Enterprise Privacy Architectures

1
Enterprise Privacy Architectures

• Leveraging Encryption to
• Keep Data Private

Karim Toubba VP of Product Management Ingrian
Networks
2
Security vs. Data Privacy

• SecurityA Journey not a Destination
• According to Gartner, 75 of external-based
  attacks are tunneling through applicationsand so
  go undetected by firewalls.
• According to Symantec, in 2003, 70 percent of all
  security vulnerabilities were simple for
  attackers to manage, and the numbers growing.
• Most estimates cite that now approximately 50 of
  security breaches are perpetrated by internal
  staffa number consistently rising each year.
• Plus, physical storage systems and data in the
  databases and applications themselves can be
  stolen.
• Need to have a solution in place for securing
  critical data inside the enterprise.
• That solution needs to work with existing
  enterprise privacy architectures.

3
EncryptionA Vital Component of Enterprise
Privacy Architectures

• One of the best ways to achieve data privacy in
  an enterprise is by selectively encrypting the
  sensitive data that needs to stay private.

• To be effective, an encryption architecture needs
  to be
• Centralized. Keys, auditing, and logging cant be
  managed disparately.
• Secure. Cryptographic processing needs to be on
  dedicated, tamper resistant device.
• Redundant. Need to ensure availability and
  scalabilityif security processing fails,
  business is at risk.
• Open. Leverage standards to integrate with
  existing privacy architectures.

Application Servers
Web Servers
Storage Systems NAS/SAN
Databases
4
Data Privacy from Ingrian

• Ingrian delivers data privacy solutions with
  capabilities for
• Encrypting critical data in Web, application, and
  database servers.
• Ensuring all access to data is securely managed,
  logged, and controlled.
• Administering keys and policies in a secure,
  centralized fashion.
• Ensuring security processing is highly scalable,
  reliable, and redundant.
• Using standard interfaces and protocols to do
  integration.

Application Servers
Web Servers
Storage Systems NAS/SAN
Databases
Ingrian DataSecure Platform
5
Ingrian DataSecure Platforms
Database
Application Server
Commercial Applications
Web Server
Authentication Authorization
Backup and Recovery
Platform Security
Secure Key Management
Logging, Auditing, Mgmt
Specialized Cryptographic Engine
Database
Application Server
Commercial Applications
Web Server
6
Summary

• Ingrians Data Privacy Solutions Enable
  Enterprises to
• Protect Business-Critical Customer and Corporate
  Data
• Ensure Compliance with Legislation and Industry
  Guidelines
• Augment Security TechnologiesTheyre No Longer
  Enough