Mar 29, 2015
Smart Identity Protection That Works for You and Your Users 2
Smart Identity Protection That Works for You and Your Users
Petri Ala-AnnalaSenior Principal, CISSP-ISSAP, CISA, CISM
Agenda
Smart Identity Protection That Works for You and Your Users 3
Calibrating Identity Protection Principles1
The Reality of Doing Business2
Validation & ID Protection Service Overview3
Demos: eBay, SSL VPN, Symantec O3 portal4
4Smart Identity Protection That Works for You and Your Users
Calibrating Identity Protection Principles
CIA Security Principals Have not Changed
Smart Identity Protection That Works for You and Your Users 5
ConfidentiallyIntegrity
AvailabilityUsability
Bus Emergency Exit
Smart Identity Protection That Works for You and Your Users 6
Last Night, at My Hotel Room - Oh yes, I know I am a Security Geek
Smart Identity Protection That Works for You and Your Users 7
Authentication Process Who Trusts Who?
Smart Identity Protection That Works for You and Your Users 8
Websites,Intranet shares,
applications
Access Controlwho can
do what?
Authorizationwhat can you do?
Authentication
how can you prove that?
Identificationwho you are?
User, Device
9Smart Identity Protection That Works for You and Your Users
The Reality of Doing Business
People are Always on
New Technologies,New Behaviors
10Smart Identity Protection That Works for You and Your Users
Networks
Wi-Fi WiMAX
3G VPN
CorporateKiosk
People Are the New Perimeter
Smart Identity Protection That Works for You and Your Users
Laptop
PDA
iPad
Desktop
Laptop
Phone
iPad
iPad
PDA
PDA
Laptop
Laptop
Desktop
Desktop
Smartcards
ConsumerGovernment
PartnersEmployee
11
12
Smart Identity Protection That Works for You and Your Users
Validation & ID Protection Service (VIP)
Overview
Authentication as a Service
Enterprise
Consumer Portal, Business Partner
Extranet
Corporate Network
Symantec Hosted Real Time
Authentication
User with VIP Credential
OTP
Intelligent Authentication
Out of Band
Smart Identity Protection That Works for You and Your Users
Easy to Use Management Portal
14Smart Identity Protection That Works for You and Your Users
Strategic Strong Authentication Approach
Symantec Validation and Identity Protection (VIP)
Standalone OTP Credentials
Har
dwar
e To
ken
Mob
ile, D
eskt
op
Soft
war
e
Embe
dded
Out-of-BandSM
S
Voic
e Ca
ll
Emai
l
Strong Device IDs
Clie
nt-b
ased
D
evic
e ID
Clie
ntle
ss D
evic
e ID
Risk- Based
Inte
llige
nt
Auth
entic
ation
Provides Flexible Options
Smart Identity Protection That Works for You and Your Users
Strong Security and a Better User ExperienceBroad Credentials (OTP)
• Hardware, software, out-of-band
• Mobile: 900+ popular handsets with Free end-user download
• VIP credential embedded in hardware – Intel IPT
Risk-based Authentication• Device ID and user behavior
• Challenge risky logins
• Transaction monitoring
Enterprise integration
• Popular enterprise applications, such as VPNs, SSO
• Custom app integration via API
Smart Identity Protection That Works for You and Your Users
Symantec VIP Enterprise Deployment Architecture
Smart Identity Protection That Works for You and Your Users 17
VIP Supports Many 3rd Party Integrations
• Array Networks• Barracuda• Check Point• Citrix Systems• Cisco• IBM• Juniper• Microsoft• and more at…
http://www.symantec.com/verisign/vip-authentication-service/agents-options-add-ons Smart Identity Protection That Works for You and Your Users
19
Smart Identity Protection That Works for You and Your Users
Demos: eBay, SSL VPN, Symantec O3 portal
Low-cost and easy-to-use cloud-based strong authentication
Symantec Authentication Security and Reliability
Experience15 years Validating Websites, User, and Devices, with over 400,000 clients world wide
Secure Bandwidth
3 Billion Secure Validations a Day with 100 % uptime for over the last 5 years in a Saas
Model
24Smart Identity Protection That Works for You and Your Users
A Few VIP Customers
25Smart Identity Protection That Works for You and Your Users
Thank you!
Copyright © 2012 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.
This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.
Smart Identity Protection That Works for You and Your Users 26
Petri [email protected]