Privileged Access Management · privileged credentials • Authenticates and links users to...

Privileged AccessManagement

August 2018

Breaking the Kill Chain

Copyright © 2018 CA, Inc. All rights reserved. All marks used herein may belong to their respective companies. This documentdoes not contain any warranties and is provided for informational purposes only. Any functionality descriptions may be unique tothe customers depicted herein and actual product performance may vary.

The views expressed in this presentation are those of the author(s) and do not necessarily reflect the official policy or position of the Air Force, the Department of Defense, or the U.S. Government.

For Informational Purposes Only Terms of this Presentation

AgendaKEY FINDINGS OF INSIDER THREATS REPORT

NATURE OF INSIDER THREAT

THE IMPACT OF INSIDER THREAT

THE SOLUTION: PRIVILEGED ACCESS MANAGEMENT

5 WAYS PAM BREAKS THE KILL CHAIN

WHY CA TECHNOLOGIES6

THE INSIDER THREAT REPORTKey Finding: Most feel vulnerable to insider threats

THE INSIDER THREAT REPORTKey Finding: How effective are your controls?

increase in reported data breaches from 2016 to 2017144%

THE INSIDER THREAT REPORTNature of Threat: Who poses the biggest threat?

THE INSIDER THREAT REPORTNature of Threat: Which users are riskiest?

THE INSIDER THREAT REPORTNature of Threat: What data are they trying to steal?

THE INSIDER THREAT REPORTNature of Threat: Which systems are most vulnerable?

THE INSIDER THREAT REPORTImpact of Threat: Is the threat real or not?

of all insider breaches are financially motivated160%

1. 2017 Verizon Breach Report

THE INSIDER THREAT REPORTImpact of Threat: What is the cost of the attack?

THE INSIDER THREAT REPORTImpact of Threat: How long to detect an attack?

THE SOLUTIONPrivileged Access Management

Stops Targeted Attacks

What PAM does for you

Mitigates Insider Threats

Achieves & Sustains Compliance

Improves Efficiencies

Secures the Hybrid Enterprise

Network Perimeter

THE SOLUTIONPAM | Disrupts the attack sequence

Disrupting the attack sequence at any point can “kill” the attack

RECON WEAPONIZE DELIVER EXPLOIT INSTALL COMMAND | CONTROL ACTIONS ON OBJECTIVE

NETWORK PERIMETER

External Threat

Insider Threats

Elevate Privileges Wreaks HavocGain/Expand Access

Lateral Movement

Privilege Vaultbuilds the foundationWhat challenges does it solve:

• Protects and manages privileged credentials

• Authenticates and links users to privileged activity

• Adopts zero-trust posture –permit by exception

Provides foundation for combatting insider threats and targeted breaches Centrally manages and protects access and usage of privileged accounts

VALUE STATEMENT

1THE SOLUTION5 Ways PAM Breaks the Chain

Privileged Credential Vault

Session Recordingis CriticalA “must have” capability that provides:

• Video coverage of all privileged user activity

• Individual accountability• Forensic evidence of

accidental or malicious actions

Session recording is out of the box, highly scalable, and delivered with no additional infrastructure requirements

VALUE STATEMENT

SessionRecording

User Behavior Analyticssuperchargesstatic controlsA “must have” emergingcapability because it:

• Can quickly identify abnormal behavior

• Assess the risk associated with this activity

• Trigger automated migration to the risk

CA Threat Analytics for PAM continuously assesses risk to quickly detect malicious activity so you become

VALUE STATEMENT

SessionRecording

User Behavior Analytics

Host-Based Access ControlcomplementsPrivilege VaultA “value add” security capability that provides:

• Fine-grained access control for critical servers

• Command and socket filtering

• Monitoring and alerts when changes made

• Secure task delegation

CA PAM Server Control provides an extra layer of security for your most mission critical servers

VALUE STATEMENT

SessionRecording

Host-BasedAccess Control

The Modern Software Factory is ComplexA “value add” security capability that provides:

• Cloud-based• Mainframe • On-premise• Virtual

No limitations solutions goes wherever your apps go… either physical, virtual or cloud.

VALUE STATEMENT

SessionRecording

Host-BasedAccess Control

Hybrid Environments

WHY CA Privileged Access ManagementComprehensive privileged access security

Single appliance protecting thousands of resources

Session recording runs in appliance, no additional hardware required

Supports a large number of concurrent sessions – at no additional costs

Installs in hours not weeks or months

Easy to install, configure, maintain, upgrade and manage

Enhanced features in base software license costs

Less infrastructure reduces overall total cost of ownership Comprehensive PAM solution in network and host

based form factors

Supports physical, virtual and cloud environments

Threat Analytics help reduce the threat of breach

1 Quick Time toValue Protection

2 Enterprise-Class Scalability

Defense-In-Depth Protection 3

Thank You

To learn more about Insider Threat, visit us at:

https://www.ca.com/us/products/insider-threat.html

To learn more about CA PAM, visit us at:

ca.com/pam

Product Marketing Director, PAMRobert.Marti@ca.com

Robert Marti

@casecurity

Slideshare/CAinc

Linkedin.com/company/ca-technologies

Privileged Access Management · privileged credentials • Authenticates and links users to...

Documents

Privileged Docs

Attention-Privileged Reinforcement LearningAttention-Privileged Reinforcement Learning we can make use of privileged information such as environ-ment states which are commonly accessible

Privileged Access Management - 2016

RESNET adopts interim IR Guidelines

DraftKings adopts a DevOps playbook

Managing privileged account security

DSS ITSEC Conference 2012 - VASCO Authenticates The World

Confidentiality & Privileged Communication

Privileged Programs

Hannah Arendt-Privileged Jews

Pre-Con Ed: Privileged Identity Governance: Are You Certifying Privileged User Access?

Hitachi ID Privileged Access Manager: Randomize and control disclosure of privileged passwords

1 Hitachi ID Privileged Access Manager - IAM Solutions · Hitachi ID Privileged Access Manager works by randomizing privileged passwords and connecting people and programs to privileged

Request for Proposal 3101 For Procurement of Privileged ... · privileged access management solutions sometimes synonymously referred as ^privileged account management and privileged

A hypothesis on paradoxical privileged portal vein ...website60s.com/upload/files/a-hypothesis-on-paradoxical-privileged... · A hypothesis on paradoxical privileged portal vein metastasis

The Privileged eCatalog 2014

azureazure :: a privileged life

Privileged Communications

Creating Privileged Moments

Privileged Piety