About Us. Innovating proven technology for practical security solutions

Transcription

1 Rethink Security

2 About Us Innovating proven technology for practical security solutions Virtualization Security Application Security Platform Security Cross Domain Security

3 Desktop Consolidation Case Study Reduced Total Cost of Ownership (TCO) with Enhanced Security

4 Forces at work Pressure to reduce costs (TCO) Security concerns Green Computing initiatives

5 Assertions Power, HVAC, and space costs vary widely by geography Desktop consolidation generally means more powerful systems required Reduction in number of systems and reduced environmental impact is significant.

6 Customer Profile Organization provides national security related system test and evaluation services Enterprise consists of 400 analysts and staff Four separate networks are used for testing, production, and information segregation To meet stringent regulatory requirements, the desktops on each network are isolated from the other networks To enable each user to access each network requires 4 separate desktop computers

7 Challenges 1. Each user requires four separate desktops to perform his/her work 2. CIO organization deploys, manages and supports more than 1600 workstations across the enterprise 3. Power, heating/air conditioning, and space requirements are serious issues 4. New "green computing" initiatives dictate a reduction in overall power consumption

8 Another challenge Given the first four challenges, virtualization would sound like an easy solution The final challenge was a showstopper the operational, security, and regulatory requirements Mission requirements stipulated data integrity and security standards that specified strong separation at the workstation level

9 Solution Using Tresys VM Fortress Desktop enables the organization to consolidate 1600 workstations down to 400 Each user can access 4 systems on a single hardware platform - each runs as an isolated virtual machine Data separation is maintained using the strong security mechanisms provided by the base workstation operating system* This configuration satisfies all operational, security, and regulatory requirements * Mandatory Access Control (MAC) via Security Enhanced Linux (SELinux) provided by RedHat Enterprise Linux v5.

10 TCO with Enhanced Security Significant cost savings on hardware, power, HVAC, space, and support costs Improvements in speed of deployment of new applications Increase in the supportability of the infrastructure

11 Hard Numbers Table outlines the total cost of ownership (TCO) for both the organization s original configuration and the consolidated solution using Tresys VM Fortress Desktop Note that this does not include the potential cost savings by enabling strong MAC used to mitigate threats and vulnerabilities in the environment.

12 TCO Comparison* w/o Tresys VM with Tresys VM Fortress Fortress Hardware costs/system[1] $4,000 $8,000 Systems per user 4 1 Hardware cost/user $16,000 $8,000 Annual HW Depreciation $5, $2,667 Support costs per user per year[2] $7,200 $1,800 Microsoft OS and other apps cost/year $1,200 $1,200 Heating / year $400 $120 Cooling / year $400 $120 Accommodation / year[3] $600 $150 VMware Workstation + maintenance / year[4] $125 Tresys VM Fortress + maintenance / year[5] $ RedHat Enterprise Linux Workstation[6] $ Migration cost per desktop per year[7] $667 Cost per user per year $15, $7, year cost per user $45, $23, TCO for 3 years & 400 users $18,159,996 $9,446,016 TCO savings $8,713,980 % saved 48% *TCO comparison prepared using data provided by customer and RedHat

13 Summary Project leverages the power of VM Fortress Desktop Upgraded environment addresses all their major business challenges and makes the infrastructure significantly easier to manage TCO savings of nearly $9M over three years All while satisfying stringent operational, security, and regulatory requirements.

14 Notes from Chart 1. Desktop hardware requirements raised for Tresys VM Fortress systems to permit the simultaneous execution of 4 virtual machines with no performance impact (better CPUs, more RAM, faster and larger hard disks). 2. Support costs per system for an installation this size were calculated by the customer to be $1800 per system, regardless of the hardware specifications. 3. Heating, cooling, electricity, and space cost per year can vary widely. The numbers used are industry standard numbers averaged from various sources. Heating and cooling costs were increased for the Tresys VM Fortress system to account for the more powerful hardware. 4. VMware Workstation costs $250 initially plus 25% per year for maintenance in years 2 and 3 for a total of $375/system for 3 years, or $125/year. 5. Tresys VM Fortress Desktop with 4 sandboxes costs $1699 plus 15% per year for years 2 and 3 for a total of $ or $736.23/year 6. RedHat Enterprise Linux Desktop costs $337/year with a 15% discount for the installation size for a 3 year total of $ or $286.45/year. 7. Customer estimated that it costs $2000 per user to migrate to the new system and train new users.

15 Thank you for your time! Scott Winn (410) x174 Confidential

16 TM VM Fortress Desktop Secure Desktop Virtualization 2008 Tresys Technology

17 Standard virtualization does not provide strong separation or access control. VMs can access shared resources on a system. * This is a description of actual, released vulnerabilities in market leading virtualization software.

18 An exploit in a single virtual machine can can break out of the virtualization layer, attack other virtual machines, and access shared resources*. Exploit Exploit Exploit * This is a description of actual, released vulnerabilities in market leading virtualization software.

19 VM Fortress VM Fortress builds a hardened security container around each VM.

20 VM Fortress Exploits are prevented from harming the host OS and other virtual machines. MAC security stops exploits even if the virtualization layer is compromised. Exploit Exploit Exploit

21 VM Fortress configurations include Everything needed for fully operational systems after installation the desktops are secure & ready to use. Deployment Manager Configuration A Virtual Machine Library Installation Server Configuration C VM Fortress Desktops Group A VM Fortress Desktops Group B VM Fortress Desktops Group C

22 Learn More about VM Fortress Stanford Blvd., Suite 2100 Columbia, MD phone: +1 (410) fax: +1 (410) Tresys Technology

23 Thank you Scott Winn