Websense TRITON. Emiliano Massa - Director of Regional Sales Italy

Transcript

1 Websense TRITON Raggiungere un elevato livello di integrazione di soluzioni e piattaforme grazie ad una nuova ed unica suite dedicata alla sicurezza dei contenuti Emiliano Massa - Director of Regional Sales Italy web security data security security

2

3 Websense Consistent Growth 350,0 300,0 250,0 200,0 150,0 100,0 50,0 0,0 FAST FACTS m 2,5 7,1 Users protected by Websense 16,7 35,5 40K 61,0 Customer Organizations worldwide 81,7 111,9 148,6 178,8 211,7 295, GAAP Revenue $(m) $47m R&D Investment Per Annum (non-gaap)

4 Websense Milestones Websense Evolution Real-time security & content management Unified Content Security Web Filtering: Block inappropriate content in the workplace Manage Internet access for productivity Protect by blocking access to compromised sites; ThreatSeeker technology Essential Information Protection Mil $ investiti negli ultimi 2 anni in Ricerca e Sviluppo Acquired Inktomi Traffic Server Acquired Port Authority Technologies Acquired SurfControl Investment & Innovation Acquired Defensio

5 Websense Innovazione e Leadership Innova&on First to market with phishing protecion Nov 02 First to market with drive by and backchannel spyware protecion Nov 02 First to market with crimeware/keylogger protecion Nov Brevetti Mondiali First to market with bot network protecion Feb 06 First to add natural language processing to DLP. Jun richieste in via di approvazione First to deliver Web Data bi direcional security intelligence Dec 07 First to market with dynamic Web 2.0 content categorizaion Mar 08 First to create an Internet HoneyGrid that melds honeypots and advanced grid compuing capable of parsing one billion pieces of content daily First to deliver a hybrid virtual service pla\orm combining the best of appliances and cloud based services Mar 08 Feb 10

6 La sfida Com e cambiato Internet web security data security security

7 Le vostre domande. Strategic Planning Business Planning Infrastructure Management Security Management Come fare a ridurre i costi della security, nelle stesso tempo a proteggersi dalle nuove minaccie ottenendo il miglior ritorno dell investimento possibile? Come posso espandere il mio business utilizzando le nuove forme di comunicazione senza incrementare i rischi? Come posso estendere le mie comunicazione ai partners riducendo i rischi? Come posso proteggere i miei utenti remoti dalla perdita di informazioni confidenziali quando sono sul campo? Come proteggere la mia compagnia dalle nuove minaccie e dalla perdita di informazioni essenziali? 2010 Websense, Inc. All rights reserved.

8 Business Needs Massimizzare ROSI * & ridurre il TCO Migliorare la Security Aderire alle regolamentazioni Costriure relazioni strategiche Aumentare l efficenza degli impiegati Unificare le politiche e la protezione in azienda Flessibilità delle configurazioni in ottemperanza con leggi e regolamenti Vendor consolidation Ridurre il CAPEX Proteggersi contro le nuove minaccie Affidabilità del Vendor Ridurre l OPEX Ridurre il rischio per le nuove iniziative Migliorare il servizio & supporto * Return on Security Investment

9 L utilizzo delle nuove tecnologie Web - Dell Facebook ha una popolazione di 300 milioni di users attivi, di cui il 50% si logga ogni giorno. 9

10 L utilizzo delle nuove tecnologie Web US Gov Questa nuova forma di comunicazione non e utilizzata solo dalle Aziende. Il Broadcast puo essere molto piu cost effective di altri media. 10

11 La security tradizionale e inefficace See the proof for yourself at the: Security Effectiveness Center h^p://securitylabs.websense.com/ Numero di Real Time secutity Update

12 La security tradizionale e inefficace Symantec ha diffuso piu antivirus signatures lo scorso anno [sic 2009], dei suoi precendeti 17 anni di vita Francis desouza, Senior Vice President Enterprise Security Group h^p://securitylabs.websense.com/ Numero di virus non conosciuti bloccati

13 La security tradizionale e inefficace h^p://securitylabs.websense.com/

14 L URL Filtering statico e morto GAMBLING SOCIAL NETWORKING VIDEO OR AUDIO STREAMING AUCTIONS IL controllo URL statico e inefficace, e necessario riconoscere il contenuto. INAPPROPRIATE OR LEGALLY LIABLE CONTENT

15 Gli impiegati trovano sempre una strada Chiudere il piu possibile le infrastrutture non e mai la scelta migliore Piu del 50% degli IT managersquesto ammette che i impedisce di ottenere vantaggi dalle e loro impiegati tentano di bypassare i vincoli nuove forme di business le restrizioni. (Websense 2009 Web Work, International Survey) Circostanze impreviste possono spingerci a cercare vie alternative per fare il nostro business

16 Aurora attack Web/ /data attack Started late December and is ongoing Targeted Google, Adobe, at least 30 other organizations Victims targeted via phishing with Web link to pages hosting a malicious script (drive-by) Leverages previously unknown Internet Explorer vulnerability Once infected, script downloads additional malicious files to compromised machine Attempts to access sensitive information and send outbound to remote attack sites (encrypted on port 443) No zero-day protection from antivirus and legacy URL filter solutions Previously unknown vulnerability, attack sites, and exploit code Only 26% AV vendors have coverage as of January 29 (VTReport) Websense, Inc. All rights reserved.

17 A Modern Threat A targeted a9ack across all content security silos Spoofed sent containing link to compromised web site Web Drive by attack exploits 0 day vulnerability in Internet Explorer DLP Trojan horse installed, encrypted data sent to attacker Websense, Inc. All rights reserved. For more informaion visit the Websense Security Labs BLOG

18 Competitive Information AV and URL filter solutions did not protect Google and others when Aurora first appeared No real-time security scanning for Web exploits No zero day protection CISCO Web reputation and antivirus threat protections Do no protect against zero day or scripted attacks Blue Coat Antivirus threat protections and URL filter Do not protect against zero-day or scripted attacks McAfee Antivirus, URL filter, and signature-based script protection Could provide zero-day protection with nondefault configurations and higher false positives Do not protect against zero day attacks out-ofthe-box Websense, Inc. All rights reserved.

19 Aurora Attack

20 Mass Injection Attack MulIple legiimate sites injected <script src= Leads to exploit code jatfa.com/dada/index.html js.tongji.linezig.com/... vcqm.htm js.js vcqm.htm vcfl.htm vcf11.htm of.htm z.htm vcvod.htm vcxxz.htm vcr.htm -> Flash Player exploit -> of.htm -> of.js -> OWC exploit (CVE ) -> logo.jpg -> go.jpg, go1.jpg -> MS Video exploit(cve ) -> Qvod exploit -> RealPlayer exploit Websense customers protected in Real Time from compromised legi&mate sites, exploit host, and exploit code 20

21 Purchase Price Deployment Training Operation Support Integration Expansion Management

22 La Soluzione

23 Ma se.. External Risks DISCOVER Internal Risks WHO Classify WHAT CLASSIFY Discover ESSENTIAL INFORMATION PROTECTION MONITOR NEW DESIGN WHERE Monitor HOW CUSTOMER LIST PROTECT

24 Le linee guida... Massimizzare il ritorno degli investimenti di security (ROSI) & ridurre il TCO Neutralizzare le moderne minaccie di internet attraverso l analisi del contenuto e del contesto La possibilità di implementare politiche che siano compatibili con il piano regolatorio Offrire implementazioni flessibili senza complessità addizionale o compromessi

25 Unified Content Security Condivisione dei motori di identificazione del malcode Websense e proprietaria delle tecnologie Unified di content Unified nuove sfide analysis : di security protezione proattiva Content contro Pla\orm le moderne minacce. Mantenere la Analysis leadership nella innovazione al contrario dei vendors che motori comprano proprietari di in O&M motori altrui... Unified SoluIon Capacita di adattarsi alle Utilizzare ed investire nei indetificazione delle minaccie per giudare l innovazione

26 Unificare.

27 Unified Content Security Console Unificata per il Management, reporting, policies & enforcement Reporting omnicomprensivo e semplice da utilizzare Unified Pla\orm Unified Content Analysis Policy di Analysis & intelligence condivise su tutti i canali Unified SoluIon

28 Unified Content Security Software, appliance o SaaS basando l implementazione sulla singola realtà Websense e platform indipendent. Unified Lasciamo Unified Elasticita decidere di gestione al cliente il meglio Content Pla\orm in funzione della sua Analysis on premises infrastruttura. a SaaS) Questo e il miglior beneficio per i costi. (cambiando per sempio da senza investimenti ulteriori Utilizzo della virtualizzazione per integrare piu piattaforme all interno di un unico Hw Unified SoluIon

29 TRITON Architecture Soluzione Unificata Web Security Data Security Unified Content Security Security Piattaforma Unificata SaaS Appliance Software Management Unificato

30

31 La ThreatSeeker Network 1 billion pieces of content per day Websense Web Security Gateway Threat Detection/Probes Real-Time Security Updates Shared Analytics/Feedback ThreatSeeker Technology 2+ million posts per day Websense Hosted Customers Defensio ThreatSeeker Technology Websense Security Labs 200+ million sites per day 10+ million s per hour Websense Hosted Security URL and Security Database

32 Websense TRITON Advanced Classification Engine (ACE) ThreatSeeker Network

33 Phase III: Stages of Delivery v7.1 Available Today NaIve proxy, SSL inspecion, and anivirus for greater visibility and security control v7.5 Q2,2010 Embedded, Web DLP for unified inbound/ outbound controls Hybrid deployment for flexibility, hardware consolidaion, and be^er TCO Unified security management for greater control and savings v7.6 H2,2010 Security Gateway with hybrid deployment and embedded DLP for unified inbound/ outbound controls and greater security Content Security Center Single Management Console Security Gateway DLP Web Security Gateway Web DLP Web Security Gateway Policy Reports Websense V10000 Appliance

34 Any-Services, Anywhere Software-as-a-Service (SaaS) Web Security DLP Security Data Security Real-time Intelligence Sharing ThreatSeeker Network Any Service, Anywhere ThreatSeeker Cloud Service Phishing Real-time Intelligence Sharing SPLOG V-Series Appliances Fraud Defensio DLP Web Security DLP Web Security DLP Security Data Security V5000 V10000

35 Comprehensive RecogniIon 2009 Secure Web Gateway MQ: Leaders Quadrant 2009 Content Aware Data Loss Preven&on MQ: Leaders Quadrant Secure Web Gateway: 2008 Worldwide Market Share Leader 2009 North American Content Management Product InnovaIon of the Year Award 2009 Global Content Filtering Products Market Leadership Award Content Filtering CompeIIve Landscape, 2008: THE Market Leader Content Filtering: 2008 Market Share Leader Content Security Suites Wave, Q2 2009: Sole Leader Web Filtering Wave, Q2 2009: Recognized Leader Filtering Wave, Q2 2009: Recognized Leader Web Security: 2008 Worldwide Market Share Leader Data Leak Preven&on Wave, Q2 2008: Recognized Leader DLP Market Quadrant 2009: Short List 2009 Corporate Web Security Market Quadrant: Recognized Leader Corporate Web Security: 2008 Install Base & Revenue Market Share Leader Content Filtering: InformaIon ProtecIon Decision Matrix: On Shortlist Highest aggregate technology rating Content Filtering: 2008 Worldwide Market Share Leader 35

36 Domande Grazie dell ascolto

37 Appendix web security data security security

38 Websense Positioned in the Leaders Quadrant for Secure Web Gateway From the 8 January 2010 Gartner report, Magic Quadrant Secure Web Gateway, by Peter Firstbrook and Lawrence Orans. This Magic Quadrant graphic was published by Gartner, Inc. as part of a larger research note and should be evaluated in the context of the enire report. The Gartner report is available upon request from Websense. 38

39 Websense Sweeps Forrester Waves Validates our EssenIal InformaIon ProtecIon Strategy Web products. Filtering Forrester sees a growing market demand for consolidated content security suites rather than point DLP Websense alone leads the content security suite market because of its current funcionality and suiteoriented product strategy. We are a leader in Forrester s Web, and DLP Wave Reports Forrester Wave : Content Security Suites, Q Content Security Suites