eEye Digital Security    On the Frontline of the Threat Landscape: Simple configuration goes a long way

eEye Digital Security    2 Agenda  eEye at a Glance  Today’s Threat Landscape  Zeroday Vulnerability Trends  Attack Surface/Configuration  Security’s Cultural Shift

eEye Digital Security    3  Security Experts  Seasoned security professionals  Thousands of customers  Some of the largest VM installations in the world  Award-Winning Solutions  Recognized product leadership  Securing companies of all sizes  Unparalleled services and support eEye at a Glance  Industry Pioneers  Leaders in IT security since 1998  Developed one of the first vulnerability scanners  Growing and profitable  Thought Leaders  World-renowned security research team  Trusted advisors to organizations across industries and sizes 

eEye Digital Security    4 Time-Consuming Vulnerability Management Managing compliance initiatives takes IT Security Pros up to 50% of their work week. Centralized visibility is key to vulnerability management with 73% of organizations having as many as 100 applications deployed. 31% of IT pros do not have enough personnel to patch vulnerabilities - a challenge intensified by lack of integration between scan and patch solutions VM Trends Multiple regulatory standards Constantly changing networks and configurations  Source: eEye 2011 VM Survey of 2,000 IT Security Professionals INDUSTRY CHALLENGES  Decentralized visibility and reporting  Too many stand-alone tools  Unmanaged ‘exception’ systems  Unprotected against zero-days  Struggling to meet compliance requirements Increasing client-side exploits Hundreds of applications

eEye Digital Security    5 Zeroday Vulnerability Trends

Zeroday Vulnerabilites by Type eEye Digital Security    6

Zeroday: Tip of the iceberg eEye Digital Security    7

Attack Surface eEye Digital Security    8 Where security begins and ends.

Attack Surface eEye Digital Security    9

Attack Surface eEye Digital Security    10

Back to Basics eEye Digital Security    11 Good ConfigurationSecurity Product >

Top 2 Mitigations vs. Microsoft 2010 Vulnerabilities eEye Digital Security    12

Microsoft 2010 Patches - WebDAV eEye Digital Security    13

New = Better eEye Digital Security    14 Microsoft 2010 Patches vs. Latest Products

Metasploit vs. Microsoft 2010 Vulnerabilities eEye Digital Security    15

eEye Digital Security    16 Security’s Cultural Shift  What’s hype and what’s a real concern with:  Stuxnet  Night Dragon  Aurora  Nation-sponsored hacking  Advanced Persistent Threats  Security / Social Media / Mobile Computing..  Sliding scale, push back and find a balance or fail.

eEye Digital Security    17 eEye Research Report  New report from eEye’s Research team: In Configuration We Trust  Insights into straightforward changes you can make right away – for free – that will dramatically improve your security posture. eEye Digital Security    17

eEye Digital Security    18 Free eEye Resources  Zero Day Tracker:  Vulnerability Experts Forum:  eEye Blog and Social Networking:  Retina Community: – NEW! A Tradition of Supporting the IT Security Community:

eEye Digital Security    19 eEye Unified Vulnerability Management SECURITY RESEARCH Automation and Efficiency = Minimized Risk and Lower TCO  MANAGE AND REPORT End-to-end vulnerability and compliance management Centralized management, reporting, and controls Assess, mitigate, and protect from one console Advanced trending and analytics  Vulnerability Scanning  Configuration Auditing  Asset Discovery & Inventory  Zero-Day Vulnerability Identification  Vulnerability Reporting  Compliance Auditing ASSESS  Integrated Patch Management  Prioritized Mitigation  Risk Scoring  Security Alerts  Prescriptive Remediation Reporting MITIGATE  Zero-Day Protection  Intrusion Prevention  Web Protection  Application Protection  System Protection PROTECT

eEye Digital Security    20 Retina Community Edition  Vulnerability assessment across operating systems, applications, devices, and virtual environments (32 IPs)  Zero-day vulnerability identification  SCAP configuration scanning  Integrated vulnerability updates and alerting  Detailed vulnerability and executive-level reporting  Report export to XML, CSV, and PDF  Online support and resources eEye Digital Security    20

eEye Digital Security    21 Retina Community Edition - Download eEye Digital Security    21

eEye Digital Security    22  Visit eEye  About Us, Solutions, Awards, Resources, Downloads  Visit the eEye Security Resource Center  Demos, Guides, Whitepapers, Videos, Webinars, Events  Contact Us or  Recommendations, Full-Featured Evaluations, Trials More eEye Info