Proteggere Office365 e Cloud file sharing in meno di un minuto Tiberio Molino Sr.Sales Engineer Trend Micro

Size: px

Start display at page:

Download "Proteggere Office365 e Cloud file sharing in meno di un minuto Tiberio Molino Sr.Sales Engineer Trend Micro"

Samson Doyle
6 years ago
Views:

1 Proteggere Office365 e Cloud file sharing in meno di un minuto Tiberio Molino Sr.Sales Engineer Trend Micro

2 2

3 Customer Challenges 3

4 Most Attacks Include Phishing s 5

5 Advanced Malware Difficult to Detect 90% of malware is used only once Network Breach Detection Systems help but miss traffic between offnetwork devices and SaaS services MS Office files with malware used in 60% targeted attacks 60% 6

6 User behavior changing: Attachments Cloud File Sharing 7 gateways don t see files which are already in the cloud!

7 What are Users Uploading to the Cloud? Compliance data? Sensitive information? 8

8 Many Companies Gradually Move to Cloud Intermediate stage to full cloud deployment May always keep group of users on premises Want equivalent protection without extra management 9

9 Before Cloud Apps Network boundary Most components are inside network boundary Can add layered protection including endpoint, SharePoint, DLP, gateways, sandboxing

10 Endpoints are frequently outside the corporate network Network boundary and documents move to the cloud, gateways can t see them

11 An attacker sends a zero-day infected PDF to a remote employee s personal

12 The employee uploads to Office 365 Another employee sees the PDF and downloads it

13 And this employee sends the PDF to a customer Customer

Why do I need to supplement the security built in to Office 365? Exchange Online is designed and SLA backed to catch 100% known malware But 90% malware is used only once. Only 10% malware is known.

16 Why do I need to supplement the security built in to Office 365? Exchange Online is designed and SLA backed to catch 100% known malware But 90% malware is used only once. Only 10% malware is known. Every customer needs a strategy to deal with unknown malware If you bought a new home with a smoke detector guaranteed to detect 10% of fires would you supplement it? 17 Copyright 2015 Trend Micro Inc.

Securing SaaS-based Applications Advanced Threat Detection Finds zero-day and hidden threats Sandbox file analysis in the cloud Web reputation for URLs in email/files Data Loss Prevention (DLP)

18 Securing SaaS-based Applications Advanced Threat Detection Finds zero-day and hidden threats Sandbox file analysis in the cloud Web reputation for URLs in /files Data Loss Prevention (DLP) Discovery and visibility into confidential data usage. DLP enforcement for cloud file sharing 240 customizable templates Direct cloud-to-cloud integration using vendor API s. No user changes, rerouting, or web proxy. 19

Cloud App Security Architecture API s https

assessment (Microsoft Azure datacenters)

Micro datacenters) Trend Micro Cloud App

email/files stored Quarantines located in

19 Cloud App Security Architecture API s https DLP URL scan Malware scan / file risk assessment (Microsoft Azure datacenters) https Sandbox Analysis <2% of files (Trend Micro datacenters) Trend Micro Cloud App Security 20 All communications encrypted No /files stored Quarantines located in customers accounts for Office 365, Box, Dropbox, Google Drive

20 Simple and Elegant Integration with SaaS Services API Cloud App Security Direct cloud-to-cloud integration using vendor s API s No impact to user/admin functionality Supports all devices, anywhere Fully automatic setup (above 5000 users contact Trend Micro for best practices) MX R e c o r d S o f t w a r e U s e r settings We b p r o x y 21

21 Cloud App Security s DLP Functionality 240 built in compliance templates which can be customized Import, create your own templates Exchange Online OneDrive for Business, Box, Dropbox, Google Drive, SharePoint Online Discovery (manual scan of database) Visibility / Reporting Enforcement delete/quarantine Not available* * in-line blocking of DLP violations is not available due to a limit of the Microsoft API 22

Fewer Delays Trend Micro risk assessment avoids sandboxing 98% files and analyzes files quicker: Microsoft ATP Trend Micro Cloud App Security Average sandbox time 7-8 min* 4-5 min * MSFT users report

22 How is it different from Microsoft s Advanced Threat Protection Service? 1. More Protection Microsoft ATP Trend Micro Cloud App Security Office 365 OneDrive, SharePoint Box, Dropbox, Google Drive 2. Fewer Delays Trend Micro risk assessment avoids sandboxing 98% files and analyzes files quicker: Microsoft ATP Trend Micro Cloud App Security Average sandbox time 7-8 min* 4-5 min * MSFT users report frequent min delays 3. Better Protection Trend Micro top rated Deep Discovery technology Microsoft new unproven technology AV-Test finds Trend Micro 100% effective against unknown malware and Microsoft only 76.5% Cloud App Security detected 1.2M malicious files Jul 15-May 16. If it had an effectiveness score of only 76.5%, then 282,000 malware would have remained undetected AV-Test.org Jan-Jun 2015 testing of endpoint security products shows the relative effectiveness of security technologies against unknown malware 23

Cloud App Security Service Delivery Netherlands US Germany US

Sandbox service (<2% files), hosted by Trend Micro 99.

located within customer accounts for Office 365, Box, Dropbox

23 Cloud App Security Service Delivery Netherlands US Germany US Japan Cloud App Security service, hosted by Microsoft Azure Sandbox service (<2% files), hosted by Trend Micro 99.9% Available No /files stored by Trend Micro Quarantines located within customer accounts for Office 365, Box, Dropbox US & EMEA sites are not interconnected All communications use encrypted https 24

24 Find Hidden and Zero Day Malware Dynamic Sandbox Analysis Leverages technology from Trend Micro Deep Discovery: 27

25 Central Visibility with Control Manager User centric threat and DLP visibility across web, endpoint, , cloud security layers Single viewpoint into hybrid Office 365 & on-premises Exchange architectures 28

26 More protection than a SaaS gateway solution Redirect with MX-Record change SaaS Gateway Direct API integration into the cloud service Cloud App Security Gateway Cloud App Security Inbound Spam, Threat Threat (including malicious spam) Internal no protection Threat, DLP reporting Outbound Threat, DLP enforcement, encryption Threat, DLP reporting (no enforcement for outbound) Cloud file sharing & collaboration no protection Threat, DLP enforcement 30

27 31

28 Demo! 33

29 34

30 36

31 Grazie! 37

Securing and File Sharing in the Cloud

Securing and File Sharing in the Cloud Securing Email and File Sharing in the Cloud Your Presenter Erick Simpson Vice President & CIO, SPC International Online A strategic IT business transformation specialist experienced in improving top and