A different approach to Application Security

Transcription

1 雲端時代企業應用的安全與挑戰

2 A different approach to Application Security Protecting your most critical business assets APPLICATION ACCESS APPLICATION PROTECTION F5 Networks, Inc 2

3 F5 s Comprehensive Security Solutions Access Federation App Access Management Network Firewall Traffic Management DDoS Protection Web Fraud Protection APPLICATION ACCESS APPLICATION PROTECTION Remote Access Enterprise Mobility Gateway Secure Web Gateway DNS Security SSL Inspection Web App Firewall App Delivery SSL Inspection SSL VPN Web App Firewall Network Firewall Network DDoS Protection Web Fraud Protection Cloud-Based DDoS Protection Cloud-Based WAF F5 Networks, Inc 3

4 APPLICATION ACCESS APPLICATION PROTECTION Comprehensive Application Security Solutions Strongest set of application security controls that reduce risk Secure Web Gateway Remote Access Access Federation IP Intelligence Web Fraud Protection Hybrid WAF SSL Inspection App Access Management Enterprise Mobility Gateway DDoS Protection DNS Security Network Firewall Securing access from any user on any device Silverline Private, Public Cloud & On-Premise DC Protecting your applications regardless of where they live F5 Networks, Inc 4

5 Applications run today s world.

6

7

8

9

10 EXPERIENCE

11 MSP Private Cloud Applications DDoS Silverline NetOps/SecOps Mode 1, Adopting Mode 2 BIG-IP iseries Private Cloud DevOps Mode 2 Corporate Datacenter

12

13

14 The traditional approach to security is inadequate. Blind, inflexible point solutions F5 Networks, Inc 14

15 The Evolution of the Application DEVOPS SDN/ SDS IPV6 HTML JAVA SOAP SSL SAML FLASH XML HTML 5 MOBILE VIDEO ITIL CONTAINERS IOT VOIP AJAX HYPERVISOR NANO/ MICRO MACHINE LEARNING M 400M 1B 2B 3.2B 20K 9.5M 58M 207M 1B Client/Server Centralized Apps Internet Applications Data Confidentiality Mobile Devices Mobility Malware Threats Public Cloud Website Availability Threats Hybrid Cloud Blended Attacks F5 Networks, Inc 15

16 On Premises Data Center Cloud Adoption Business Function Business Function Global Load Balancing Local Load Balancing Data Centers & Offices INTERNET Physical Legacy Infrastructure? PE M AP M LT M AS M AF M DN S Security Threats/Attack s SSL Hacktivism AWS AZURE Cloud Migration Private Cloud Network virtualization Cloud Security and Access Public Clouds F5 Networks, Inc 16

17 On Premises Data Center Hybrid Cloud Challenges Cloud Migration Business Function Private Cloud Business Function Physical Legacy Infrastructure? PE M AP M LT M AS M AF M DN S Network virtualization Global Load Balancing Local Load Balancing Security Threats/Attack s SSL Hacktivism Cloud Security and Access? Cloud Integration Data Centers & Offices Consistent and Secure Application Delivery Platform Silverline INTERNET Public Clouds/Managed Private Clouds Cloud Migration?? Network virtualization F5 Networks, Inc 17

18 Application Threats Increase Challenges and Complexity F5 Agility

19 LET S TALK ABOUT SECURITY. 19 F5 Networks, Inc

20 ? Slow Expensive LET S TALK ABOUT Unpredictable SECURITY.?? Inconvienent Inconsistent 20 F5 Networks, Inc

21 TICKETING ID/PASSPORT CHECK PAT DOWN GIANT SECURIT Y LINE BODY SCAN SWAB GATE TICKET SCAN X-RAY A labyrinth of security measures applied with little to no context, consistency, or coordination. 21 F5 Networks, Inc

22 Important Trends in Threat Vectors Threat Brief Report, Webroot, May 2015 Symantec Internet Security Report 2014 WhiteHat Security Statistics Report 2015 WhiteHat Security Statistics Report 2015 F5 Agility

23 6B Connected Devices The Driving Force behind Device-Based Network and App Congestion B Connected Devices Worldwide by 2020 F5 Networks, Inc 23

24 Application Attacks Hurt Your Business Damages brand reputation. Results in significant downtime and revenue loss. Compromises sensitive enterprise, employee, and customer data. Breaches compliance required to conduct business online.

25 F5 Networks, Inc 25

26 F5 Networks, Inc 26

27 F5 Networks, Inc 27

28 Botnet Online shop F5 Networks, Inc 28

29 F5 Networks, Inc 29

30 TOR is a system enabling its users to communicate securely & anonymously on the Internet. TOR is free and can be installed in seconds Very difficult to trace user traffic Often used nefariously..but it is not inherently malicious. Anonymous and Encrypted Gateway to the Deep and Dark Web F5 Networks, Inc 30

31

32

33 Secured Data Center Customer Hmmmm Browser SIEM WAF HIPS Traffic management NIPS DLP HTTP/HTTPS Leveraging browser application behavior Caching content, disk cookies, history Network firewall Manipulating user actions: Social engineering Add-ons, plug-ins Embedding malware: Browser Keyloggers Weak browser settings Framegrabbers Malicious data theft Data miners Inadvertent data loss MITB/MITM Phishers/Pharmers

34 The Hybrid Threat Carphone Warehouse Breach with a DDoS Smoke Screen DDoS attack before giant data breach 2.4M customers data stolen from web app attack More commonplace threat for Internet-connected businesses especially those that house sensitive data (such as credit cards or personal information). Investment at network layer Many attacks at app layer F5 Agility

35 Freedom To Deploy Any Cloud Application Freedom Cloud Portability Consistent Policies F5 Grade Security Visibility Lowest TCO

36