telling the right story Confidential © Bloor Research 2010 …optimise your IT investments Click to edit Master subtitle style Malware—taking protection to where the threats are Fran Howarth Senior Analyst, Security Bloor Research

telling the right story Confidential © Bloor Research 2010 The realities of malware today Previously on the decline, malware threats are on the rise again Greater chance of success

telling the right story Confidential © Bloor Research 2010 The internet is the new perimeter “You’ve already been de-perimeterised” An alternative take on the term “de-perimeterisation”, first coined by the Jericho Forum, that describes security exploits such as internet worms and viruses that are designed to bypass the borders of organisations using web and threats. Source: Network World

telling the right story Confidential © Bloor Research 2010 Reliance on and the internet is growing 62% of people check work over the weekend 55% of mobile users upgraded to a new phone just to get 59% admit to checking from the bathroom Source: AOL addiction survey 2009

telling the right story Confidential © Bloor Research 2010 Today’s ubiquity of communication

telling the right story Confidential © Bloor Research 2010 The imperative for data security Some recent headlines: “Hacked website exposes customers’ credit card details” “State employee data accessible on website exposing names, addresses, DOB and social security numbers” “Names and social security numbers of about 5,000 accidentally posted to web” Source: DataLossDB

telling the right story Confidential © Bloor Research 2010 Why existing security technologies are no longer enough Too many malware variants, introduced too fast Existing mechanisms using signatures can’t cope—too long to develop and too much hassle to update all users in in-house deployments Mobile workers left out in the cold New technologies make the threats worse—social networking, Web 2.0 in general Browser as principal means of infection Hybrid threats using blended mechanisms

telling the right story Confidential © Bloor Research 2010 Move protection to the cloud Anti-virus Anti-spyware Anti-phishing Application blocking Policy enforcement URL filtering Mobile workers and remote offices Internet Corporate network at HQ Management reporting dashboard for audit Cloud-based web security Services and analysis centre Remote data centre for failover and redundancy Anti-virus Anti-spyware Anti-phishing Application blocking Policy enforcement URL filtering

telling the right story Confidential © Bloor Research 2010 Why the cloud makes sense XXX Organisation relies purely on perimeter defences Traffic routed via cloud-based service provider enables better, more economical protection Only good traffic reaches organisation and web Security provided In the cloud

telling the right story Confidential © Bloor Research 2010 What drove your move to SaaS? Ranked from 1 = not a factor to 5 = major driver Source: InformationWeek Analytics 2010 SaaS survey of 131 business technology Professionals using SaaS

telling the right story Confidential © Bloor Research 2010 Conclusions Web and security is a necessity in today’s world where the web is a prime vector of attack Moving protection to where the threats emanate from provides better, faster protection against increasingly complex, sophisticated threats being seen Not only is the available protection provided faster and is of higher quality than traditional security technologies, but the use of cloud-based services can afford organisations with substantial cost benefits as well

telling the right story Confidential © Bloor Research 2010 Fran Howarth, Bloor Research Thank you