TNC: Open Standards for Network Security Automation. Copyright 2010 Trusted Computing Group
|
|
|
- Barry Small
- 8 years ago
- Views:
Transcription
1 TNC: Open Standards for Network Security Automation Copyright 2010 Trusted Computing Group
2 Agenda Introduce TNC and TCG Explanation of TNC What problems does TNC solve? How does TNC solve those problems? TNC Architecture and Standards TNC Adoption and Certification TNC Advantages Case Studies Summary For More Information Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #2
3 Trusted Network Connect Open Architecture for Network Security Completely vendor-neutral Strong security through trusted computing Open Standards for Network Security Full set of specifications available to all Products shipping for almost five years Developed by Trusted Computing Group (TCG) Industry standards group More than 100 member organizations Includes large vendors, small vendors, customers, etc. Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #3
4 TCG: Standards for Trusted Systems Virtualized Platform Mobile Phones Printers & Hardcopy Authentication Network Security Storage Security Hardware Applications Software Stack Operating Systems Web Services Authentication Data Protection Desktops & Notebooks Servers Infrastructure Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #4
5 Trusted Platform Module (TPM) Security hardware on motherboard Open specifications from TCG Resists tampering & software attacks Now included in almost all enterprise PCs Off by default; opt in Features Secure key storage Cryptographic functions Integrity checking & remote attestation Applications Strong user and machine authentication Secure storage Trusted / secure boot Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #5
6 Problems Solved by TNC Network and Endpoint Visibility Who and what s on my network? Are devices on my network secure? Is user/device behavior appropriate? Network Enforcement Block unauthorized users/devices Network Access Control (NAC) Grant appropriate levels of access to authorized users/devices Device Remediation Quarantine and repair unhealthy devices Security System Integration Share real-time information about users, devices, threats, etc. Coordinate d Security Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #6
7 Sample Network Access Control Policy To Access the Production Network User Must Be Authenticated With Identity Management System 2. Endpoint Must Be Healthy Anti-Virus software running and properly configured Recent scan shows no malware Personal Firewall running and properly configured Patches up-to-date 3. Behavior Must Be Acceptable No port scanning, sending spam Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #7
8 NAC Architecture Access Requestor (AR) Policy Enforcement (PEP) Policy Decision (PDP) VPN Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #8
9 Coordinated Security Asset Management System Endpoint Security (via NAC) SIM / SEM MAP IPAM IF-MAP Protocol Physical Security ICS/SCADA Security AAA Routing Server or IDS Switching Wireless Firewalls Cloud Security Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #9
10 Coordinated Security & NAC Together Access Requestor (AR) Policy Enforcement (PEP) Policy Decision (PDP) Metadata Access (MAP) Sensors, Flow Controllers Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #10
11 Typical TNC Deployments Health Check Behavior Check User-Specific Policies TPM-Based Integrity Check Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #11
12 Health Check Access Requestor Policy Enforcement Policy Decision Non-compliant System Windows XP SP3 xoshotfix 2499 xoshotfix 9288 AV - McAfee Virus Scan 8.0 Firewall Production Network Compliant System Windows XP SP3 OSHotFix 2499 OSHotFix 9288 AV - Symantec AV 10.1 Firewall NAC Policy Windows XP SP3 OSHotFix 2499 OSHotFix 9288 AV (one of) Symantec AV 10.1 McAfee Virus Scan 8.0 Firewall Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #12
13 Behavior Check Access Requestor Policy Enforcement Policy Decision Metadata Access Sensors and Flow Controllers Remediation Network!!!! NAC Policy No P2P file sharing No spamming No attacking others Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #13
14 User-Specific Policies Access Requestor Policy Enforcement Policy Decision Metadata Access Sensors and Flow Controllers Guest User Mary R&D Joe Finance Windows XP OS Hotfix 9345 OS Hotfix 8834 AV - Symantec AV 10.1 Firewall NAC Policy Users and Roles Per-Role Rules Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #14
15 TPM-Based Integrity Check Access Requestor TPM Trusted Platform Module HW module built into most of today s PCs Enables a HW Root of Trust Measures critical components during trusted boot PTS interface allows PDP to verify configuration and remediate as necessary Policy Enforcement Policy Decision Compliant System TPM verified BIOS OS Drivers Anti-Virus SW Production Network NAC Policy TPM enabled BIOS OS Drivers Anti-Virus SW Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #15
16 TNC Architecture Access Requestor Policy Enforcement Policy Decision Metadata Access Sensors and Flow Controllers t Integrity Measurement Collector Collector Collectors (IMC) IF-M Integrity Measurement Verifiers Verifiers Verifiers (IMV) IF-MAP Sensor IF-IMC IF-IMV IF-MAP TNC Client (TNCC) IF-TNCCS TNC Server (TNCS) IF-MAP Metadata Access IF-PTS Platform Trust Service (PTS) TSS TPM Network Access Requestor IF-T Policy Enforcement (PEP) IF-PEP Network Access Authority IF-MAP IF-MAP IF-MAP Flow Controller Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #16
17 Foiling Root Kits with TPM and TNC Solves the critical lying endpoint problem TPM Measures Software in Boot Sequence Hash software into PCR before running it PCR value cannot be reset except via hard reboot During TNC Handshake... PDP engages in crypto handshake with TPM TPM securely sends PCR value to PDP PDP compares to good configurations If not listed, endpoint is quarantined and remediated Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #17
18 TNC Adoption Access Requestor Policy Enforcement Policy Decision Metadata Access Sensors, Flow Controllers Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #18
19 What About Open Source? Lots of open source support for TNC University of Applied Arts and Sciences in Hannover, Germany (FHH) libtnc OpenSEA 802.1X supplicant FreeRADIUS omapd IF-MAP Server IF-MAP Client Code Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #19
20 IETF and TNC IETF NEA WG Goal: Universal Agreement on NAC Client-Server Protocols Co-Chaired by Cisco employee and TNC-WG Chair Published several TNC protocols as IETF RFCs PA-TNC (RFC 5792) and PB-TNC (RFC 5793) Equivalent to TCG s IF-M 1.0 and IF-TNCCS 2.0 Co-Editors from Cisco, Intel, Juniper, Microsoft, Symantec Now working on getting IETF approval for IF-T Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #20
21 TNC Certification Program Certifies Products that Properly Implement TNC Standards Certification Process Compliance testing using automated test suite from TCG Interoperability testing at Plugfest Add to list of certified products on TCG web site Customer Benefits Confidence that products interoperate Easy to cite in procurement documents Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #21
22 TNC in the Real World Widely Deployed Millions of Seats Thousands of Customers Dozens of Products Across Many Sectors Government Finance Health Care Retail Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #22
23 TNC Advantages Open standards Non-proprietary Supports multi-vendor compatibility Interoperability Enables customer choice Allows thorough and open technical review Leverages existing network infrastructure Excellent Return-on-Investment (ROI) Roadmap for the future Full suite of standards Supports Trusted Platform Module (TPM) Products supporting TNC standards shipping today Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #23
24 TNC and SCAP Together Access Requestor (AR) Policy Enforcement (PEP) Policy Decision (PDP) Metadata Access (MAP) Sensors, Flow Controllers SCAP Client Software SCAP Analysis Software SCAP External Scanner Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #24
25 Strengths of TNC and SCAP TNC Strengths Network and Endpoint Visibility Network Enforcement Device Remediation Security System Integration SCAP Strengths Device Assessment Compliance Management Deep, Consistent Content Libraries Both SCAP and TNC Open Standards Vendor Neutral Widely Implemented Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #25
26 Benefits of TNC and SCAP Together Security automation At the desktop (SCAP) In the network (TNC) Across all security systems (TNC) Leading to lower costs and stronger security Open standards throughout Completely vendor-neutral Enables multi-vendor interoperability Lower vendor integration costs O(n) vs. O(n 2 ) Lower customer costs develop content once, deploy widely Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #26
27 For More Information TNC Web Site Technical Business TNC-WG Co-Chairs Steve Hanna Distinguished Engineer, Juniper Networks Paul Sangster Chief Security Standards Officer, Symantec Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #27
28 Upcoming TNC-Related Sessions Security Coordination with IF-MAP Learn more about IF-MAP Hear about specific applications Next session in this room (Tuesday, 3:45-4:30 PM) Leveraging SCAP for TNC, Endpoint Sensor Grid and Automated Remediation In-depth look at TNC-SCAP integration See a demo of TNC-SCAP Integration! After the IF-MAP session in Ballroom I (Tuesday, 4:45-5:30 PM) Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #28
29 Questions? Discussion? Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #29
30 For More Information TNC Web Site Technical Business TNC-WG Co-Chairs Steve Hanna Distinguished Engineer, Juniper Networks Paul Sangster Chief Security Standards Officer, Symantec Copyright 2010 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #30
Network Access Control (NAC) and Network Security Standards
Network Control (NAC) and Network Security Standards Copyright 2011 Trusted Computing Group Other names and brands are properties of their respective owners. Slide #1 Agenda Goals of NAC Standards What
Security Orchestration with IF-MAP
Security Orchestration with IF-MAP Gary Holland, Lumeta/IMRI 2 November 2011 Copyright 2010 Trusted Computing Group Agenda Threat Landscape and Federal Networks Trusted Network Connect Explanation of IF-MAP
Security Coordination with IF-MAP
Security Coordination with IF-MAP Matt Webster, Lumeta 28 Sept 2010 Copyright 2010 Trusted Computing Group Agenda Threat Landscape and Federal Networks Recap of TNC Explanation of IF-MAP What is IF-MAP?
Unified Security TNC EVERYWHERE. Wireless security. Road Warrior. IT Security. IT Security. Conference Room. Surveillance.
Corporate Governance Employee Cube Road Warrior Surveillance Surveillance IT Security Data Center IT Security Conference Room Wireless security Manufacturing and Control TNC EVERYWHERE Unified Security
Trusted Network Connect (TNC) 4th European Trusted Infrastructure Summer School August / September 2009
Trusted Network Connect (TNC) 4th European Trusted Infrastructure Summer School August / September 2009 Josef von Helden University of Applied Sciences and Arts, Hanover josef.vonhelden@fh-hannover.de
Orchestrated Security Network. Automated, Event Driven Network Security. Ralph Wanders Consulting Systems Engineer
Orchestrated Security Network Automated, Event Driven Network Security Ralph Wanders Consulting Systems Engineer Orchestrated Security Network! " TCG/ TNC Architecture! " IF-MAP! " Use cases of IF-MAP!
Trusted Network Connect (TNC)
Trusted Network Connect (TNC) Josef von Helden josef.vonhelden@inform.fh-hannover.de Martin Schmiedel Daniel Wuttke First European Summer School on Trusted Infrastructure Technologies September 2006 1
Trusted Network Connect (TNC)
Trusted Network Connect (TNC) Open Standards for Integrity-based Network Access Control and Coordinated Network Security April 2011 Trusted Computing Group 3855 SW 153rd Drive, Beaverton, OR 97006 Tel
The Importance of Standards to Network Access Control
White Paper The Importance of Standards to Network Access Control Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408.745.2000 1.888 JUNIPER www.juniper.net Part Number:
TNC is an open architecture for network access control. If you re not sure what NAC is, we ll cover that in a second. For now, the main point here is
1 2 This slide shows the areas where TCG is developing standards. Each image corresponds to a TCG work group. In order to understand Trusted Network Connect, it s best to look at it in context with the
TNC Endpoint Compliance and Network Access Control Profiles
TNC Endpoint Compliance and Network Access Control Profiles TCG Members Meeting June 2014 Barcelona Prof. Andreas Steffen Institute for Internet Technologies andapplications HSR University of Applied Sciences
SOFTWARE ASSET MANAGEMENT Continuous Monitoring. September 16, 2013
SOFTWARE ASSET MANAGEMENT Continuous Monitoring September 16, 2013 Tim McBride National Cybersecurity Center of Excellence timothy.mcbride@nist.gov David Waltermire Information Technology Laboratory david.waltermire@nist.gov
TCG. TCG Trusted Network Connect TNC Architecture for Interoperability. TCG PUBLISHED Copyright TCG 2004-2006
TCG Trusted Network Connect TNC Architecture for Interoperability Revision 2 1 May 2006 Published Contact: admin@trustedcomputinggroup.org Copyright TCG 2004-2006 TCG Copyright 2005-2006 Trusted Computing
The self-defending network a resilient network. By Steen Pedersen Ementor, Denmark
The self-defending network a resilient network By Steen Pedersen Ementor, Denmark The self-defending network - a resilient network What is required of our internal networks? Available, robust, fast and
Secure Content Automation Protocol (SCAP): How it is increasingly used to automate enterprise security management activities
Secure Content Automation Protocol (SCAP): How it is increasingly used to automate enterprise security management activities Sean Barnum sbarnum@mitre.org September 2011 Overview What is SCAP? Why SCAP?
ARCHITECT S GUIDE: Comply to Connect Using TNC Technology
ARCHITECT S GUIDE: Comply to Connect Using TNC Technology August 2012 Trusted Computing Group 3855 SW 153rd Drive Beaverton, OR 97006 Tel (503) 619-0562 Fax (503) 644-6708 admin@trustedcomputinggroup.org
Android BYOD Security using Trusted Network Connect Protocol Suite
Android BYOD Security using Trusted Network Connect Protocol Suite Prof. Andreas Steffen HSR University of Applied Sciences Rapperswil andreas.steffen@hsr.ch Where the heck is Rapperswil? 2 HSR Hochschule
Consumerization of Trusted Computing. Dr. Michael Willett Samsung
Consumerization of Trusted Computing Dr. Michael Willett Samsung ABSTRACT: Consumerization of Trusted Computing State, Federal, and international legislation mandate the use of strong security measures
NETWORK ACCESS CONTROL
RIVIER ACADEMIC JOURNAL, VOLUME 3, NUMBER 2, FALL 2007 NETWORK ACCESS CONTROL Arti Sood * Graduate Student, M.S. in Computer Science Program, Rivier College Abstract Computers connected to the Internet
Network Access Security It's Broke, Now What? June 15, 2010
Network Access Security It's Broke, Now What? June 15, 2010 Jeffrey L Carrell Network Security Consultant Network Conversions SHARKFEST 10 Stanford University June 14-17, 2010 Network Access Security It's
Multi-platform TNC with Radiator, XSupplicant and libtnc
May 1, 2007 Radiator Multi-platform TNC with Radiator, XSupplicant and libtnc Copyright (C) 2007 Open System Consultants Pty. Ltd. This white paper discusses the theory and application of Trusted Network
Active Network Defense: Real time Network Situational Awareness and a Single Source of Integrated, Comprehensive Network Knowledge
Active Network Defense: Real time Network Situational Awareness and a Single Source of Integrated, Comprehensive Network Knowledge This paper will present a case study of Lumeta s participation in an open
SOFTWARE ASSET MANAGEMENT
BUILDING BLOCK WHITE PAPER SOFTWARE ASSET MANAGEMENT Continuous Monitoring V.2 This revision incorporates comments from the public. David Waltermire Information Technology Laboratory david.waltermire@nist.gov
ARCHITECT S GUIDE: Mobile Security Using TNC Technology
ARCHITECT S GUIDE: Mobile Security Using TNC Technology December 0 Trusted Computing Group 855 SW 5rd Drive Beaverton, OR 97006 Tel (50) 69-056 Fax (50) 644-6708 admin@trustedcomputinggroup.org www.trustedcomputinggroup.org
This chapter covers the following topics: Network admission control overview NAC Framework benefits NAC Framework components Operational overview
This chapter covers the following topics: Network admission control overview NAC Framework benefits NAC Framework components Operational overview Deployment models C H A P T E R 6 Implementing Network
Bypassing Network Access Control Systems
1 Bypassing Network Access Control Systems Ofir Arkin, CTO Blackhat USA 2006 ofir.arkin@insightix.com http://www.insightix.com 2 What this talk is about? Introduction to NAC The components of a NAC solution
NETWORK ACCESS CONTROL TECHNOLOGIES
NETWORK ACCESS CONTROL TECHNOLOGIES Benny Czarny OPSWAT Inc., 640 2nd, 2nd Floor San Francisco, CA 94107, USA Tel +1 415 543 1534 # 301 Email benny@opswat.com ABSTRACT Cisco, Microsoft and the Trusted
Factory-Installed, Standards-Based Hardware Security. Steven K. Sprague President & CEO, Wave Systems Corp.
Factory-Installed, Standards-Based Hardware Security Steven K. Sprague President & CEO, Wave Systems Corp. The challenge We are having a little problem with identity and data theft. It is time to reduce
Cisco Security Agent (CSA) Network Admission Control (NAC)
Cisco Security Agent (CSA) Network Admission Control (NAC) Pascal Delprat Security Consultant Cisco France Vincent Bieri Marketing Manager, Security EMEA Technology Marketing Organisation 1 Agenda CSA
IF-MAP Use Cases: Real-Time CMDB, and More
IF-MAP Use Cases: Real-Time CMDB, and More Richard Kagan EVP / General Manager Orchestration Systems Business Unit IF-MAP: A Powerful New Standard IF-MAP = Interface to Metadata Access Points An open protocol
» WHITE PAPER. 802.1X and NAC: Best Practices for Effective Network Access Control. www.bradfordnetworks.com
» WHITE PAPER 802.1X and NAC: Best Practices for Effective Network Access Control White Paper» 802.1X and NAC: Best Practices for Effective Network Access Control 1 IEEE 802.1X is an IEEE (Institute of
Closed loop endpoint compliance an innovative, standards based approach A case study - NMCI
1 Closed loop endpoint compliance an innovative, standards based approach A case study - NMCI Tom Lerach Head of IA, HP DoD Rajat Bhargava StillSecure October 2009 Agenda endpoint compliance with NMCI
Tech Brief. Enterprise Secure and Scalable Enforcement of Microsoft s Network Access Protection in Mobile Networks
Tech Brief Enterprise Secure and Scalable Enforcement of Microsoft s Network Access Protection in Mobile Networks Introduction In today s era of increasing mobile computing, one of the greatest challenges
Towards End-to-End Security
Towards End-to-End Security Thomas M. Chen Dept. of Electrical Engineering Southern Methodist University PO Box 750338 Dallas, TX 75275-0338 USA Tel: 214-768-8541 Fax: 214-768-3573 Email: tchen@engr.smu.edu
IF-MAP Overview. Jan Ursi Technical Director EMEA. 2009 Infoblox Inc. All Rights Reserved.
IF-MAP Overview Jan Ursi Technical Director EMEA IF-MAP: A Powerful New Standard IF-MAP = Interface to Metadata Access Points An open protocol standard published (free) by the Trusted Computing Group Available
IBM Tivoli Endpoint Manager for Security and Compliance
IBM Endpoint Manager for Security and Compliance A single solution for managing endpoint security across the organization Highlights Provide up-to-date visibility and control from a single management console
Industrial Security for Process Automation
Industrial Security for Process Automation SPACe 2012 Siemens Process Automation Conference Why is Industrial Security so important? Industrial security is all about protecting automation systems and critical
Sygate Secure Enterprise and Alcatel
Sygate Secure Enterprise and Alcatel Sygate Secure Enterprise eliminates the damage or loss of information, cost of recovery, and regulatory violation due to rogue corporate computers, applications, and
Microsoft Windows Server System White Paper
Introduction to Network Access Protection Microsoft Corporation Published: June 2004, Updated: May 2006 Abstract Network Access Protection, a platform for Microsoft Windows Server "Longhorn" (now in beta
Start building a trusted environment now... (before it s too late) IT Decision Makers
YOU CAN T got HAP Start building a trusted environment now... IT Decision Makers (before it s too late) HAP reference implementations and commercial solutions are available now in the HAP Developer Kit.
Securing the University Network
Securing the University Network Abstract Endpoint policy compliance solutions take either a network-centric or device-centric approach to solving the problem. The body of this paper addresses these two
Data Sheet: Endpoint Security Symantec Network Access Control Comprehensive Endpoint Enforcement
Comprehensive Endpoint Enforcement Overview is a complete, end-to-end network access control solution that enables organizations to efficiently and securely control access to corporate networks through
Leveraging Trusted Network Connect for Secure Connection of Mobile Devices to Corporate Networks
Leveraging Trusted Network Connect for Secure Connection of Mobile Devices to Corporate Networks Prof. Dr. Kai-Oliver Detken 1, Hervais Simo Fhom 2, Prof. Dr. Richard Sethmann 3, Günther Diederich 3 1
IDM and Endpoint Integrity Technical Overview
ProCurve ing by HP IDM and Endpoint Integrity Technical Overview The Threats to Today s ing Environments... 2 Endpoint Integrity Defined... 2 Endpoint Integrity Options... 2 The ProCurve Solution: Endpoint
Compliance series Guide to meeting requirements of USGCB
Compliance series Guide to meeting requirements of USGCB avecto.com Contents Introduction to USGCB 2 > From FDCC to USGCB 3 > USGCB settings and standard user accounts 3 > Application compatibility 4 >
PCI Data Security Standards (DSS)
ENTERPRISE APPLICATION WHITELISTING SOLUTION Achieving PCI Compliance at the Point of Sale Using Bit9 Parity TM to Protect Cardholder Data PCI: Protecting Cardholder Data As the technology used by merchants
The strongswan IPsec Solution
The strongswan IPsec Solution with TNC Support TCG Members Meeting June 2011 Munich Prof. Dr. Andreas Steffen Institute for Internet Technologies andapplications HSR University of Applied Sciences Rapperswil
A M D DA S 1. 0 For the Manageability, Virtualization and Security of Embedded Solutions
A M D DA S 1. 0 For the Manageability, Virtualization and Security of Embedded Solutions AMD DAS (DASH, AMD Virtualization (AMD-V ) Technology, and Security) 1.0 is a term used to describe the various
CONTINUOUS DIAGNOSTICS BEGINS WITH REDSEAL
CONTINUOUS DIAGNOSTICS BEGINS WITH REDSEAL WHAT IS CDM? The continuous stream of high profile cybersecurity breaches demonstrates the need to move beyond purely periodic, compliance-based approaches to
WHITEPAPER. Addressing Them with Secure Network Access Control. Executive Summary... An Evolving Network Environment... 2
WHITEPAPER Top 4 Network Security Challenges in Healthcare Addressing Them with Secure Network Access Control Executive Summary... 1 Top 4 Network Security Challenges Addressing Security Challenges with
Section 12 MUST BE COMPLETED BY: 4/22
Test Out Online Lesson 12 Schedule Section 12 MUST BE COMPLETED BY: 4/22 Section 12.1: Best Practices This section discusses the following security best practices: Implement the Principle of Least Privilege
McAfee Deep Safe. Security beyond the OS. Kai-Ping Seidenschnur Senior Security Engineer. October 16, 2012
McAfee Deep Safe Security beyond the OS Kai-Ping Seidenschnur Senior Security Engineer October 16, 2012 Intel/McAfee Initiatives: epo Deep Command and Deep Defender McAfee epo Deep Command Security Management
Best Practices for Outdoor Wireless Security
Best Practices for Outdoor Wireless Security This paper describes security best practices for deploying an outdoor wireless LAN. This is standard body copy, style used is Body. Customers are encouraged
IBM Endpoint Manager Product Introduction and Overview
IBM Endpoint Manager Product Introduction and Overview David Harsent Technical Specialist Unified Endpoint IBM Endpoint Manager and IBM MobileFirst Protect (MaaS360) Any device. Identify and respond to
Ovation Security Center Data Sheet
Features Scans for vulnerabilities Discovers assets Deploys security patches transparently Allows only white-listed applications to run in workstations Provides virus protection for Ovation Windows workstations
Total Protection for Compliance: Unified IT Policy Auditing
Total Protection for Compliance: Unified IT Policy Auditing McAfee Total Protection for Compliance Regulations and standards are growing in number, and IT audits are increasing in complexity and cost.
IBM Tivoli Endpoint Manager for Security and Compliance
IBM Endpoint Manager for Security and Compliance A single solution for managing endpoint security across the organization Highlights Provide up-to-date visibility and control from a single management console
McAfee epolicy Orchestrator * Deep Command *
SOLUTION BLUEPRINT IT SECURITY MANAGEMENT McAfee epolicy Orchestrator * Deep Command * Industry IT security management across industries Business Challenge Comprehensive security management solution allowing
USER GUIDE: MaaS360 Services
USER GUIDE: MaaS360 Services 05.2010 Copyright 2010 Fiberlink Corporation. All rights reserved. Information in this document is subject to change without notice. The software described in this document
End-user Security Analytics Strengthens Protection with ArcSight
Case Study for XY Bank End-user Security Analytics Strengthens Protection with ArcSight INTRODUCTION Detect and respond to advanced persistent threats (APT) in real-time with Nexthink End-user Security
BitLocker Drive Encryption Hardware Enhanced Data Protection. Shon Eizenhoefer, Program Manager Microsoft Corporation
BitLocker Drive Encryption Hardware Enhanced Data Protection Shon Eizenhoefer, Program Manager Microsoft Corporation Agenda Security Background BitLocker Drive Encryption TPM Overview Building a BitLocker
Document ID. Cyber security for substation automation products and systems
Document ID Cyber security for substation automation products and systems 2 Cyber security for substation automation systems by ABB ABB addresses all aspects of cyber security The electric power grid has
Symantec Endpoint Protection Analyzer Report
Symantec Endpoint Protection Analyzer Report For Symantec Customer Table of Contents Statement of Confidentiality... 3 1. Introduction... 4 2. Environmental Analysis Overview... 5 2.1 Findings Overview...
Index. BIOS rootkit, 119 Broad network access, 107
Index A Administrative components, 81, 83 Anti-malware, 125 ANY policy, 47 Asset tag, 114 Asymmetric encryption, 24 Attestation commercial market, 85 facts, 79 Intel TXT conceptual architecture, 85 models,
Did you know your security solution can help with PCI compliance too?
Did you know your security solution can help with PCI compliance too? High-profile data losses have led to increasingly complex and evolving regulations. Any organization or retailer that accepts payment
Hardware-Assisted Workspace Virtualization RingCube vdesk on Intel Core vpro Processors
Hardware-Assisted Workspace Virtualization RingCube vdesk on Intel Core vpro Processors About the Authors Dr. Charlton Barreto Platform Architect Intel Corporation Charlton Barreto is a member of Intel
Security concept for gateway integrity protection within German smart grids
Security concept for gateway integrity protection within German smart grids Prof. Dr. Kai-Oliver Detken DECOIT GmbH, Fahrenheitstr. 9, D-28359 Bremen Email: detken@decoit.de Carl-Heinz Genzel, Olav Hoffmann,
Mobile Network Access Control
Mobile Network Access Control Extending Corporate Security Policies to Mobile Devices WHITE PAPER Executive Summary Network Access Control (NAC) systems protect corporate assets from threats posed by devices
MOBILITY BEYOND BYOD. Jonas Gyllenhammar. Consulting Engineer Junos Pulse solutions
MOBILITY BEYOND BYOD Jonas Gyllenhammar Consulting Engineer Junos Pulse solutions BYOD DEFINED Corporate Owned Devices Employee Owned Devices (BYOD) Guest Devices Today's business environment requires
Efficient and easy-to-use network access control and dynamic vlan management. Date: 4.12.2007 http:// F r e e N A C. n e t Copyright @2007, Swisscom
Efficient and easy-to-use network access control and dynamic vlan management Date: 4.12.2007 http:// F r e e N A C. n e t Copyright @2007, Swisscom 1 Connection to the enterprise LAN is often (too) easy
Security Industry Market Share Analysis
Security Industry Market Share Analysis September 2011 Introduction The Research OPSWAT releases quarterly market share reports for several sectors of the security industry. This quarter s report includes
ForeScout CounterACT. Device Host and Detection Methods. Technology Brief
ForeScout CounterACT Device Host and Detection Methods Technology Brief Contents Introduction... 3 The ForeScout Approach... 3 Discovery Methodologies... 4 Passive Monitoring... 4 Passive Authentication...
Reducing the cost and complexity of endpoint management
IBM Software Thought Leadership White Paper October 2014 Reducing the cost and complexity of endpoint management Discover how midsized organizations can improve endpoint security, patch compliance and
Security Module v2.0. White Paper. April 2011
Security Module v2.0 White Paper April 2011 Security Module: Comprehensive Security for CareFusion Products Overview CareFusion offers a comprehensive security technology solution for products running
WHITEPAPER. Addressing Them with Adaptive Network Security. Executive Summary... An Evolving Network Environment... 2. Adaptive Network Security...
WHITEPAPER Top 4 Network Security Challenges in Healthcare Addressing Them with Adaptive Network Security Executive Summary... 1 Top 4 Network Security Challenges Addressing Security Challenges with Adaptive
Overview of Windows 10 Requirements for TPM, HVCI and SecureBoot
presented by Overview of Windows 10 Requirements for TPM, HVCI and SecureBoot UEFI Spring Plugfest May 18-22, 2015 Gabe Stocco, Scott Anderson, Suhas Manangi Updated 2011-06-01 UEFI Plugfest May 2015 www.uefi.org
Proven LANDesk Solutions
LANDesk Solutions Descriptions Proven LANDesk Solutions IT departments face pressure to reduce costs, reduce risk, and increase productivity in the midst of growing IT complexity. More than 4,300 organizations
Network Access Control (NAC)
Solutions Network Access Control (NAC) Allied Telesis provides advanced edge security for Enterprise networks Security Issues The security issues facing Enterprise networks have evolved over the years,
Building Blocks Towards a Trustworthy NFV Infrastructure
Building Blocks Towards a Trustworthy NFV Infrastructure IRTF NFVRG Adrian L. Shaw Hewlett-Packard Laboratories / July 22 nd, 2015 1 Why security and trust? Big requirement for critical
Dell Client. Take Control of Your Environment. Powered by Intel Core 2 processor with vpro technology
Dell Client Systems Take Control of Your Environment Powered by Intel Core 2 processor with vpro technology Simplifying IT As IT infrastructures grow, heterogeneous environments expand. Growing infrastructures
Embedded Trusted Computing on ARM-based systems
1 / 26 Embedded Trusted Computing on ARM-based systems Martin Schramm, M.Eng. 10.04.2014 Agenda 2 of 26 martin.schramm@th-deg.de Embedded computing platforms have become omnipresent intend to alleviate
5 Steps to Advanced Threat Protection
5 Steps to Advanced Threat Protection Agenda Endpoint Protection Gap Profile of Advanced Threats Consensus Audit Guidelines 5 Steps to Advanced Threat Protection Resources 20 Years of Chasing Malicious
Client Manageability. Out-of-Band Management with DMTF DASH. Valerie K. Kane Commercial Client Product Group, AMD
Client Manageability Out-of-Band Management with DMTF DASH Valerie K. Kane Commercial Client Product Group, AMD Agenda Overview: Out-of-Band Client Management Standards-Based Client Management DASH: Key
Intel Cyber Security Briefing: Trends, Solutions, and Opportunities. Matthew Rosenquist, Cyber Security Strategist, Intel Corp
Intel Cyber Security Briefing: Trends, Solutions, and Opportunities Matthew Rosenquist, Cyber Security Strategist, Intel Corp Legal Notices and Disclaimers INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION
Windows 7, Enterprise Desktop Support Technician
Course 50331D: Windows 7, Enterprise Desktop Support Technician Page 1 of 11 Windows 7, Enterprise Desktop Support Technician Course 50331D: 4 days; Instructor-Led Introduction This four-day instructor-ledcourse
Leading by Innovation McAfee Endpoint Security The Future of Malware-Detection: Activate protection on all Layers outside the Operating System
Leading by Innovation McAfee Endpoint Security The Future of Malware-Detection: Activate protection on all Layers outside the Operating System Dipl.-Inform. Rolf Haas Principal Security Engineer, S+,CISSP
A viable SIEM approach for Android
IDAACS 2015, 24.-26.09.15 A viable SIEM approach for Android Kai-Oliver Detken Evren Eren Markus Schölzel DECOIT GmbH Fahrenheitstraße 9 D-28359 Bremen https://www.decoit.de detken@decoit.de Outline Introduction
Course: Information Security Management in e-governance. Day 1. Session 5: Securing Data and Operating systems
Course: Information Security Management in e-governance Day 1 Session 5: Securing Data and Operating systems Agenda Introduction to information, data and database systems Information security risks surrounding
Security Industry Market Share Analysis
Security Industry Market Share Analysis December Introduction The Research OPSWAT releases quarterly market share reports for several sectors of the security industry. This report includes both worldwide
Dell Client BIOS: Signed Firmware Update
Dell Client BIOS: Signed Firmware Update An Implementation and Deployment Guide to NIST SP800-147 BIOS Protections for Dell Client BIOS Rick Martinez Dell Client BIOS This white paper is for informational
Fear and Loathing in BYOD or "What I Learned Reading the SANS Mobility Survey Results"
Fear and Loathing in BYOD or "What I Learned Reading the SANS Mobility Survey Results" Sponsored by GIAC and Trusted Computing Group 2013 The SANS Institute www.sans.org Today s Speakers Joshua Wright,
Windows 7, Enterprise Desktop Support Technician Course 50331: 5 days; Instructor-led
Lincoln Land Community College Capital City Training Center 130 West Mason Springfield, IL 62702 217-782-7436 www.llcc.edu/cctc Windows 7, Enterprise Desktop Support Technician Course 50331: 5 days; Instructor-led
CloudCheck Compliance Certification Program
CloudCheck Compliance Certification Program Ensure Your Cloud Computing Environment is Secure with CloudCheck Certification Organizations today are increasingly relying on a combination of private and/or
Information Security for the Rest of Us
Secure Your Way Forward. AuditWest.com Information Security for the Rest of Us Practical Advice for Small Businesses Brian Morkert President and Chief Consultant 1 Introduction President Audit West IT
Ovation Security Center Data Sheet
Features Scans for vulnerabilities Discovers assets Deploys security patches easily Allows only white-listed applications in workstations to run Provides virus protection for Ovation Windows stations Aggregates,
Windows 7. Qing Liu Qing.Liu@chi.frb.org Michael Stevens Michael.Stevens@chi.frb.org
Windows 7 Qing Liu Qing.Liu@chi.frb.org Michael Stevens Michael.Stevens@chi.frb.org 1 Overview 1. Financial Institution s Preliminary Steps 2. User Interface 3. Data Protection 4. User and Group Changes
Enforcing PCI Data Security Standard Compliance
Enforcing PCI Data Security Standard Compliance Marco Misitano, CISSP, CISA, CISM Business Development Manager Security & VideoSurveillance Cisco Italy 2008 Cisco Systems, Inc. All rights reserved. 1 The
The RT module VT6000 (VT6050 / VT6010) can be used to enhance the RT. performance of CANoe by distributing the real-time part of CANoe to a
Getting started with VT6000 and VT6104 The RT module VT6000 (VT6050 / VT6010) can be used to enhance the RT performance of CANoe by distributing the real-time part of CANoe to a dedicated RT execution
Cisco AnyConnect Secure Mobility Client integration with ISE & SCCM client for patch remediation on windows
Cisco AnyConnect Secure Mobility Client integration with ISE & SCCM client for patch remediation on windows This document is about how Cisco AnyConnect Secure Mobility client (aka AnyConnect) can be integrated
Patterns for Secure Boot and Secure Storage in Computer Systems
Patterns for Secure Boot and Secure Storage in Computer Systems Hans Löhr, Ahmad-Reza Sadeghi, Marcel Winandy Horst Görtz Institute for IT Security, Ruhr-University Bochum, Germany {hans.loehr,ahmad.sadeghi,marcel.winandy}@trust.rub.de