organization to the risks of information leakage through the KVM. Common Criteria EAL 4+ P/N F1DN104M F1DN204M Date Shipping Shipping 26

27 Secure KM User selection of Secure KM channel is done through: Seamless Cursor Movements via the Mouse (see below image) Front Panel Push-Buttons Over 40 Hotkeys for Various/Typical Display Configurations Optional Remote Desktop Controller (sold separately) KM Switches from channel 3 to 2 2 KM Switches from channel 2 to 3 KM Switches from channel 3 to KM Switches from channel 1 to 3 KM Switches from channel 4 to 3 P/N F1DN104K (4-Port) Supports up to 16 monitors F1DN108K (8-Port) Supports up to 32 monitors Date Shipping Shipping 27

28 Secure Peripherals 28

29 DCU Desktop Controller Unit (EAL4+) Secure KVM Accessory The DCU provides an easy and intuitive desktop user interface to control complex Secure KVM systems. Enables textual browsing of the available networks / resources through color display. The DCU significantly improves user s situational awareness and therefore enhances security and productivity for users that operates continuously in multiple domains secure environments. Great for Vehicles or other applications where the KVM is not in front of the user F1DN001R 4 Port F1DN002R 4 Port with LCD F1DN003R 4-16 Port with LCD P/N F1DN001R F1DN002R F1DN003R Date Shipping Shipping Shipping 29

30 Versatile Connectivity 30

31 Why sell Belkin s Secure KVMs over the competition? We offer complete, secure, solutions for the desktop! Best product warranty available for Secure KVMs! Free, no hassle, support from knowledgeable technicians! Most advanced, and secure, KVMs in the industry! Highest MTBF for any Secure KVM (150K hours = 17+ years)! Belkin s extensive compatibility testing saves you time and money! Greatest Return on Investment (ROI)! 31

32 Secure Product of the Year Award Everything about the Belkin Secure DVI-I KVM Switch was air-tight, right down to the tamper evident outer packaging and device labeling, is how Edward J. Correia, Managing Editor of CRN Test Center put it. 32

33 SKVM Contact Information US Phone Support (8AM-5PM PST, M-F) Belkin Website Support Belkin Business Cyber Security Webpage 33

34 Belkin Reps Onsite at Tech Data CONNIE MCGINNIS National Account Manager Belkin International, Inc. M Connie.McGinnis@belkin.com KOSTA KALOGEROPOULOS Business Development Representative M Kosta.Kalogeropoulos@belkin.com FRANKLIN ARTHUR Vendor Partner Product Administrator O ext Belkin@techdata.com 34

35 Belkin Business Gov t Reps ASHOKA RAJAGOPAL National Account Manager-Federal M Ashoka.Rajagopal@belkin.com KIMBERLY AGUILAR (Bid Desk and Deal Registration) Federal Business Development Manager O direct M mobile KimberlyA@belkin.com RAFI KHUSRO Solutions Architect M Rafi.Khusro@belkin.com GSA#GS-35F-0085U 35

36 Q&A