Avecto

Avecto | Presentation

Leaders in Windows Privilege Management Presentation to <insert name> Presented by <insert presenter name>

Presented to: | Presented by: Paul Kenyon & Mark Austin

Š 2013 Avecto Ltd

Agenda What is Least Privilege?

Problem and Solution The Least Risk Windows 7 Desktop Benefits Customer Examples Demonstration

avecto.com

Š 2013 Avecto Ltd

What is Least Privilege?

Company Background “The least privilege principle requires that each subject in a system be granted the most restrictive set of privileges needed for the performance of authorized tasks. The application of this principle limits the damage that can result from accident, error or unauthorized use”

Department of Defence Trusted Computer System Evaluation Criteria (Orange Book)

avecto.com

© 2013 Avecto Ltd

The Challenge – All or Nothing

Problem Applications

Standard Applications

Basic Admin Tasks

Standard Applications

Software Installation

Standard User Admin User High Support Costs

High Support Costs

High Security Risks

Less Productive Users

Compliance Issues

Poor User Experience

avecto.com

© 2013 Avecto Ltd

The Privilege Guard Solution

Admin User Standard User

Deploy all users as standard users Prevent the execution of unauthorised applications

Standard Applications

Assign privileges to individual applications based on user roles and needs

Problem Applications

Centrally managed through Active

Directory Group Policy

Basic Admin Tasks

Software Installation

avecto.com

Privilege Guard

Detailed auditing and reporting

Š 2013 Avecto Ltd

The Least Risk Windows 7 Desktop

Privilege Guard is the most effective way to deliver the least risk Windows 7 desktop - all users operate under a standard user account and application whitelisting further protects the environment.

Making the Most of Windows 7 Security, 24th August 2010 â&#x20AC;&#x201C; Dan Blum

avecto.com

Š 2013 Avecto Ltd

Reduced Support Costs

Implementing Privilege Guard can flatten the cost curve at its lowest point.

User self-service form a secure stand user account reduce the load on the help desk

avecto.com

Š 2013 Avecto Ltd

Improved Business Efficiency Applications are delivered to users based on demand Universal demand – required by all users - part of standard image

Number of users requiring the application

High demand – applications packaged for distribution Low demand – not cost effective to package, virtualize or remotely install via support

Demand

The current ‘sweet spot’ for economically packaged applications is up to this point.

Costly to satisfy delivery of low demand applications

10

avecto.com

X

Applications

Y

© 2013 Avecto Ltd

Strategies to Mitigate Advanced Targeted Attacks Mitigation Strategy Effectiveness Ranking for 2012 (and 2011)

Mitigation Strategy

Overall Security Effectiveness

1 (4)

Application whitelisting of permitted/trusted programs, to prevent execution of malicious or unapproved programs including .DLL files e.g. using Microsoft Applocker.

Essential

2 (1)

Patch applications e.g. PDF viewer, Flash Player, Microsoft Office and Java. Patch or mitigate "extreme risk" vulnerabilities with two days.

Avoid Adobe Reader prior to version X.

Essential

3 (2)

Patch operating system vulnerabilities. Patch or mitigate "extreme risk" vulnerabilities within two days. Avoid continuing to use Microsoft Windows XP or earlier versions.

Essential

4 (3)

Minimise the number of user with domain or local administrative privileges. Such users should user a separate unprivileged account for email and web browsing.

Essential

Once organisations have implemented the top four mitigation strategies, firstly on computers used by employees most likely to be targeted by intrusions and then for all users, additional mitigation strategies

5 (17)

Disable local administrator accounts to prevent network propagation using compromised local administrator credentials that are shared by several computers.

Excellent

Source: Australian Dept. of Defence, Intelligence & Security

avecto.com

Š 2013 Avecto Ltd

Regulatory Compliance

avecto.com

Š 2013 Avecto Ltd

Customer Examples Banking

Government

Energy

Manufacturing

Aerospace/Defence

Other

avecto.com

Š 2013 Avecto Ltd

Privilege Guard Benefits Mitigate Malware Threats

Reduce Operating Costs

Combat Insider Threats

Increase User Productivity

Reduce Operational Risk Achieve Compliance

avecto.com

Š 2013 Avecto Ltd

Avecto | Presentation

Demo

Presentation to <insert name> Presented by <insert presenter name>

Presented to: | Presented by: Paul Kenyon & Mark Austin

Š 2013 Avecto Ltd

Scalable Management Framework Privilege Guard ePO Edition

Privilege Guard Administrators

Policy Management, Auditing & Reporting (McAfee ePO)

Managed Desktops & Servers

Privilege Guard Active Directory Edition

Policy Management (Active Directory)

Privilege Guard Administrators

Managed Desktops & Servers Auditing & Reporting (SQL Server and Reporting Services)

avecto.com

Š 2013 Avecto Ltd

End User Experience

avecto.com

Š 2013 Avecto Ltd