Data Security on the Move Mark Bloemsma, Sr. Sales Engineer Websense
Consumerization of IT Fast & disruptive Enables business Increases productivity
It s Mine!
THE MOBILE ENTERPRISE. TYPES OF DEVICES METHODS OF ACCESS TYPES OF DATA STORAGE OPTIONS APPS USED CORPORATE DATA CENTER CORPORATE DATA CLOUD STORAGE BUSINESS APPS ON-DEVICE STORAGE 3G PERSONAL DATA EXTERNAL STORAGE CONSUMER APPS
THE EMPOWERED USER
Fundamental shift in security needed THE NUMBER OF SUCCESSFUL NETWORK SECURITY BREACHES OVER THE PAST YEAR 10% 21% 59% NONE 1 TIME 2 TO 5 TIMES
WEB EXPOSURE DRIVES INFORMATION THEFT Insider abuse 52% Malicious software download 48% Malware from a website Malware from social media System glitch 43% 29% 19% Do not know 16% Malware from a message 5%
TRENDS Externalization of IT infrastructure Consumerization & virtualization of the end point Windows8 security leaps forward HACKED Business enablement via social web Security consolidation continues Data oriented attacks are an everyday event
It s the Data Not the Device Challenges User owned device You may or may not own the pipe Lives outside your network Primary Risk Secure corporate data on the device If the device is lost Employee leaves the company Prevent data leakage to unauthorized destinations or recipients 9
Examples of Data at Risk 10
Fake Anti-Virus 12
App Analyser 13
App Analyser continued 14
What are we interested in? Who What H Y Where How When 15
What s in the news? 16
The Door to Malware 17
Shortcomings of Current Approaches OPTION #1 ActiveSync for device controls OPTION #3 Tablet as a terminal Provides basic controls such as access to Exchange, password enforcement, remote wipe but no data leakage prevention or threat protection. Run enterprise apps on a server farm and display them on the tablet. Significant investment in infrastructure with limited data protection. OPTION #2 Backhaul traffic over VPN Using a VPN client to backhaul traffic to enterprise network. Results in higher infrastructure and management costs. OPTION #4 Invest in Mobile Device Management (MDM) solutions Provides device level controls but these systems are content unaware and vulnerable to malware & data loss. 18
TRITON Mobile Security Vision Data leakage & Data Theft Prevention Malware Protection Mobile device management Mobile App Categorization Integrated Policy Mgmt & Reporting SaaS Solution The only SaaS solution that will extend your corporate content security policies to mobile devices, protecting them from latest mobile threats and preventing any data leakage * Supported devices: idevice, Android, Windows Mobile, Blackberry 19
Websense and ThreatSeeker Websense Web Security Gateway Threat Detection/Probes Real-Time Security Updates Shared Analytics/Feedback ACE Technology 1 billion pieces of content per day 3-5 billion per day Websense Hosted Customers URL and Security Database Websense Security Labs ACE Technology 400+ million sites per day 10+ million emails per hour 2.5 billion URLs per day ACE Technology Websense Hosted Security 20
TRITON Mobile Security Web Security Mobile Security Mobile Security ACE + ThreatSeeker Network Malicious Mobile App Tracker Management + Reporting VPN** WiFi/3G ** ios, Android
TRITON Mobile Security Mobile Email DLP Web Security Mobile Security Exchange Email Server Mobile Security ACE + ThreatSeeker Network Malicious Mobile App Tracker Management + Reporting Enterprise DLP controls ActiveSync* Enterprise email *Any ActiveSync compatible device VPN** WiFi/3G ** ios, Android
TRITON Mobile Security Mobile Email DLP Web Security Mobile Security Exchange Email Server ActiveSync* Mobile Security ACE + ThreatSeeker Network Malicious Mobile App Tracker Management + Reporting + MDM Enterprise DLP controls Enterprise email *Any ActiveSync compatible device VPN** WiFi/3G ** ios, Android
MDM Capabilities for ios 25
MDM Capabilities for ios Device Functionality Password enforcement Allow app installation Allow use of the camera Allow FaceTime Allow screen capture Allow automatic sync while roaming Allow voice dialing Allow in-app purchases Allow multiplayer gaming Allow addition of game center friends Force encrypted backups Log on to the portal to view more Applications Allow use of YouTube Allow use of itunes Store Allow use of Safari Enable auto fill Force Fraud warnings Enable JavaScript Block popups Allow explicit music and podcasts Set rating region Set content ratings for Movies TV shows Apps 26
Reports Devices per user Device by type Device by user Bandwidth user trends Top bandwidth users Top applications Mobile users per group Administrative actions per device Administrative actions over time Top device per administrative action Administrative action details More to come 27
Live Demo
Thank you! Questions, Remarks, Discussion