Recommandé
Recommandé
Contenu connexe
Tendances
Tendances (10)
Similaire à Conférence - Pourquoi le PAM (Privileged Access Management) doit-il être le socle de votre stratégie IAM (Identity & Access Management) ? - #ACSS2019
Similaire à Conférence - Pourquoi le PAM (Privileged Access Management) doit-il être le socle de votre stratégie IAM (Identity & Access Management) ? - #ACSS2019 (20)
Plus de African Cyber Security Summit
Plus de African Cyber Security Summit (20)
Conférence - Pourquoi le PAM (Privileged Access Management) doit-il être le socle de votre stratégie IAM (Identity & Access Management) ? - #ACSS2019
- 2. © BeyondTrust 2019 La surface d’attaque évolue sans cesse SaaS + admin cloud - Comptes super-utilisateurs - Admin BDD & application - Utilisateurs privilégiés - Développeurs - Clés et mots de passe machine DevOps Outils DevOps et SecDevOps Environnements virtuels dynamiques Containeurs Microservices Internet of Things Postes itinérants BYOD (appareils personnels) Appareils photos Capteurs Imprimantes Tout appareil avec connexion Internet Cloud & cloud hybride Plateformes de gestion cloud (AWS, Azure) Environnements virtualisés (VMWare, MSFT) Machines virtualisées (UNIX, Linux, Windows) Apps SaaS (Facebook, LinkedIn, personnalisée) Sur site Comptes admin partagés Desktops (Windows, Mac) Serveurs (Unix, Linux, Windows) Systèmes de contrôle industriels Infrastructure sécurité & réseau Applications & BDD Identifiants machines (App to App) Hyperviseurs & machines virtuelles Explosion du périmètre de l’infrastructure
- 5. © BeyondTrust 2019 Le PAM est la priorité numéro 1 des projets Sécurité en 2019 selon Gartner
- 6. ##© BeyondTrust 2019 Les utilisateurs internes ou externes ont des accès superflus Afin de faire leur métiers, les utilisateurs ont souvent accès à des ressources dont ils n’ont pas besoin, à des données confidentielles, et ces accès ne sont pas forcement monitorés
- 7. ##© BeyondTrust 2019 Les mots de passe sont créés et partagés, mais ne sont pas vérifiés, surveillés ou gérés avec discipline et responsabilité. Les identifiants sont partagées et non gérées L’abus de privilège a causé 81% des incidents impliquant une « fausse manip » Source: Verizon 2017 Data Breach Investigations Report
- 8. ##© BeyondTrust 2019 Ordinateurs de bureau, ordinateurs portables, serveurs et applications communiquent et ouvrent des chemins vers des ressources et des données sensibles. Les Assets IT communiquent sans contrôle 99% des attaques réussies tirent parti des vulnérabilités connues Source: Verizon 2015 Data Breach Investigations Report
- 9. # © BeyondTrust 2019 risk by the numbers 62% des entreprises ne contrôlent pas leurs accès privilégiés 4 80% des failles résultent d’utilisation abusive ou inappropriée 3 9 / 10 vulnerabilités sont associées à des droits admin excessifs 1 1. 2018 Microsoft Vulnerabilities Report, BeyondTrust 2. 2018 Verizon Data Breach Investigations Report 3. 2018 Forrester Wave: Privileged Identity Management 4. 2018 Privileged Access Threat Report, BeyondTrust 28% des attaques impliquent des utilisateurs internes Les priviléges non ou mal gérés mettent votre organisation en danger
- 11. # © BeyondTrust 2019 risk by the numbers 62% des entreprises ne contrôlent pas correctement leurs accès privilégiés 4 80% des failles résultent d’utilisation abusive ou inappropriée 3 9 / 10 vulnerabilités sont associées à des droits admin excessifs 1 1. 2018 Microsoft Vulnerabilities Report, BeyondTrust 2. 2018 Verizon Data Breach Investigations Report 3. 2018 Forrester Wave: Privileged Identity Management 4. 2018 Privileged Access Threat Report, BeyondTrust 28% des attaques impliquent des insiders 2 Les priviléges non ou mal gérés mettent votre organisation en danger
Notes de l'éditeur
- Summary Bullets: And what’s more – what we once classified as the ‘privileged attack surface’ has massively changed: in fact it’s grown exponentially over the years. In most organizations, thousands of privileged accounts now exist across on-prem devices, the cloud, the Internet of Things, and in DevOps.
- Summary Bullets: And what’s more – what we once classified as the ‘privileged attack surface’ has massively changed: in fact it’s grown exponentially over the years. In most organizations, thousands of privileged accounts now exist across on-prem devices, the cloud, the Internet of Things, and in DevOps.
- Privileged access is at the heart of many of today’s most high-profile breaches. And if breaches weren’t enough, a growing list of compliance regulations require the management of privileged users. Let’s take a quick look at why this is the case. First up, employees and other insiders have unnecessary access. Employees, vendors and other insiders are often given excessive access to systems and data. This is often needed to “do their job” but without the right discipline and accountability these excessive rights are just pathways to data. Privilege abuse can be malicious, as with Edward Snowden at the NSA – or it can be accidental, such as when outside attackers gain privileges through phishing and hacking. Looking at the Verizon report, over 60% of cases involved excessive privileges in some capacity.
- Next up, enterprise credentials – the keys to the kingdom – are shared and unmanaged. This means that passwords can be created and shared, but aren’t audited, monitored or managed with discipline or accountability. Every heard of the Sony attack. Whats the ideal scenrairo – every device, every database, every resource, every asset has a unique password that changes after each use. That’s the goal. Can we get there? We can get pretty close. Our customers and new clients typically don’t know how to get there and candidly scared to death of how to get there. They are afraid of losing control. The resultant behavior of that fear is what the threat actors leverage to gain privilege access. In 55% of cases, privilege abuse was behind the incident.
- Of course, once attackers find their way in, they can do a lot of damage by taking advantage of system vulnerabilities – such as outdated software – to install malware and other tools for stealing data. This happens because desktops, laptops, servers and applications communicate and open paths to sensitive assets and data. The sad fact is most exploited vulnerabilities are “old hat” and have been known about for over a year and are very easy to compromise.
- Summary Bullets: - Before I run through the specific solutions in our portfolio that could help you resolve these challenges – I wanted to talk through the overarching idea behind our PAM platform. - It’s this challenge of ‘too many people having too much access’ that tends to be at the core of most security breaches (see key stats).
- Summary Bullets: - Before I run through the specific solutions in our portfolio that could help you resolve these challenges – I wanted to talk through the overarching idea behind our PAM platform. - It’s this challenge of ‘too many people having too much access’ that tends to be at the core of most security breaches (see key stats).