1 Copyright 2011, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 7

Transcription

1 1 Copyright 2011, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 7

2 ORACLE PRODUCT LOGO 20. oktober 2011 Hotel Europa Sarajevo Platform Security a holistic approach Tomaž Poštuvan Principal Sales Consultant Oracle Slovenia 2 Copyright 2011, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 7

3 Program Agenda BIG Identity Trends Architectural Consolidation Setting the stage for what you want to do with IAM Self Service Identity & Access Requesting access streamlined Protecting Privileged System Access Logical way to manage and control critical credentials Next Gen: New Identities & Devices Social Identity and Mobile Access made easier Security & Identity as a Service Platform security provides a holistic view

4 What Keeps You up at Night? Threats Attacks Improper Access Infrastructure Scaling Compliance Tougher Regulations Intrusive Audits Costly Reporting Opportunities Social Identity Mobile Access Cloud Computing Massive Web

5 Identity & Access Unlock New Opportunities Do my users get the access they need when they need it? Can I manage my access risk when I move to the cloud? Can I securely integrate with customers social identities? 87% 46% Security main barrier to Cloud Adoption Source: IDC Enterprise Panel, 3Q09 Increase in Mobile attacks in 2010 vs McAfee Threats Report: Fourth Quarter 2010 Can users securely access apps on mobile devices?

6 Identity Management Evolves Cloud/ Mobile Authoritative ID with Massive Scale Access Via Mobile & Social Channels User Lifecycle In Hybrid/Cloud Environments Certify Access for Millions of Users & Entitlements Monitor Behavior & Detect Improper Access Extranet Analytics Audit Enterprise Administration Authentication Identity Tools Point Solutions Platform Intelligence

7 Patchwork of Solutions Gaps and brittle integration Vulnerable to breaches Multiple points of failure Weak or incomplete data Missed business opportunities

8 Identity & Access Platform Full Lifecycle Under Control

9 Oracle Identity Management Stack Complete, Innovative and Integrated Identity Governance Access Management Directory Services Password Management Self-Service Request & Approval Roles based User Provisioning Analytics, Policy Monitoring Risk-based Access Certification Single Sign-On & Federation Web Services Security Authentication & Fraud Prevention Authorization & Entitlements Access from Mobile Devices LDAP Storage Virtualized Identity Access LDAP Synchronization Platform Security Services Identity Services for Developers

10 Self Service Identity Quick & Efficient

11 Getting Access Can be Painful Roles, Entitlements, Apps IT Inefficient Processes Various ad-hoc steps by phone, , manual etc. Access delays Not auditable Business interruption Users Managers

12 Self Serve Access Roles, Entitlements, Apps Business Ready Access Simple familiar UI Access when it s needed Fully auditable No business interruptions Users Managers

13 Safely Automating Privileged Access

14 Insider Threats are Real Other Security Security Endpoint Security 48% Caused by Insiders Identity Management 92% Stolen Records From Database Servers Database Security 86% Hacking Involve Stolen Credentials Network Security Vulnerability Management How do I control insiders? Can I report on anomalous behavior? Can I prevent intrusions? Can I ensure proper controls around privileged access? 2010 Data Breach Investigations Report

15 Privileged Accounts Root, admin, service accounts, privileged accounts are the keys to the kingdom s treasure chest Often shared by administrators without adequate controls when privileged access is required Organizations often don t know Who actually is using the credentials Whether they were authorized Whether they were shared or retained In an emergency, admins need this access quickly Root Access

16 Secure Privileged Access PAM Server Root Access Role based list of privileged accounts Secure check out through secure workflow Controlled by client credential store Policy limited use Fully auditable process Admin

17 New Forms of Identity and New Devices

18 Mobile Access & Enterprise Applications Enterprises want enable secure, convenient, efficient access to enterprise applications, data, and collaboration/communication tools Support a workforce anywhere model, using any device Mobile applications are built one of the following ways: Native web browser on the mobile device Native mobile device clients acting as a web browser Native mobile device clients connecting to gateways or applications

19 Mobile & Social Identity Access Challenges Auth Servers Directory Servers? DB Servers Developer IAM Servers

20 Oracle Mobile and Internet Identity Solution REST Relying Party Connect mobile users to identity services (REST) Connect external application services Connect Internet and Social identities to Enterprise identity Relying Party Oracle Access Suite Oracle Identity Connect

21 Security & Identity as a Service

22 Platform Security Enables Identity as a Service Simplifies Provisioning of Entitlements Delegated Policy Administration SaaS Employees Web Access Control Streamlines Access Control Externalized Entitlements Access Management Identity Administration Customers Fully Hosted Partly Hosted Outsourced Use Repository Centralizes Authentication Directory Services Operating Systems: Oracle Enterprise Oracle Linux Oracle VM for x86 On-Premise Contractors Partners

23 Platform Security: Identity Provider Service Secures User Information Protects private user data Provides attribute level security Externalizes Identity A single user view Common user accounts across apps Simplifies Audit Compliance Single point for access termination Single point for access control audit Privacy Data Virtualized Identity

24 Platform Security: Sign-On and Authentication Standards Based Authentication Simplifies integration Provides federated sign-on Policy Multi-factor Authentication Increase trust Comply with regulatory mandates Sign-on Self Service Password Management Reset forgotten passwords Change passwords Enforce strong password policy Password Management

25 Platform Security: User Provisioning Service User Provisioning Automation Supports Adds, Moves and Changes Virtualizes user identity Reconciles orphaned accounts Create Workflow Driven Flexible and change-able processes Supports approval processes Update Delete Policy Driven Provides account policies and password policies Supports Role based entitlement management

26 Case Study: Identity as a Service COMPANY OVERVIEW BT Group Plc, London England Communications Industry Annual Revenue US$34.5 billion 147,000 Employees CHALLENGES/OPPORTUNITIES Provide access to 150,000 employees & 3 rd Party users to business critical functions. Enable revenue channel to offer jointly managed fraud detection and identity verification services to online merchants. Provide self service capabilities to external users SOLUTION Deployed Oracle Identity Manager for provisioning and Oracle Adaptive Access Manager for fraud detection. Provided self service access request and password management. Deployed a joint BT/Oracle managed service offering for authentication of online traders. RESULTS Reduced the time to on-board a new user. Enhanced data security by enforcing password changes every 60 to 90 days. Increased regulation of 3 rd party access to 3 rd party access.

27 Summary Platform security provides a holistic view Fusion Middleware provides platform security based on Oracle s industry leading Identity suite Fragmented security in the cloud creates opportunities for misuse Platform security enables Identity as a Service and Identity Management in a Platform as a Service

28 Join The Community Oracle.com/Identity Security Inside Out News Letter: Identity Management Home Page: Twitter: Facebook: Identity Blog:

29 Q&A

30