The Trends and the Customer Challenges in Identity and Access Management

Transcription

1 The Trends and the Customer Challenges in Identity and Access Management Traxion: RSA: John van Westeneng Corné van Rooij 1

2 TRILLIONS OF DEVICES BILLIONS OF USERS MILLIONS OF APPS Mobile Cloud Big Data Social Mobile Devices HUNDREDS OF MILLIONS OF USERS TENS OF THOUSANDS OF APPS LAN/Internet PC Client/Server MILLIONS OF USERS THOUSANDS OF APPS Source: IDC Mainframe, Mini Computer Terminals 4

3 Trends create Market Disruptors Mobile Cloud Big Data Extended Workforce Networked Value Chains APTs Sophisticated Fraud Infrastructure Transformation Less control over access device and back-end infrastructure Business Transformation More hyper-extended, more digital Threat Landscape Transformation Fundamentally different tactics, more formidable than ever 5

4 Identity related threats? 6 6

5 Everyone will get there! You can t stop time progressing 7

6 Trend: Mobile Websites will be out, Apps will be in From 1-2 desktops to a set of devices Even more identities; personal & business Business apps, internal use only BYOD and BYOI Federated networks with clouds specifically for mobile use. 8

7 Trend: Cloud As clients became web and Internet became fast, Cloud based IT will continue growing fast. Cost saving, Time-to-Market and Knowledge are the driving factors. Security and specifically data protection, privacy, SSO and identity management are key for getting over the flipping point (dominant adoption). 9

8 Trend: Social Media First started for personal use. Now spinning off more and more for business and commercial use. Many, many (too many) ID s. Interconnected, federated. Private/Business difficulties. Threat landscape for ID theft. 10

9 Trend: Big Data Data is exploding. Data can be turned into Information adding context. Buying behaviour 40 x Information is Value. The right information = gold Attach it to an ID and you have business and a potential privacy issue. Daddy Brochure 11

10 What is there to stay and what will leave Reshuffle spending! You can t invest in new and maintain old. Business driven AC Federation WebSSO Identity Broker Risk based or context based Access Control RBAC Central ID directory Enterprise-SSO HW/SW Token Auth. Internal only IDM systems 12

11 Trends create Market Disruptors Some take aways Mobile Cloud Big Data Extended Workforce Networked Value Chains APTs Sophisticated Fraud Infrastructure Transformation Business Transformation Threat Landscape Transformation Standardization Hybrid, responsive applications Context based access control Containerization Identity broker Privacy 13

12 Standardization From standard solutions/services to standard components and functions building custom, high quality solutions 14

13 Hybrid, responsive applications (Mobile) application development platform Identity & authentication Vulnerability control Security policies API security 15

14 Containerization A balancing act between the enterprise and the user. Enables a secure any device strategy Any device, any platform From encrypted folders to app wrappers to dual persona OS modes. 16

15 Context based authentication Use knowledge, i.e. context, to reduce risks and increase usability Use the context factor to strengten your authentication factors, or even replace it with an authentication factor. Intelligence and big data technologies are helping to understand user behavior and context. 17

16 Get an identity broker Enterprise Auth Customer Auth Social Auth Identity Broker trust provider Information providers Enterprise Apps Cloud Web Apps Mobile Apps Social Apps From enterprise identity to consumer identity to social identity Ensure you can connect multiple Identity Providers Be able to translate tokens from SAML to OAUTH to OpenID Connect to And propagate user data before delivering it to the application 18

17 Attribute based access control Static versus dynamic authorization User attributes instead of roles Identity and Information lifecycle management Characteristics: Authentication level, device id, organizational unit, roles(?), function, tasks, Design your authorization model based on attributes Source: blog.empowerid.com 19

18 AUDIENCE QUESTIONS How many companies in the room face or foresee a privacy challenge with the use of Big Data for their business? Who think age is a privacy related attribute? Who think shopping information is a privacy related attribute? 20

19 Keep the user central Security by design Visibility and transparency Integrated in the design 21

20 How it comes together? Big Data Mobile Social Media PRIVACY Cloud Standardization Hybrid, responsi ve applications Containerization Context based authentication Identity broker Attribute based access control Privacy by Design 22

21 23

22 24

23 Partners in Information Security 25