120 likes | 135 Vues
Malware—taking protection to where the threats are. Fran Howarth Senior Analyst, Security Bloor Research. The realities of malware today. Previously on the decline, malware threats are on the rise again. Greater chance of success. The internet is the new perimeter.
E N D
Malware—taking protectionto where the threats are Fran Howarth Senior Analyst, Security Bloor Research
The realities of malware today Previously on the decline, malware threats are on the rise again Greater chance of success
The internet is the new perimeter “You’ve already been de-perimeterised” An alternative take on the term “de-perimeterisation”, first coined by the Jericho Forum, that describes security exploits such as internet worms and viruses that are designed to bypass the borders of organisations using web and email threats. Source: Network World
Reliance on email and theinternet is growing • 62% of people check work email over the weekend • 55% of mobile email users upgraded to a new phone just to get email • 59% admit to checking email from the bathroom Source: AOL email addiction survey 2009
The imperative for data security • Some recent headlines: • “Hacked website exposes customers’ credit card details” • “State employee data accessible on website exposing names, addresses, DOB and social security numbers” • “Names and social security numbers of about 5,000 accidentally posted to web” Source: DataLossDB
Why existing securitytechnologies are no longer enough • Too many malware variants, introduced too fast • Existing mechanisms using signatures can’t cope—too long to develop and too much hassle to update all users in in-house deployments • Mobile workers left out in the cold • New technologies make the threats worse—social networking, Web 2.0 in general • Browser as principal means of infection • Hybrid threats using blended mechanisms
Move protection to the cloud Anti-virus Anti-spyware Anti-phishing Application blocking Policy enforcement URL filtering Internet Corporate network at HQ Cloud-based web security Services and analysis centre Remote data centre for failover and redundancy Mobile workers and remote offices Anti-virus Anti-spyware Anti-phishing Application blocking Policy enforcement URL filtering Management reporting dashboard for audit
Why the cloud makes sense Email and web Security provided In the cloud Traffic routed via cloud-based service provider enables better, more economical protection X X X Only good traffic reaches organisation Organisation relies purely on perimeter defences
What drove your move to SaaS? Ranked from 1 = not a factor to 5 = major driver Source: InformationWeek Analytics 2010 SaaS survey of131 business technology Professionals using SaaS
Conclusions Web and email security is a necessity in today’s world where the web is a prime vector of attack Moving protection to where the threats emanate from provides better, faster protection against increasingly complex, sophisticated threats being seen Not only is the available protection provided faster and is of higher quality than traditional security technologies, but the use of cloud-based services can afford organisations with substantial cost benefits as well
Thank you Fran Howarth, Bloor Research fran.howarth@bloorresearch.com