RSA Security RSA, RC2, RC4, RC5, MD5 AES RC6 PKCS RSA Keon PKI RSA BSAFE 5 Web RSA SecurID 4000
EMC Security Strategy 1 Assess Risk EMC Infoscape Discovery Solutions EMC TS Security Practice EMC Services Partners 2 Secure People RSA Identity Assurance and Access Mgmt RSA Consumer Protection 3 Secure Infrastructure Common Security Platform Product Security Policy Vulnerability Response Program Security Policy Design 4 Secure Data RSA Data Encryption and Key Mgmt. Backup Tools & Documentum Video Surveillance Solution Encryption Design Service 5 Assure Policy Compliance RSA Reporting & Compliance Manager Documentum Content Auth. Svcs, EMC Infoscape, Discovery Solutions SIM
: 2008.0219 http://news.chinatimes.com/2007cti/2007cti-news/2007cti-news-content/0,4521,120501+122008021900109,00.html
2007.8~2008.2 2008.01.11 2008.01.11 Flickr Flickr 2008.01.17 2008.01.17 EPSON EPSON 40 40 2008.01.21 2008.01.21 2007.12.03 2007.12.03 2008.01.11 2008.01.11 Flickr Flickr 2007.12.12 2007.12.12 PayEasy PayEasy 5,400 5,400 2007.12.25 2007.12.25 8 8 2008.01.17 2008.01.17 EPSON EPSON 40 2007.11.02 40 2007.11.02 2008.01.21 2008.01.21 2007.11.08 2007.11.08 Salesforce Salesforce 2007.11.19 2007.11.19 2007.12.03 2007.12.03 2007.11.23 2007.11.23 2007.09.04 2007.12.12 2007.12.12 PayEasy 2007.09.04 PayEasy 2007.09.05 / 5,400 5,400 2007.09.05 / 2007.09.21 24 2007.09.21 24 2007.08.20 2007.08.20 2007.12.25 2007.12.25 8 8 2007.08.28 2007.08.28 2007.08.29 2007.08.29 2007.11.02 2007.11.02 2007.08.06 2007.08.06 2007.08.09 2007.08.09 2007.11.08 2007.11.08 Salesforce Salesforce.... 2007.08.06 2007.08.06 2007.11.19 2007.11.19 2007.08.09 2007.08.09.... 2007.11.23 2007.11.23 2007.09.04 2007.09.04 2007.09.05 2007.09.05 / / 2007.09.21 2007.09.21 24 24 2007.08.20 2007.08.20 2007.08.28 2007.08.28 2007.08.29 2007.08.29
?,, ( p r o f i t - d r i v e n )
2008 Google Google 67% Google 67% 15% 4% 2.2% 2%
2008 RSA AFCC Center
(, ) (,,.)
,, 25% Trend Micro
?,, Basically, RSA
RSA AFCC : : :
70%
RSA SID? \
? (Mobile User..VPN ) (.. ( )
:
RSA IT 80%
Time Base OTP(One Time Password) RSA SecurID 4000 RSA SecurID 90% 500 SecurID
: (OTP)
OTP OTP(One Time Password), userid
... ATM. + PIN... (PIN) =!
RSA SecurID Token Login: j a c k P a s s c od e : 1 2 3 4 1 5 9 7 5 9 PASSCODE = PIN + TOKENCODE 60 6~8 RSA Token UTC
SecurID Token RSA SecurID Token? GMT AES = 1110110100 0101010110 1010101010 Algorithm
Token Time Algorithm Same Time Seed Same Seed Time Algorithm 159 759 Seed RSA Security
SecurID... Internet Internet Agent Firewall Web Web Server Intranet RSA Authentication Mgr Mainframe Enterprise Agent RAS Access Point Unix
? (Mobile User..VPN ) (.. ( )
RSA Authentication Agents Acts as security guard between RSA Authentication Manager, the protected resource and the user Intercepts access requests and forces RSA SecurID authentication 300 200 RSA Authentication Agent SDK Java, C API RSA SecurID Ready program ensures consistent testing and certification of all third-party RSA Authentication Agent implementations
Users Resources Resources Users Admin PAM Agent SID4Win OS: Unix OS: Linux OS: Windows Systems Web Fax Phone Web Agents Custom Business Partner SecurID Ready Web Agents Remote Employee Dialup VPN Citrix SSL-VPN OWA Web Phone Web Agents Custom Individual Consumer Employee SID4Win 6.1 Server Web Agents OTPS Windows Wireless Web portal Wired 802.1x
300 solutions Web applications and servers Oracle EMC Documentum Sun Microsystems Apache BEA IBM Microsoft Provisioning Computer Associates IBM Thor Technologies BMC Sun Microsystems Email, workflow and office automation Microsoft Novell Adobe IBM Remote Access ipass Citrix Nortel Symantec Wireless Cisco Microsoft Nokia Perimeter defense (Firewalls, VPNs and Intrusion Detection) Aventail Check Point Software Cisco Citrix Juniper Nortel Nokia Microsoft Network and communications Lucent Cisco Radius 3COM Funk Software Cisco Lucent
RSA SecurID Authentication in Action VPN Gateway Federated Identity Management Web Access Web SSO Wireless Citrix WAP/802.11 RSA Authentication Manager and Appliance Enterprise SSO Administrative Access OS/Network Devices Data Encryption and Boot Protection
, RSA SecurID
RSA SecurID Market Leadership Secure Computing 2.3% ActivCard 4.6% Vasco 8.8% Worldwide Hardware & Software Token Revenue by Vendor Axent 0.9% Other 6.5% Traditional tokens hold a well-established position in the authentication market The market for tokens will continue to grow the peak of the traditional token market is yet to come RSA Security dominates the hardware/software token market RSA Security 77.0% Source: International Data Corp., 1999 Token and IT Authentication Market, November 2000
Network Computing Editor s Choice Award September, 1999 Top notch performance and an outstanding feature set put RSA ACE/Server at the top. SC Info Security Magazine Best Buy Award February, 2000 "Verdict -- Brilliant. Very scaleable, easy to integrate with other products and applications and easily managed, making it easy to deploy and use. Best Authentication Product of the Year May, 2000 Truly innovative solutions... Best offering in the enterprise arena.
Information Security Best Access Control & Authentication, February, 2001 [RSA SecurID] in our readers'estimations, [is among] the best-of-breed technologies for securing the enterprise." ASP European Summit, March, 2001 Most innovative ASP solution.
( 100 ) Principal Financial Group Zurich Financial Services B&Q B2B B2B Consultant Hi-Tech Hi-Tech Hi-Tech Hi-Tech Hi-Tech Hi-Tech
Token RSA National Technical Systems Inc. http://www.ntscorp.com/
RSA, EMC
EMC: RSA, EMC Information Infrastructure store protect optimize leverage
- Information-centric Security -
RSA- RSA RSA RSA RSA RSA (SIEM)
Thank you!