Build Deck v3.07.ppt

© 2014 IBM Corporation

Architectural Overview of the IBM Security Systems Portfolio

Ver 3.07 – Jun 2014

© 2014 IBM Corporation2

Agenda

The IBM Security Framework and portfolio

Capabilities in the IBM Security Systems domains:• Intelligence and Analytics

• Fraud Protection

• People

• Data

• Applications

• Infrastructure – Distributed

• Infrastructure – z


IBM Security Framework and the IBM Security Systems portfolio


IBM Security Systems and the IBM Security Framework

Intelligence ● Integration ● Expertise

Only vendor in the market with end-to-end coverage of the security foundation

6K+ security engineers and consultants Award-winning X-Force® research Largest vulnerability DB and 2nd largest

IP reputation DB in the industry Partner with IBM Software Group

Services, IBM Security Services and an extensive partner community for consulting and delivery


IBM Security Systems Portfolio


People Data Applications Network Infrastructure Endpoint

Identity Management

Guardium Data Security and Compliance

AppScan Source

Network Intrusion Prevention Trusteer Apex

Access Management

Guardium DB Vulnerability Management

AppScan Dynamic

Next Generation Network Protection

Mobile Security MaaS360 by Fiberlink

Privileged Identity Manager

Guardium / Optim Data Masking

DataPower WebSecurity Gateway

SiteProtectorThreat Management

Endpoint Security and Management

Federated Access and SSO

Key Lifecycle Manager

Security Policy Manager

NetworkAnomaly Detection

MainframeSecurity

IBM X-Force Research

Advanced Fraud Protection

Trusteer Rapport

Trusteer PinpointMalware Detection

Trusteer PinpointATO Detection

Trusteer Mobile Risk Engine

Security Intelligence and Analytics

QRadar Log Manager

QRadar SIEM

QRadar Risk Manager

QRadar Vulnerability Manager


Showing the IBM Security Capabilities and Integration

The slide deck uses a representative environment with typical components, services and communications for customers/partners (and cloud services), the enterprise and employees…

… and then progressively overlays IBM security capabilities in the context of this representative

environment to show features and integration points


Security Intelligence and Analytics(and GRC; IT security + enterprise)




Identity Management


AppScan Source


Access Management


AppScan Dynamic












MainframeSecurity



Trusteer Rapport





QRadar Log Manager

QRadar SIEM

QRadar Risk Manager


QRadar Packet CaptureQRadar Incident Forensics

NEWSecurity Intelligence and Analytics


Generic Environment for ABC Co…


… but lets focus on the Infrastructure


Log Management


Security Information and Event Management


Application-level and Virtualised Network Monitoring


Intelligence and Risk Management


Incident Forensic Analysis


Intelligence and Vulnerability Management


Enterprise GRC – Integrating IT Controls for Business Risk View






Identity Management


AppScan Source


Access Management


AppScan Dynamic












MainframeSecurity



Trusteer Rapport





QRadar Log Manager

QRadar SIEM

QRadar Risk Manager




Generic Environment for ABC Co


Providing Common Fraud Prevention Services from the Cloud


Protecting Employee Devices from Fraud


Protecting Customer Devices from Fraud


Protecting Customer Devices from Fraud without Client-Side Agents


Protecting Customer Mobile Devices from Fraud


Leveraging Access Management for Fraud Protection


Fraud Protection and Security Intelligence


People




Identity Management


AppScan Source


Access Management


AppScan Dynamic












MainframeSecurity



Trusteer Rapport





QRadar Log Manager

QRadar SIEM

QRadar Risk Manager


The People Domain


Generic Environment for ABC Co


Identity Management


Web Access Control


Federated Identity/Access Management


Mobile Access Management


Enterprise (Desktop) Single Signon


Privileged Identity Management


Identity into Security Intelligence


Data




Identity Management


AppScan Source


Access Management


AppScan Dynamic












MainframeSecurity



Trusteer Rapport





QRadar Log Manager

QRadar SIEM

QRadar Risk Manager


The Data Domain




… but lets focus on the DB-specific Components


Protecting DB Access at the Network Layer


Centralised Management of DB Access Control Policy


Managing Testing Data Based on Production Data


Managing Lifecycle of Hardware Encryption Keys


Security Intelligence and Databases


Identity Management for Databases


Vulnerability Management for Databases


Applications




Identity Management


AppScan Source


Access Management


AppScan Dynamic












MainframeSecurity



Trusteer Rapport





QRadar Log Manager

QRadar SIEM

QRadar Risk Manager


The Applications Domain




… but lets look at the Application components


Source Code and Runtime App Scanning


Application Policy Testing


XML Appliances and Security


Identity Mapping and Security Token Services


Common Security Policy Mgmt, Provisioning and Enforcement


Security Intelligence and Applications


Identity Management for Applications


Web Application Protection for Applications


Test Data Masking/Cleansing


Infrastructure (Network, Server and Endpoint) Distributed




Identity Management


AppScan Source


Access Management


AppScan Dynamic












MainframeSecurity



Trusteer Rapport





QRadar Log Manager

QRadar SIEM

QRadar Risk Manager


The Infrastructure (Network, Server and Endpoint) Domain


Generic Environment for Infrastructure


Network-level Security and Protection


NextGen Network-level Security and Protection


Centralised Security Event Management


Endpoint Management and Security


Endpoint Management for Mobile


Network Anomaly Detection … Complementing NIPS


Centralised Security Information Management


Infrastructure for z




Identity Management


AppScan Source


Access Management


AppScan Dynamic












MainframeSecurity



Trusteer Rapport





QRadar Log Manager

QRadar SIEM

QRadar Risk Manager


Infrastructure for z


Generic Network, Server and Endpoint Environment


Drilling into the Mainframe-specific Components


Better Administration of External Security Manager Objects


Mainframe System Audit, Reporting and Alerting


Administering, Auditing and Reporting for z/VM


Enterprise-wide Auditing and Alerting


Mainframe Security and the Enterprise-wide Security Ecosystem


Security Intelligence, Analytics &

GRC

People

Data

Applications

Infrastructure

Questions?


Build Deck v3.07.ppt

Documents