Intel e Symantec: Levando a Performance, Segurança, Gerenciamento e Proteção de Dados ao próximo nível. Reinaldo Affonso

Transcrição

1 Intel e Symantec: Levando a Performance, Segurança, Gerenciamento e Proteção de Dados ao próximo nível. Reinaldo Affonso Diretor de Tecnologia para América Latina 1

2 Symantec & Intel - Visão Geral da Colaboração Segurança Intel IPT & UserAuth (VIP) Intel PKI & Managed PKI Intel Protected Transaction Display & Managed PKI Intel AES-NI + Encryption Intel Secure Key + Encryption SIEM Appliance Hybrid Cloud Appliance (SEP) Gerenciamento Manageability/ Virtualization/Mobility Symantec Client Management Available: Suite + Intel vpro Technology Intel vpro & Symantec CMS Intel vpro & Workspace Streaming Gestão da Informação NetBackup Appliances BackupExec Appliance BackupExec Channel Program Hybrid Cloud Appliance (BE) Usuários Intel Anti-Theft + Norton Intel AppUp + Norton PC Tools Norton AV Channel Bundle Outros Programas Healthcare Initiative Medical Device (Altiris, CSP) Server Innovations Storage Innovations 2 Crescendo um Portifolio Diferenciado para agregar valor ao Cliente. 2 2

3 Quem já usa ou está considerando comprar appliances? 3

4 Symantec Appliances Powered by Intel Uma nova geração da indústria de crescimento rápido lideradas por dispositivos de backup e segurança NetBackup BackupExec SSIM Forte colaboração para a diferenciação de hardware e software Arquitetura escalável para atender as necessidades dos clientes Otimizado para eficiência energética Business-critical Reliability, Availability, and Serviceability (RAS) Flexibilidade e escalabilidade através do Intel Integrated RAID e SSDs da Intel 4

5 Como a Symantec integra no client as tecnologias Intel? 5

6 Anunciando o Ultrabook O Ultrabook corporativo estende as capacidades atuais de criação de conteúdo otimizado com experiências móveis sem comprometer a segurança e gerenciabilidade Ultra-Light. Ultra-Sleek. Ultra-Powerful. Business User Requirements Responsiveness User Interface(s) Mobility Form Factor Device Like Experience IT Decision Maker Requirements Reliability Stability Security Manageability Business-Level Performance Ultrabook for Business Intel vpro and Intel Small Business Advantage Todas as funcionalidade de um PC corporativo e o nível de segurança que você precisa em um formato Ultra-portátil inspirado pela Intel 6 Ultrabook is a trademark of Intel Corporation in the U.S. and/or other countries

7 2012 Intel vpro Technology Platform Security Focus Points Gerenciamento de Ameaças Identidade e Acesso Proteção de Dados Seguranca Monitoramento Correções Relatórios Defending you against hidden Trojans and more Access to your systems and services is more secure Protect your valuable data and assets from theft or loss Quickly recover from an attack Somente os Processadores Intel Core vpro oferecem Recursos de Segurança Únicos para cada área foco da sua empresa. 7

8 Joint Intel and Symantec product collaborations Abordagem Holística de Proteção e Gerenciamento Gerenciar Ameças Identidade e Acesso Proteção de Dados Intel Trusted Execution Technology (Intel TXT) Intel Virtualization Technology (Intel VT) Intel Operating System Guard (Intel OS Guard) Intel Identity Protection Technology (Intel IPT) with Public Key Infrastructure (PKI) Intel Identity Protection Technology with protected transaction display Intel Identity Protection Technology with Onetime Password Remote Encryption Management Intel Anti-Theft Technology (Intel AT) Intel Advanced Encryption Standard New Instructions (Intel AES-NI) Intel Secure Key Security Monitoring / Remediation/ Reporting Intel Active Management Technology (Intel AMT) Enhanced KVM 8

9 Quem já usa criptografia do disco rigido? 9

10 Intel AES-NI Technology Mantenha seus dados seguros e usuários mais produtivos Intel AES-NI Helps Speed Data Protection Accelerate Encryption Operations Whole-disk Encryption Internet Security File Storage Encryption Sample of Enabled Vendors i (desktop) i5-2520m (laptop) Up to 4x faster encryption E6550 (desktop) T7250 (laptop) PGP Whole Disk Encryption enabled with AES-NI today 10

11 Introduzindo Intel Secure Key em Plataformas 12 Digital Random Number Generator for more robust encryption Alta Qualidade With a high-quality, high-volume Entropy Source, resulting random numbers are at its highest quality (i.e. highly unpredictable). Standards compliant (NIST SP ) and NIST FIPS Level 2 certified. Alta Performance Faster than any other entropy source today. Fácil Acesso RdRand instruction available to all applications and at any privilege level. Seguro HW module implementation isolates Entropy Source and DRBG from software attacks. Será incluido nos futuros produtos Symantec 11

12 Usando tokens físicos; smart cards, VeriSign VIP, ou VeriSign MPKI? 12

13 Intel Identity Protection Technology One Time Password (OTP) Intel IPT provides a simple way for Web-sites and enterprises to validate that a user is logging in from a trusted PC. Embedded tokens work with all Symantec VIP Protected websites Quem se beneficia? End users by adding security that is easy to use Web Sites, to protect their users accounts, and limit losses Enterprises who want more secure methods for employees to remotely log in, but don t want the hassles of tracking physical tokens or lowered security due to software tokens Traditional hardware token Plataformas suportadas Introduced in 2011 with 2nd generation Intel Core processor-based PCs Intel IPT is embedded in the Intel Management Engine (ME) isolated from the OS The one time code is validated by a third party security ISV used by the websites or enterprises Now embedded into your PC *No system can provide absolute security under all conditions. Requires an Intel IPT enabled system, including a 2 nd generation Intel Core processor, enabled chipset, firmware and software. Available only on participating websites. Consult your system manufacturer. Intel assumes no liability for lost or stolen data and/or systems or any resulting damages. For more information, visit [URL]. 13

14 Caso Corporativo de Implementação do OTP Empresa OTP Gerado pelo Intel IPT 14

15 Apresentando Intel Identity Protection Technology com Public Key Infrastructure (PKI) em 2012 Intel Identity Protection Technology com Public Key Infrastructure é o segundo fator para a autenticação embarcada dentro do PC que permite sites e redes corporativas validarem que o usuário é legítimo (não um malware) e está acessando de um PC confiável 2012 Validate legitimate user Digital Signature Embedded Public Key Infrastructure (PKI) A private key is stored in firmware and used for authentication and encryption. It is lower cost versus smart cards and has easier usability. It is also more secure than SW and integrated with secure I/O. Disponível na família de processadores Intel Core vpro em

16 Intel Identity Protection Technology com PKI e Protected Transaction Display em 2012 In addition to the embedded private key, a secure PIN pad entry required for two-factor authentication. Protected Transaction Display window, not visible to SW Agora embarcado no seu PC IPT-PKI= Platform Embedded Asymmetrical Token. 16

17 Intel Protected Transaction Display A secure I/O technology built using Intel s Protected Display capability View seen by a user View seen by malware Verify transaction Verify transaction Encrypted bitmap with randomized keypad Transfer: $50 From: Me (AC 10051) To: Ned S. (AC 34287) Transfer: $5000 From: Me (AC 10051) To: John Smith (AC 34287) Please enter your PIN Cancel CLR **** OK Please enter your PIN Cancel CLR **** OK User Presence Click OK OK Type the characters below H 8 k F! Randomized OK button CAPTCHA: Today with Intel Protected Transaction Display 17

18 Intel Identity Protection Technologies OTP Ultrabook or vpro OTP: Username Password Protected Transaction Display (PTD) Ultrabook or vpro Password Entry Token Server One-Time Password token built in to chipset enabling frictionless 2-factor user authentication for website and secure VPN access. Server Protects PC display from malware scraping and proves human presence at PC. PKI - vpro only Digital Certificate Server IPT with PKI* uses PKI certificates to authenticate User and Server to each other and to encrypt and sign documents. Upcoming Identity Protection Technology Symantec Enabled on IPT-OPT, IPT-PKI, and IPT-PTD 18 Ultrabook is a trademark of Intel Corporation in the U.S. and/or other countries

19 Já usa o Symantec Altiris Client Management Suite (CMS)? 19

20 Gerenciando In-Band e Out-of-Band A Well Managed Client is a Secure Client In-Band Management Operating System Deployment Software Updates and Fixes Inventory and Data Collection Remote Desktop and Diagnostics Out-of-Band Management Control of system power state Integrated IP-KVM Control boot source Hardware based alerts 20 20

21 Como o Intel AMT Funciona? Sits between the network interface and the OS Intel vpro Technology Client Management traffic is handled directly by AMT itself Management traffic is never seen by the OS Network Management Engine Intel AMT Network Interface Chipset Operating System 21 * A component of Intel vpro Technology, Intel Active Management Technology (AMT) enables Out-of-Band Management

22 Intel Security Capabilities by Platform Entry-level computing Smart performance Built for Business, Engineered for Security Intel IPT with OTP Intel IPT with protected transaction display Intel IPT with PKI Only on Ultrabook or vpro Intel OS Guard Intel TXT Intel AES-NI Intel Secure Key 1 Intel Anti-Theft Technology Remote KVM Intel AMT 22 Ultrabook is a trademark of Intel Corporation in the U.S. and/or other

23 Resumo Valor agregado na combinação das tecnologias de hardware da Intel e Symantec. Avanço do desempenho, segurança, gerenciamento e proteção de dados através da colaboração da Intel e Symantec Benefícios para todos os tamanhos de empresas e para o consumidor já estão no mercado e muito mais por vir 23

24 Thank you! Agradecido! Reinaldo Affonso Copyright 2012 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice. 24