Extending the security perimeter

1
Extending the security perimeter

• Jason Holloway

2
SanDisk Overview

• 1 in flash memory
• 3.9 billion revenues
• 3,000 employees worldwide
• NASDAQ 100 company
• 561 in Fortune 1,000
• 750 patents

3
SanDisk Enterprise Division

• Takes flash-based security solutions to the
  enterprise
• Sole patent holder for hardware encryption onto
  flash
• Enhances secure employee productivity and
  mobility
• Helps IT regain visibility and control of vital
  data outside the perimeter
• Strong customer base

4
Gap in Risk Estimation

• 77 of corporate users admit to use USB drives
  for work
• 35 of users is what IT managers are aware of
• Risk is underestimated

SanDisk Endpoint Security Survey, April 2008
5
Data likely copied to a USB drive
SanDisk Endpoint Security Survey, April 2008
6
Costs Involved in Data Breaches

• 6.3 million Average cost of a data breach
  (ranging 0.2M-35M)
• 197 Average cost per record compromised in a
  breach
• 52 Admitted loss of confidential data through
  removable media

Source Ponemon Institute
7
Extending the Perimeter to Mobile Storage
Connected to Enterprise Host

• The office perimeter provides
• Security
• Manageability
• Policy enforcement
• Connectivity
• Control
• Corporate applications
• But, the backdoor is open!

Data-TransferFrom Enterprise
8
Cruzer Enterprise

• 256-bit AES Hardware Encryption
• Complex password enforcement
• Brute Force attack resistance
• Plug Play
• Centrally manageable

Mgmt Agent
9
Cruzer Enterprise FIPS Edition

• 256-bit AES Hardware Encryption
• Complex password enforcement
• Brute Force attack resistance
• Plug Play
• Centrally manageable
• FIPS 140-2 Level 2 Inside
• Certified logical and physical protection of
  encryption keys
• Certified encryption of stored data

10
Cruzer Enterprise with

• 256-bit AES Hardware Encryption
• Complex password enforcement
• Brute Force attack resistance
• Plug Play
• Centrally manageable
• Always-on malware protection
• Automatic virus definition updates

11
Central Management Control

• Streamlined deployment
• User self-service
• Active Directory users
• Agent-less
• Ongoing activities
• Password recovery policy
• Application distribution
• Auditing and reporting
• Automatic backup
• Return-to-base policy
• Remote termination of lost drives

12
SESTA

• SanDisk Enterprise Solutions Technology Alliance
• Promoting interoperability in the enterprise
  security environment
• Allows vendors to develop strategic alliances
  with SanDisk for new flash technology solutions
• 25 leading security vendor members and growing

13
Cruzer Enterprise with

• Generating one time passwords for two-factor
  authentication
• Based on RSA SoftID token
• Two-in-one solution secure storage and
  two-factor authentication
• Centrally managed - CMC and RSA server
  integration
• A solution to the keychain problem

14
Virtual Desktop with

• Your entire workspace, on a secure drive, with
  you wherever you go
• Connect securely to your corporate network for
  network applications
• Secure sandbox preserves session confidentiality
• Best of breed technology from
• SanDisk
• Check Point

15
Secure microSD

• Addresses current smart-phone and PDA
  data-security risks
• Fully encrypted memory for advanced phones and
  PDAs
• Supports latest modern phone and PDA OSes
• Centralised management support for
  enterprise-grade security
• Full audit trail
• Automatic back-up
• Remote termination

16
Extending the Management Perimeter

• Provisioning
• Encryption
• Password policy
• Back-up
• Logging and monitoring
• Reporting
• Audit and compliance
• Anti-virus
• Authentication

17
SanDisk Enterprise Summary

• Flash-based security solutions for enterprises
• Enhancing employee productivity and mobility
• Giving IT control and visibility over mobile data
• Delivering on compliance and audit controls

18

• 
  Mange tak!