The Need For A New IT Security Architecture: Global Study On The Risk Of Outdated Technologies

Size: px

Start display at page:

Download "The Need For A New IT Security Architecture: Global Study On The Risk Of Outdated Technologies"

Hilary McKinney
6 years ago
Views:

1 The Need For A New IT Security Architecture: Global Study On The Risk Of Outdated Technologies Daniel Yeung Technical Manager, Hong Kong & Taiwan AUG Citrix

2 Why Worry? Security needs to be top-of-mind

3 Citrix The threat is real

4 WannaCry: 230k Hosts infected NotPetya: 15k servers, 50k endpoints at one customer Citrix

5 The consequences are expensive Citrix

6 Cybercrime cost businesses $3b 89% of breaches had financial or espionage motive According to Verizon s 2016 Data Breach Investigations Report Citrix

7 Security Landscape Growing Attack Surface Security Professionals Biggest Sources of Concern Related to Cyber Attacks Citrix

8 Major cyber attacks in last 2 years by region North America 21% European Union 29% % of respondents who experienced cyber attacks Asia-Pacific 32% Below global average Global average Above global average Global Average 28% Source: KPMG CIO Survey ,400 responses from CIOs and technology leaders across 82 countries Citrix

Businesses at Risk Because of Organizational Complexity 83% say their organization is at risk because of the complexity of business and IT operations 71% say there is risk from their inability to

9 Businesses at Risk Because of Organizational Complexity 83% say their organization is at risk because of the complexity of business and IT operations 71% say there is risk from their inability to control employees devices and apps 74% say a new IT security framework is needed to improve security posture and reduce risk The Need for a New IT Security Architecture: Global Study Sponsored by Citrix and conducted by Ponemon Institute January Citrix

10 Citrix Rethinking Security

11 OLD NEW WHERE WHAT Apps Users Services Data Citrix

12 OLD NEW FORCE THE USER FOLLOW THE USER Software-Defined Perimeter Apps Users Services Centralized Policy Data Distributed Hybrid Enforcement Citrix

13 OLD NEW ATTACKERS USERS Citrix

14 OLD NEW ZONES CONTEXT Network Apps Data Access Citrix

15 OLD NEW LOCKS DETECTORS Citrix

16 NEW What Follow the User Users Context-based Detectors Software Defined Perimeter Citrix Analytics Service Citrix

17 NEW What Follow the User Users Context-based Detectors Software Defined Perimeter Citrix Analytics Service Citrix

18 Citrix

19 Citrix Secure Digital Workspace Software Defined Perimeter Unified Experience Contextual Access Unified Endpoint Management BYO Identity App Ops Users Single Sign-on Contextual Performance Legacy/ Custom Apps Content Control Secure IT Security & Performance Analytics Citrix

20 Citrix Secure Digital Workspace Software-Defined Perimeter Unified Experience Contextual Access Unified Endpoint Mgmt. Users BYO Identity Single Sign-on Contextual Performance Legacy/ Custom Apps App Ops Content Control Secure IT Security & Performance Analytics Citrix

21 Citrix

22 Citrix Secure Digital Workspace Software-Defined Perimeter Unified Experience Contextual Access Unified Endpoint Mgmt. Users BYO Identity Single Sign-on Contextual Performance Gateway as a Service Legacy/ Custom Apps WebApp Firewall and DDoS as a Service Security & Performance Analytics App Ops Content Control Secure IT SD-WAN as a Service Citrix

23 Citrix Secure Digital Workspace Software-Defined Perimeter Users Unified Experience BYO Identity Single Sign-on Contextual Access Contextual Performance IT Controls: Onboard, monitor and control Legacy/ your devices, apps, Custom Apps and content Unified Endpoint Mgmt. App Ops Content Control Secure IT Security & Performance Analytics Citrix

24 Citrix Secure Digital Workspace Software-Defined Perimeter Unified Experience Contextual Access Unified Endpoint Mgmt. Users BYO Identity Single Sign-on Contextual Performance Legacy/ Custom Apps App Ops Content Control Secure IT Security & Performance Analytics Citrix

25 Citrix

26 Citrix

Identity & Access Network Security Application Security Data Security

27 Citrix: Secure Delivery of Apps & Data Enhanced IT and Security Operations Reduce Risk Confidentiality Integrity Availability Identity & Access Network Security Application Security Data Security Monitoring & Response Enterprise Cloud Public Cloud Managed Services Citrix

Citrix Security Capabilities Identity & Access Network Security Application Security Data Security Monitoring & Response Authentication n-factor Authentication Federation Single Sign On Remote Access

28 Citrix Security Capabilities Identity & Access Network Security Application Security Data Security Monitoring & Response Authentication n-factor Authentication Federation Single Sign On Remote Access Unified Gateway Encrypted Delivery SmartControl Centralization App Virtualization Restrict Virt. Channel Secure Browser Centralization Hosted Delivery Water Marking Peripheral Control Visibility HDX Insight Web Insight Security Insight Authorization Role Based Task Based Location Based Segmentation SDX Instances Admin Partitions Traffic Domains Containerization Micro VPN Jailbreak Detection Secure Apps Containerization Restrict Open-in Encrypt Data at Rest Inter-App Control Auditing Access Logs Configuration Logs Session Recording Access Control Endpoint Analysis Contextual Control Quarantine Availability Load Balancing Health Monitoring DDoS Protection Inspection Web AppFW DDoS Protection Zero-Day Protection File Sharing File Expiration Encrypted Remote Wipe Compliance FIPS PCI DSS HIPAA Common Criteria Citrix

29 Takeaway Threat is Real The Consequences are Expensive Rethinking Security What from Where Follow the User from Force the User Users from Attackers Context-based from Zones Detectors from Locks Citrix

30 Citrix

MOBILE SECURITY 2017 SPOTLIGHT REPORT. Information Security PRESENTED BY. Group Partner

MOBILE SECURITY 2017 SPOTLIGHT REPORT Group Partner Information Security PRESENTED BY OVERVIEW Security and privacy risks are on the rise with the proliferation of mobile devices and their increasing use