INFORMATION PROTECTION
Johan Celis
Users Data Apps Cloud Endpoints Gateways Data Center
Unified Security Analytics Platform
Log and Telemetry Collection Unified Incident Management and Customer Hub Inline Integrations for Closed-loop Actionable Intelligence Regional and Industry Benchmarking Integrated Threat and Behavioral Analysis
Threat Protection
ENDPOINTS DATA CENTER GATEWAYS
• Advanced Threat Protection Across All Control Points • Built-In Forensics and Remediation Within Each Control Point
• Integrated Protection of Server Workloads: On-Premise, Virtual, & Cloud • Cloud-based Management for Endpoints, Datacenter, and Gateways
Information Protection
DATA IDENTITIES
• Integrated Data and Identity Protection • Cloud Security Broker for Cloud & Mobile Apps • User and Behavioral Analytics
• Cloud-based Encryption and Key Management
Cyber Security Services
Monitoring, Incident Response, Simulation, Adversary Threat Intelligence
Users Data Apps Cloud Endpoints Gateways Data Center
Unified Security Analytics Platform
Log and Telemetry Collection Unified Incident Management and Customer Hub Inline Integrations for Closed-loop Actionable Intelligence Regional and Industry Benchmarking Integrated Threat and Behavioral Analysis
Threat Protection
ENDPOINTS DATA CENTER GATEWAYS
• Advanced Threat Protection Across All Control Points • Built-In Forensics and Remediation Within Each Control Point
• Integrated Protection of Server Workloads: On-Premise, Virtual, & Cloud • Cloud-based Management for Endpoints, Datacenter, and Gateways
Information Protection
DATA IDENTITIES
• Integrated Data and Identity Protection • Cloud Security Broker for Cloud & Mobile Apps • User and Behavioral Analytics
• Cloud-based Encryption and Key Management
Cyber Security Services
Monitoring, Incident Response, Simulation, Adversary Threat Intelligence
BACK TO THE BASICS TO RE-IMAGINE INFORMATION PROTECTION
What data exists where?
Shadow IT for cloud apps
What is my exposure?
BYOD and Mobile growth
Who Has Access?
Careless access to information
Passwords are ineffective
Cumbersome user experience
How Is It Being Used?
Where is it?
Lack of context
Rogue access to apps and data
Users uploading to cloud apps
Sharing data that shouldn’t be
shared
NEW INFORMATION PROTECTION RISKS AND CHALLENGES
5
Your security slows me down
I expect an insanely great
user experience
You don’t own the device
I will use the device and app I
want
You can’t lock my device
down
You don’t own the app
You can’t say no
You don’t own the
infrastructure
Mobile
INFORMATION PROTECTION FOUNDATION
SYMANTEC DLP
Single DLP for endpoints, mobile, network, storage, & cloud
More accurate: Exact Data Matching & Classification Engines
Automatically encrypt data based on DLP policy
Integrates across Symantec portfolio
Support for strong authentication
Single-Sign On support and key recovery
Recognizable and trusted brand
INFORMATION PROTECTION FOUNDATION
INFORMATION PROTECTION FOUNDATION:
STRONG AUTHENTICATION
SYMANTEC ACCESS MANAGER | SYMANTEC VIP | SYMANTEC MPKI
Single sign-on to all of your cloud-base applications
Passwordless, two factor authentication
Device fingerprinting and behavioral analysis
SYMANTEC INFORMATION PROTECTION
Cloud
Access
Security
Broker
DLP
Encryption
MAM
2FA
SSO
INTRODUCING SYMANTEC DATA LOSS PREVENTION
12
Locate where your sensitive
information resides across your
cloud, mobile, network, endpoint
and storage systems
Understand how your sensitive
information is being used, including
what data is being handled and by
whom
Stop sensitive information from
being leaked or stolen by enforcing
data loss policies and educating
employees
SYMANTEC DATA INSIGHT
13
Document
Owner
File Activity Monitoring Technology
SYMANTEC DLP PROTECTS YOUR IMPORTANT, HIGH-VALUE INFORMATION
Customer Information
Company Information
Credit Card Info
Intellectual Property
HIGHER DETECTION ACCURACY WITH
ADVANCED CONTENT DETECTION TECHNOLOGIES
Described
Content Matching
Indexed Document
Matching
Vector Machine Learning
Exact Data Matching
DESCRIBED DATA
•
Non-indexable data
•
Lexicons
•
Data Identifiers
STRUCTURED DATA
CUSTOMER DATA
•
Credit card, Government IDs,
Pricing
•
Partial row matching
•
Near perfect accuracy
UNSTRUCTURED DATA
IP
•
Designs, Source Code,
Financials
•
Derivative match
•
Near perfect accuracy
UNSTRUCTURED DATA
IP
•
Designs, Source Code,
Financials
•
Derivative match
VECTOR MACHINE LEARNING
TRAINING
PROFILE
TRAINING
PROFILE
POLICY
TRAINING
PROFILE
POLICY
RE-TRAINING
IT ALL STARTS WITH DATA LOSS POLICIES
Content
Credit Cards
SSNs
Intellectual Property
Context
Who?
What?
Where?
Action
Notify
Justify
Encrypt
Prevent
Notification
User
Manager
Security
Escalate
RESPONSE
DETECTION
90% OF DLP IS INCIDENT RESPONSE !
PROVEN METHODOLGY FOR RISK REDUCTION
Competitive Trap
1000
800
600
400
200
0
Risk Reduction Over Time
SYMANTEC DLP: A UNIFIED SOLUTION FOR ALL YOUR DATA LOSS CHANNELS
UNIFIED POLICIES, MANAGEMENT AND REPORTING
8 Consecutive Years of
Technology Leadership
Used by over half of
the Fortune 100
The Global Market Leader in DLP
Thank you!
Copyright © 2015 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be
trademarks of their respective owners.
This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.
