the trends and the customer challenges in identity and ... · pdf filemobile devices millions...

1© Copyright 2014 EMC Corporation. All rights reserved.

The Trends and the Customer Challenges in Identity and Access Management

Traxion: John van WestenengRSA: Corné van Rooij


Mainframe, Mini ComputerTerminals

LAN/Internet Client/ServerPC

Mobile Cloud Big Data SocialMobile Devices

MILLIONS OF USERS

THOUSANDSOF APPS

HUNDREDS OF MILLIONS OF USERS

TENS OF THOUSANDSOF APPS

BILLIONSOF USERS

MILLIONSOF APPS

Source: IDC

TRILLIONS OF DEVICES


Trends create Market Disruptors

Infrastructure Transformation

Mobile Cloud

Less control over access device and back-end

infrastructure

Threat LandscapeTransformation

APTs

SophisticatedFraud

Fundamentallydifferent tactics, more formidable than ever

BusinessTransformation

More hyper-extended, more digital

ExtendedWorkforce

NetworkedValueChains

BigData


Identity related threats?

6


Everyone will get there!

You can’t stop time progressing


Trend: Mobile

Websites will be out, Apps will be in

From 1-2 “desktops” to a set of devices

Even more identities; personal & business

Business apps, internal use only

BYOD and BYOI

Federated networks with cloudsspecifically for mobile use.


Trend: Cloud

As “clients” became web and Internet became fast, Cloud based IT will continue growing fast.

Cost saving, Time-to-Market and Knowledge are the driving factors.

Security and specifically data protection, privacy, SSO and identity management are key forgetting over the flippingpoint (dominant adoption).


Trend: Social Media

First started for personal use.

Now spinning off more and more for businessand commercial use.

Many, many (too many) ID’s.

Interconnected, federated.

Private/Business difficulties.

Threat landscape for ID theft.


Trend: Big Data

Data is exploding.

Data can be turned intoInformation adding context.

Information is Value.

The right information = gold…

Attach it to an ID and you havebusiness…… and a potential privacy issue.

Buying behaviour40 x

Daddy

Brochure


What is there to stay and what will leaveReshuffle spending! You can’t invest in new and maintain old.

• RBAC

• Central ID directory

•Enterprise-SSO

• HW/SW Token Auth.

• Internal only IDM systems

• Business driven AC

• Federation

•WebSSO

• Identity Broker

• Risk based or context based Access Control


Trends create Market DisruptorsSome take aways

Infrastructure Transformation

Mobile Cloud

Standardization

Hybrid, responsive applications

Threat LandscapeTransformation

APTs

SophisticatedFraud

Context based access control

BusinessTransformation

Containerization

ExtendedWorkforce

NetworkedValueChains

BigData

PrivacyIdentity broker


Standardization

From standard solutions/services to standard components andfunctions building custom, high quality solutions



(Mobile) application development platform

Identity & authentication

Vulnerability control

Security policies

API security


Containerization

• A balancing act between the enterprise and the user.

• Enables a secure any device strategy

• Any device, any platform

• From encrypted folders toapp wrappers to dualpersona OS modes.


Context based authentication• Use knowledge, i.e.

context, to reduce risksand increase usability

• Use the context factor tostrengten yourauthentication factors, or even replace it with anauthentication factor.

• Intelligence and big data technologies are helping tounderstand user behaviorand context.


Enterprise Auth

Get an identity broker

From enterprise identity to consumer identity to social identity

Ensure you can connect multiple Identity Providers

Be able to translate tokens from SAML to OAUTH to OpenID Connect to …

And propagate user data before delivering it to the application

Identity Broker“trust provider”

Social Auth

Enterprise Apps

Mobile Apps

Social Apps

Cloud Web Apps

Customer Auth

Information providers


Attribute based access control• Static versus dynamic authorization

• User attributes instead of roles

• Identity and Information

lifecycle management• Characteristics: Authentication

level, device id, organizational

unit, roles(?), function, tasks, …

• Design your authorization

model based on attributesSource: blog.empowerid.com


AUDIENCE QUESTIONS

How many companies in the room face or foresee a privacy challenge with the use of Big Data for their business?

Who think age is a privacy related attribute?

Who think shopping information is a privacy related attribute?


Keep the user centralSecurity by design

Visibility and transparencyIntegrated in the design


How it comes together?Mobile

Cloud

Big Data

Social Media


Context based authentication

Attribute based access controlStandardization

Identity brokerContainerization

PRIVACY

Privacy by Design


Partners in Information Security

the trends and the customer challenges in identity and ... · pdf filemobile devices millions...

Documents