Innovative Security Solutions For Protecting Data in Motion
Transcript of Innovative Security Solutions For Protecting Data in Motion
© 2017 Senetas Corporation Slide 1
Innovative Security Solutions For
Protecting Data in Motion
“Maximum Security and Performance”
MIKE STEPHENS
SINGAPORE
© 2017 Senetas Corporation Slide 2
A HISTORY OF INNOVATION
First FIPS Certified
High-Assurance Layer
2 Network Encryptor
First High-Speed
ATM Encryptor
First Global Deployment
Of High-Assurance Layer
2 Encryptors
World’s First Quantum-
Powered Encryptors
Launch Of 1Gbps,
High-Assurance
Ethernet Encryptor
World’s First SONET
Encryptor
First Multi-Certified Layer 2
Ethernet Encryptors
World's first high-assurance file
sharing and collaboration tool
First Ultra-Fast 100Gbps
Ethernet Encryptor To
Support All Topologies
© 2017 Senetas Corporation Slide 3
Vulnerabilities in the virtual world
MATHEW - HERE PLEASE JUST PASTE IN SOME OF THE NASTY DATA BREACH STATS/ICONS - LIKE YOU DID FOR HEALTH, GOVERNMNET ETC – ENOUGH TO SUFFICIENTLY FILL THE PAGE AND WORRY THE AUDIENCE!!!
HACKING HEADLINE IOT
© 2017 Senetas Corporation Slide 4
THE ANATOMY OF A BREACH
© 2017 Senetas Corporation Slide 5
© 2017 Senetas Corporation Slide 6
GLOBAL STANDARDS
• GDPR
• PCI DSS
• Privacy Shield
• US Govt. Standards
© 2017 Senetas Corporation Slide 7
GLOBAL STANDARDS COMPLIANCE
• Data owner
• The buck stops here
• Data processor
• Incl. third party processors/Cloud Service Providers
• Data sovereignty
• Always know where your data is
• Data transfer
• Protecting data in motion
© 2017 Senetas Corporation Slide 8
• Investigation
• Notification
• Remediation
• Compensation
• Prosecution
• Reputation
THE TRUE COST OF A BREACH
© 2017 Senetas Corporation Slide 9
“Hope is not a strategy”
Your data, video and voice is on the move
From site to site, or multiple
sites
From Data centre to
data centre, for backup
and disaster recovery
To the last mile, curb,
cabinet…
On-premises, up to the
cloud and back again
© 2017 Senetas Corporation Slide 11
Next generation, high-assurance encryption
security for all data in motion
Core network infrastructure – the world’s first certified high-
assurance 100Gbps encryptor for all network topologies.
SENETAS SECURITY INNOVATION 2.0
Case Study Australian Customs Agency
Video surveillance at Australian
domestic airports on Layer 2
Comms Links
Why encryption was needed?
• Closed Circuit Television
Monitoring
• Targeting crime, terrorism and
aviation security related issues
© 2017 Senetas Corporation Slide 13
CCTV on layer 3 networks mixed with Data! and can be compromised. Layer 2 is encrypted and clear.
Case Study Large Bank in Asia
Storage Area Network over Ethernet
between two facilities
Transport provided by in-country
carrier
Why encryption was needed?
• Transmission of sensitive financial
data across exposed public network
• Risk of surveillance/eavesdropping
• Telco misconfiguration
-International meshed
network
-Multiple carriers
-More than 80
encryptors
-Multiple VLANs
-All cryptographically
isolated
No other encryption
solution can do this
07.10.16
Case Study Large Company Moving/Accessing Data WW
Case Study Energy Company..keeps City/Country On
Why encryption was needed?
• Company’s facilities are
considered ‘Critical Infrastructure’
• Safety, traceability &
transparency vital to business
• Risk factors identified include wire tapping and
data manipulation
• Stuxnet has led to industry
rethink on security & safety
• CyberSecurity Act applies to
industrial systems
© 2017 Senetas Corporation Slide 17
Virtual encryption for IP networks
The world’s first “deploy anywhere” IP network open-systems
based high-assurance encryption; enabling enterprise-wide
and global deployment in seconds for instant security.
SENETAS SECURITY INNOVATION 2.0
Development roadmap
vHSE – Virtual HSE
• First Layer 2 encryption VNF
• Based on proven hardware platform
• Optimised performance
• AES-NI, DPDK, QAT,
• Line rate up to 10Gbps*
• Zero-touch provisioning and key management
• High assurance option with Key Secure integration• Entropy generation
• Storage of master key for protection of critical security
parameters
Available in late 2017
*Platform dependent
vHSE Layer 2 & 3 Use case:
Smart WAN / Cloud access
Available in late 2017
© 2017 Senetas Corporation Slide 20
Encrypted file synch and share for secure collaboration
The world’s most secure and user-friendly file collaboration tool for desktop and mobile systems; enabling trusted service provider or enterprise hosting and on-premises data security.
SENETAS SECURITY INNOVATION 2.0
© 2017 Senetas Corporation Slide 21
“I JUST WANT A SECURE
PLACE TO PUT THINGS….”
A frustrated government CIO…
© 2017 Senetas Corporation Slide 22
THE SOLUTION: SUREDROP®
SUREDROP®
INFRASTRUCTURE
GOVERNMENT
AGENCY
AGENCYINFRASTRUCTURE
AGENCYINFRASTRUCTURE
AGENCYINFRASTRUCTURE
SECURE
GATEWAY
GOVERNMENT
AGENCY
GOVERNMENT
AGENCY
© 2017 Senetas Corporation Slide 23
SUREDROP® DESIGNED TO BE BETTER, AND SAFER
Collaboration without compromise
Robust, standards-based encryption
A fully autonomous solution
Zero-touch encryption key management
Compatible with desktop and mobile
Storage options..keep data local/in country!..no mystery!
© 2017 Senetas Corporation Slide 24
PREVENTION VERSUS PROTECTION
The high-speed data networks that we have become
dependent upon are not inherently secure.
Breaches are inevitable
The best course of action is to ensure any data lost or
stolen is rendered useless to unauthorised users.
Encryption is the best, last line of defence
© 2017 Senetas Corporation Slide 25
ALWAYS KNOW WHERE YOUR DATA IS
• Dropbox, BOX and OneDrive data can
be stored in other countries and be
moved around
• Locations unknown to Data Owners
• Data could be stored in North America
Patriots Act
• Jurisdiction & Sovereignty considerations
© 2017 Senetas Corporation Slide 26
HIGH-ASSURANCE “UNBREAKABLE” ENCRYPTION
• 20 years of crypto expertise – tested
and certified by all major government
approved testing authorities
• 20 years of hardware innovation – zero
latency and data overheads whilst
transmitting at speeds up to 100Gbps
• All Senetas high-assurance encryption
security methodologies are used in all
products
© 2017 Senetas Corporation Slide 27
SENETAS PHYSICAL PROTECTION OF DATA
• High Assurance Encryption for business to business
• Data Centre to Data Centre
• Business to Data Centre
© 2017 Senetas Corporation Slide 28
“Hope is not a strategy”
© 2017 Senetas Corporation Slide 29
www.senetas.com
Mike Stephens
Manager International Business – Asia
M +65 8307 3540