47
© VASCO Data Security, Inc. - CONFIDENTIAL Kurt Berghs – Area Sales Belgium VASCO Securing IDentities

Accel klantenevent 2016: Vasco

  • Upload
    accel

  • View
    62

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL

Kurt Berghs – Area Sales Belgium

VASCO

Securing IDentities

Page 2: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

It’s a world war out there

Page 3: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL3

Also in Belgium:

And we’re in the middle of it

Page 4: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL4

Why? I hate my boss!

Page 5: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL5

Jonathan James

Gary McKinnon

Kevin Mitnick

Why? Glory!

Page 6: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL6

Why? Security…

Page 7: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL7

Why? Money!!!

Page 8: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL8

De oplossing van de overheid

Page 9: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL9

• In België: CBPL (Privacy commissie) https://www.privacycommission.be• Waakhond over de data gegevens van Belgen en van data bewaard in België• Data: van Overheden, Medische gegevens, Klantengegevens, …• Strafrechtelijke bevoegdheden• Verschillende ISO normen worden aanbevolen (ISO 27001:2013)• Data bewaren zoals een goede huisvader • Meldingsplicht!!!

De oplossing van de overheid

Page 10: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL10

Boetes:

Page 11: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL11

How to hack?

Page 12: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL12

Hacking for dummies 1. GUESS a password

Page 13: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL13

Hacking for dummies 1. GUESS a password

Page 14: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL14

Hacking for dummies 2. browse or buy

Page 15: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL15

Hacking for dummies 3. Just ask nicely

Page 16: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL16

You’re not alone

Page 17: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL17

You’re not alone

+500.000.000 accounts

Page 18: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL18

You’re not alone

+1.000.000.000 accounts

Page 19: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

What can you do?

19

Page 20: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

What can you do?

20

Page 21: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

What can you do?

21

Page 22: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

Moeten wij ons zorgen maken? The Target Breach

What happend to Target?• One of the largest retail chains in US• 40M personal customer records stolen by hackers

Concequences• 200M $ estimated CC re-issuing cost• 100M $ cost for security upgrade• 46% drop in profit• 10% drop in stockprice• CEO resigned

Page 23: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

Moeten wij ons zorgen maken?

23

Page 24: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL24

Hoe lossen we dit op?

Page 25: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL25

Hoe lossen we dit op?

Page 26: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL26

Hoe lossen we dit op?

Page 27: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL27

Hoe lossen we dit op?

Page 28: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL28

Hoe lossen we dit op?

Page 29: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL29

Hoe lossen we dit op?

Page 30: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL30

Hoe lossen we dit op?

Page 31: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL31

Hoe lossen eind gebruikers dit op?

Page 32: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL32

Hoe lossen eind gebruikers dit op?

Page 33: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL33

Hoe lossen eind gebruikers dit op?

Page 34: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

Hoe lost VASCO dit op? Oorsprong

Page 35: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

Referenties in de financiele wereld

Page 36: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL

Tevredenheid met kwaliteit van digitaal aanbod per sector

64%60%

48% 48% 45% 45%39%

Financial Services Retail Media Utilities Local Government Central Government Transport

n = 2500Source: Fujitsu Digital Inside Out research

Page 37: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

Hoe lost VASCO dit op? Enterprise security

Page 38: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

Referenties in de enterprise markt

Page 39: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

Hoe lost Vasco dit op? Online Application Security

Page 40: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

Referenties in de online wereld

40

Page 41: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

Hoe lost Vasco dit op: 5 Solution Pillars

Multi-Factor Authentication

Risk Management

Mobile Application Security

Identity Proofing

ElectronicSignature

Page 42: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL42

Multifactor Authentication

Hardware Token

Software Token

Wearable

© Gartner, 2014

KnowledgeSomething known to

only the user

TokenSomething held by only

the user

Biometric TraitSomething inherent to

only the user

A password, a passphrase, a PIN

An OTP token, a smart card with X. 509 public-key infrastructure credentials

A biological or behavioral trait, such as face typography, fingerprint or voice

Examples

Biometrics BehavioralAnalysis

Page 44: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

Multifactor authentication today

44

UsernameOTP

Cloud office

Myemployees

CRM

Webmail

Appli & Desktop

Virtualizatie

SSO

Employees

1200

External People/Partners

50000

UsernameUsernameOTP

ERP

RemoteDesktop

mngt

File sharing

Risk mngt

… portal

Page 45: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL

VASCO Solution: DIGIPASS for Apps

© VASCO Data Security, Inc. - CONFIDENTIAL

9367893678

Page 46: Accel klantenevent 2016: Vasco

© VASCO Data Security, Inc. - CONFIDENTIAL© VASCO Data Security, Inc. - CONFIDENTIAL46

ROAM: Register Once. Authenticate Many.

VASCO Trusted Digital ID Platform

Identity Proofing Providers- Government ID Card- Experian- AYIN- IdenTrust

VASCO Certified Digital ID

Verified Identities

Page 47: Accel klantenevent 2016: Vasco

47