Data Security on the Move. Mark Bloemsma, Sr. Sales Engineer Websense

Transcription

1 Data Security on the Move Mark Bloemsma, Sr. Sales Engineer Websense

2 Consumerization of IT Fast & disruptive Enables business Increases productivity

3 It s Mine!

4 THE MOBILE ENTERPRISE. TYPES OF DEVICES METHODS OF ACCESS TYPES OF DATA STORAGE OPTIONS APPS USED CORPORATE DATA CENTER CORPORATE DATA CLOUD STORAGE BUSINESS APPS ON-DEVICE STORAGE 3G PERSONAL DATA EXTERNAL STORAGE CONSUMER APPS

5 THE EMPOWERED USER

6 Fundamental shift in security needed THE NUMBER OF SUCCESSFUL NETWORK SECURITY BREACHES OVER THE PAST YEAR 10% 21% 59% NONE 1 TIME 2 TO 5 TIMES

7 WEB EXPOSURE DRIVES INFORMATION THEFT Insider abuse 52% Malicious software download 48% Malware from a website Malware from social media System glitch 43% 29% 19% Do not know 16% Malware from a message 5%

8 TRENDS Externalization of IT infrastructure Consumerization & virtualization of the end point Windows8 security leaps forward HACKED Business enablement via social web Security consolidation continues Data oriented attacks are an everyday event

9 It s the Data Not the Device Challenges User owned device You may or may not own the pipe Lives outside your network Primary Risk Secure corporate data on the device If the device is lost Employee leaves the company Prevent data leakage to unauthorized destinations or recipients 9

10 Examples of Data at Risk 10

11 Fake Anti-Virus 12

12 App Analyser 13

13 App Analyser continued 14

14 What are we interested in? Who What H Y Where How When 15

15 What s in the news? 16

16 The Door to Malware 17

17 Shortcomings of Current Approaches OPTION #1 ActiveSync for device controls OPTION #3 Tablet as a terminal Provides basic controls such as access to Exchange, password enforcement, remote wipe but no data leakage prevention or threat protection. Run enterprise apps on a server farm and display them on the tablet. Significant investment in infrastructure with limited data protection. OPTION #2 Backhaul traffic over VPN Using a VPN client to backhaul traffic to enterprise network. Results in higher infrastructure and management costs. OPTION #4 Invest in Mobile Device Management (MDM) solutions Provides device level controls but these systems are content unaware and vulnerable to malware & data loss. 18

18 TRITON Mobile Security Vision Data leakage & Data Theft Prevention Malware Protection Mobile device management Mobile App Categorization Integrated Policy Mgmt & Reporting SaaS Solution The only SaaS solution that will extend your corporate content security policies to mobile devices, protecting them from latest mobile threats and preventing any data leakage * Supported devices: idevice, Android, Windows Mobile, Blackberry 19

19 Websense and ThreatSeeker Websense Web Security Gateway Threat Detection/Probes Real-Time Security Updates Shared Analytics/Feedback ACE Technology 1 billion pieces of content per day 3-5 billion per day Websense Hosted Customers URL and Security Database Websense Security Labs ACE Technology 400+ million sites per day 10+ million s per hour 2.5 billion URLs per day ACE Technology Websense Hosted Security 20

20

21 TRITON Mobile Security Web Security Mobile Security Mobile Security ACE + ThreatSeeker Network Malicious Mobile App Tracker Management + Reporting VPN** WiFi/3G ** ios, Android

22 TRITON Mobile Security Mobile DLP Web Security Mobile Security Exchange Server Mobile Security ACE + ThreatSeeker Network Malicious Mobile App Tracker Management + Reporting Enterprise DLP controls ActiveSync* Enterprise *Any ActiveSync compatible device VPN** WiFi/3G ** ios, Android

23 TRITON Mobile Security Mobile DLP Web Security Mobile Security Exchange Server ActiveSync* Mobile Security ACE + ThreatSeeker Network Malicious Mobile App Tracker Management + Reporting + MDM Enterprise DLP controls Enterprise *Any ActiveSync compatible device VPN** WiFi/3G ** ios, Android

24 MDM Capabilities for ios 25

25 MDM Capabilities for ios Device Functionality Password enforcement Allow app installation Allow use of the camera Allow FaceTime Allow screen capture Allow automatic sync while roaming Allow voice dialing Allow in-app purchases Allow multiplayer gaming Allow addition of game center friends Force encrypted backups Log on to the portal to view more Applications Allow use of YouTube Allow use of itunes Store Allow use of Safari Enable auto fill Force Fraud warnings Enable JavaScript Block popups Allow explicit music and podcasts Set rating region Set content ratings for Movies TV shows Apps 26

26 Reports Devices per user Device by type Device by user Bandwidth user trends Top bandwidth users Top applications Mobile users per group Administrative actions per device Administrative actions over time Top device per administrative action Administrative action details More to come 27

27 Live Demo

28 Thank you! Questions, Remarks, Discussion