Upload
others
View
1
Download
0
Embed Size (px)
Citation preview
An Instant Thinclient SystemAn Instant Thinclient System
““wizpy Style Secure Solution”wizpy Style Secure Solution”
Turbolinux, IncTurbolinux, Inc
December, 2007December, 2007
Turbolinux, Inc.Turbolinux, Inc. 22wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Turbolinux Inc
(Japan)
Zend Japan
(Japan)
Laser 5
(Japan)
Turbolinux China
(Beijing)
Turbolinux India
(India)
• Public company• 40 persons• Tokyo• OS・MW・Application
dev., Global alliance
• 10 persons• Tokyo• PHP and PHP
related products/ services
• Exclusive right
• 25 persons• Tokyo• Embedded OS,
LAMP, LAPP
90% 100% 49% 55%
• 45 persons• Beijing• OS/MW
• 10 persons• Gurgaon
Turbolinux group
Turbolinux Group
• Intel Corporation
• IBM Corporation
• Hewlett-Packard Company
• Advanced Micro Devices
• BEA
• NEC
• Oracle
• TOSHIBA
• Microsoft Corporation
• Sun Microsystems, Inc.
• Just System
• RICOH
• Real Networks
• Macromedia, Inc.
・・・
Technology partners
Turbolinux, Inc.Turbolinux, Inc. 33wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
What we believe in ...
Q. Who is the winner of open source BUSINESS?
Our answer is :Google, Yahoo!, and other service oriented companies
A key to the success for open source business, but our model will be the mixture of service and products
Turbolinux, Inc.Turbolinux, Inc. 44wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
USB Bootable OS Device
“wizpy”
Turbolinux, Inc.Turbolinux, Inc. 55wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
A Brief Flash-back from last year...
Problem
Many people do not chose to use Linux OS because Linux has to install by them self and its really toublesome.
Solutions
We created a Linux OS that does not require INSTALLATION, which is called “wizpy”.
Result
We have distributed wizpy to schools and provided the students to actually play with Linux and other open source software.
We gave a birth to a new solution called “wizpy Style Secure Solution”
BUT! The concept of movable OS (PC2.0) can do more thatn that!
Turbolinux, Inc.Turbolinux, Inc. 66wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Table of ContentsTable of Contents
1.Why a Secure Client is in Need?1.Why a Secure Client is in Need?
2.wizpy Style Secure Solution
3.Case Studies
Turbolinux, Inc.Turbolinux, Inc. 77wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
A Spate of Information Leaking IncidenceA Spate of Information Leaking Incidence
Millions of users' information leakedMillions of users' information leakedA company who run one of major portal site in A company who run one of major portal site in
Japan had a customer information leakage trouble. Japan had a customer information leakage trouble.
● Low IT literacy, Low IT literacy, MoralityMorality
● Penetration of Penetration of mobile PC and mobile PC and devices.devices.
● Trends to Trends to outsource back-outsource back-office managementoffice management
Bank Card's transaction Record LeakageBank Card's transaction Record LeakageCustomer's transaction records have been taken Customer's transaction records have been taken our from the bank and caused the fake card our from the bank and caused the fake card problems.problems.
Presonal Date and Transaction Record Presonal Date and Transaction Record LeakageLeakage
Presonal data and transaction record leaked from a Presonal data and transaction record leaked from a shop on one of major e-commcerce site. As a shop on one of major e-commcerce site. As a result, the shop was forced to be closed.result, the shop was forced to be closed.
Leakage from File Swapping SoftwareLeakage from File Swapping SoftwareA Sefl-Defence Force member used “winny” and A Sefl-Defence Force member used “winny” and bacause of that internal confidential documents have bacause of that internal confidential documents have leaked.leaked.
Turbolinux, Inc.Turbolinux, Inc. 88wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Major Factors of Information LeakageMajor Factors of Information Leakage
Ratio
29.2 %
Source: NPO Jaoan Network Security Association
Loss of PC/devices
Factors
Robbery of PC/Devices
Operational Error
Warm, Virus
Management Error
Illegal Take away of data
Internal Fraud
Other, unknown
19.0 %
14.7 %
12.2 %
8.3 %
8.2 %
2.1 %
6.3 % 81.5% caused by Internal Issues
Turbolinux, Inc.Turbolinux, Inc. 99wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Major Options for Information LeakageMajor Options for Information Leakage
Blade PC
Options
Data Encryption
Thin Client
Application Control
Effectiveness Initial Cost Running Cost
Do nothing
?
Turbolinux, Inc.Turbolinux, Inc. 1010wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Problem with Thin Client SolutionsProblem with Thin Client Solutions
●High Initial Cost
●Difficult to Apply Mobile usage
wizpy Style Secure Solution
Turbolinux, Inc.Turbolinux, Inc. 1111wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Table of ContentsTable of Contents
1.Why a Secure Client is in Need?
2.wizpy Style Secure Solution
3.Case Studies
Turbolinux, Inc.Turbolinux, Inc. 1212wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
So, what is wizpy Style Secure SolutionSo, what is wizpy Style Secure Solution??
wizpy Style Secure Solution
Turbolinux, Inc.Turbolinux, Inc. 1313wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Advantages of wizpy Style Secure SolutionAdvantages of wizpy Style Secure Solution
wizpy Style Secure Solution
Effective use of existing PC assetEffective use of existing PC asset
Great PortabilityGreat Portability
No way to take out date No way to take out date
Cost less to startCost less to start
Turbolinux, Inc.Turbolinux, Inc. 1414wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Advantage of wizpy Style Secure Solution (1)Advantage of wizpy Style Secure Solution (1)
Effective use of existing Asset
File Server
wizpy StyleSecure Server
No Need for Thin Client terminal ==> Reduce initial cost==> Contribution to environmental issue
wizpy SecureServer
Turbolinux, Inc.Turbolinux, Inc. 1515wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Office
Client(wizpy Style
Secure Client)
Advantage of wizpy Style Secure Solution (2)Advantage of wizpy Style Secure Solution (2)
Great Portability
Carry the device anywhere that enable the “Free Address Office”
Mr. A
Mr. B
Mr. C
ConnectConnectAny PCAny PC
Server(wizpy Secure
Server)
Input dataInput dataOutput DataOutput Data
Home
ConnectConnectAny PCAny PC
Input DateInput DateOutput DataOutput Data
Turbolinux, Inc.Turbolinux, Inc. 1616wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Advantage of wizpy Style Secure Solution (3)Advantage of wizpy Style Secure Solution (3)
No way to take out date
By limiting the capability to write on client's memory area and print out by client, wizpy SSS can reduce the risk of data leakage.
Source: NPO Japan Network Security Association
Paper
PC
Memory Device
Web, Net
FTP
Other, Unknown
Path Ratio
10.7 %
43.8 %
8.2 %
22.0 %
7.7 %
0.1 %
7.6 %
Factor
Media
Inte
rnet
Major data leakage path
Turbolinux, Inc.Turbolinux, Inc. 1717wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
wizpy Style Secure Solution Operation Environmentwizpy Style Secure Solution Operation Environment
wizpy Style TC703 Operation Environment
Operation Environment of PC connected
CPU Intel Celeron 700MHz or higher
Memory 128MB or higher
Video Card VGA or higher
USB Port USB2.0
wizpy Style Secure Server Operation Environment
Operation Environment
Windows 2000/2003 Server (terminal service has to be effective) or Advanced Server
PC server or PC which can run Windows 2003/2000
30 to 50 users (using MicroSoft Office)CPU : intel Xeon 5150 2.66GHz 1x4MB L2 Dual Core ×2ProcessorRAM : 4GB
Expected Spec (example)
Turbolinux, Inc.Turbolinux, Inc. 1818wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Table of ContentsTable of Contents
1.Why a Secure Client is in Need?
2.wizpy Style Secure Solution
3.Case Studies
Turbolinux, Inc.Turbolinux, Inc. 1919wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Case Study: A Company (Banking/Finance)Case Study: A Company (Banking/Finance)
Background To be prepared for Japan's Personal Information Protection Lawand SOX Act ==> higher information security requirement Uniformed management of IT system among the group companies.==> Reduction of running cost
Able to utilize the existing computer infrastructure Reduction of running cost==>Unified management of IT system
on the server side. Dramatically higher cost-performance compare with other thin
client solutions
Why WSSS?
Turbolinux, Inc.Turbolinux, Inc. 2020wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
H o s t in g C om p an y CC om p an y A O f f ic e XInternet
C om p an y B O f f ic e Y
T u r b o lin u x O ST u r b o lin u x O S
w iz p y S t y le S e c u r e C lie n t
T u r b o lin u x O ST u r b o lin u x O S
w iz p y S t y le S e c u r e C lie n t
T u r b o lin u x O ST u r b o lin u x O S
O p e n V P N
T u r b o lin u x O ST u r b o lin u x O S
O p e n V P N
T u r b o lin u x O ST u r b o lin u x O S
O p e n V P N
E n c r y p t io nE n c r y p t io n
W in d o w s 2003 S e r v e rW in d o w s 2003 S e r v e r
w iz p y S t y le S e c u r e S o lu t io n L o ad b a la n c e r
O p t io n
W in d o w s 2003 S e r v e rW in d o w s 2003 S e r v e r
w iz p y S t y le S e c u r e S e r v e r
Configuration
Case Study: A Company (Banking/Finance)Case Study: A Company (Banking/Finance)
Turbolinux, Inc.Turbolinux, Inc. 2121wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Other Options (1)Other Options (1)
Finger Print Auth Solution
w iz p y S t y le S e c u r e S e r v e rp o ew e r e d b y 2X
Personal identification by finger print➢ FAR : 0.001%or lower➢ FRR : 0.1%or lower
Denial or limitation of access
Acceptance
Higher security No Password required
Turbolinux, Inc.Turbolinux, Inc. 2222wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Other Options (2)Other Options (2)
Rich Client + Thin Client
Rich Clientwizpy(Linux Desktop)==>email, office etc・Vista alternative to reducecost
Thin Clientwizpy SSS ==>specific activities which requires higher security
Changeable based onuser's activities
Turbolinux, Inc.Turbolinux, Inc. 2323wizpy S tyle S ecure S olutionwizpy S tyle S ecure S olution
Thank you !