AuthShield - Information Security Solution Provider For Banking Sector in India

INFORMATION SECURITY
The threats from within are increasing on a

daily basis. 78% of all information security
breaches happen internally
05/26/15
Private and Confdential - INNEFU LABS
WELCOME TO GREATER
MUMBAI BANK
PRESENTATION FORMAT
05/26/15
Current Architecture
Secure Architecture - INNEFUs AuthShield
05/26/15
CURRENT ASSETS
05/26/15
E-mail servers
Database servers
Core Banking Application / Application Servers
Intranet Applications
Web Applications
CURRENT ARCHITECTURE
05/26/15
Disparate Architecture
Servers on Public IPs
No single Sign on
No DMZ
No Multifactor Authentication
INFORMATION SECURITY CURRENT
Firewall
Unifed Threat Management
People and Processes

Security
Policy
Processes to connect to the Internet
No authorization for Pen drives, CDs, Laptops etc
Anti Virus
05/26/15
INFORMATION SECURITY
Single Sign on, authentication and Authorization

Open LDAP / AD integrated with RADIUS
Virtual Private Network for critical Third party
Applications
Multifactor Authentication for
Net
Banking
Core Banking Applications
Third Party Applications
Technical Audit Vulnerability Assessment and

Penetration testing
05/26/15
SINGLE SIGN ON
05/26/15
ADVANTAGES
Reduces time spent re-entering passwords for the

same identity
Increases security - Users select stronger
passwords, since the need for multiple passwords
and change synchronization is avoided
Security on all levels of entry/exit/access to systems
without the inconvenience of re-prompting users
User only has to remember a single password

instead of multiple complex passwords
05/26/15
10
RADIUS SERVER
05/26/15
11
ADVANTAGES
05/26/15
Client Server Architecture

Once the user is authenticated, the client
provides the user with access to appropriate
network services
The Authentication Request is sent over the
network from the RADIUS client to the RADIUS
server
If the user name and password are correct, the
server sends an Authentication Acknowledgment
that includes information on the user's network
system and service requirements.
12
VPN FOR THIRD PARTY

APPLICATIONS
05/26/15
13
CONTD.
05/26/15
14
ADVANTAGES
05/26/15
Extended connections across multiple geographic

locations without using a leased line
Improved security for exchanging data
Flexibility for remote offices and employees to use
the business intranet over an existing Internet
connection as if they're directly connected to the
network
Savings in time and expense for employees to
commute if they work from home
Improved productivity for remote employees
15
MULTIFACTOR AUTHENTICATION
05/26/15
Point of Attack
16
IDENTITY THEFT
11 Million Americans affected in 2010-2011
900,000 new victims each year
Cost to businesses more than $50 billion
Cost per incident to company $6,383
Hours spent per victim resolving the problem as shown by identity

theft statistics: 30
Fastest growing white collar crime
05/26/15
Irreparable loss to Companys Brand/Image

Loss of Clientele
17
05/26/15
18
POINT OF ATTACK
05/26/15
Customers
Vendors
Development Team
Power Users/Key Users/Super Users
Agents
End Users
Employees
19
METHODS OF ATTACK
Virus, Trojans, worms inside the companys

architecture or personal computer of users
LAN Attacks Remote Sniffing
Web Vulnerabilities including SQL Injection,
XSS attacks and Cookie capturing
Phishing
05/26/15
20
ASSETS
Application Servers
VPN/SSL
Intranet Applications
Database Servers
Local LAN / WiFi
Web Application
05/26/15
21
MFID MULTIFACTOR
AUTHENTICATION
Identify
the user based on
Something
he knows (user name / password)

Something in the users possessions
the physical identity of the user to the

server
05/26/15
Map
22
INNEFUS AUTHSHIELD
Soft
Token
Hard token
Mobile Token
E-Token
factor authentication system which uses

either of the three authentication mechanisms
05/26/15
Multi
23
HARD TOKEN IDENTIFYING THE USER

ON THE BASIS OF HIS KEY
05/26/15
24
PROTECT VPN AND CUSTOM MADE

APPLICATIONS
The device displays a changing number that is

typed in as a password
The password is based on a pre defned
unbreakable randomized algorithm
Every time the user accesses a critical IT asset,
the randomly generated number is matched with
the server to verify users credentials
Security device given to authorized users
05/26/15
25
05/26/15
SOFT TOKEN IDENTIFYING THE

USER ON THE BASIS OF HIS PHONE
NUMBER
26
MOBILE TOKEN GENERATING TOKEN

VIA MOBILE PHONES
4). Token Generated
5). Credentials Entered
2).Request Sent to BES
BES
1). User accesses the token generation
application on his BB device
IAS & AD
3). Request Forwarded to IAS

3).
Web Client
UN+PWD+TOKEN
05/26/15
Innefu BlackBerry AuthShield for Web Clients
27
IAS
6). Access
PROTECT INTERNET BANKING
The user use the OTP to log into any web

application or intranet application
Works on all smart phones with GPRS enabled
The system does not depend on the memory or
the processor usage of the phones
The OTP is sent either via SMS or the OTP is

generated by the smart phone itself
05/26/15
28
FEATURES
Independent Authentication Mechanism
Integration with the current business

and security architecture
Works
as a stand alone authentication

mechanism or in connection with Microsoft
Firewall
AD
VPN
Wi-Fi
Terminal
services etc
Seamless
05/26/15
OS
29
CONTD.
Unbreakable
encryption on the lines of those

used by US Government
Prevent identity theft by up to 99%
the log on security for critical

applications
05/26/15
Increases
30
CONTD.
Date
and Time
Time
Gap
User
Access to logs only available to Admin team
Privileges assigned to every users
IP Address of the user
All logs are stored in a secured database

(completely encrypted) for future analysis
05/26/15
31
TECHNICAL AUDIT
Internal
Audit Test all the IT assets of the

organization with login privileges
External Audit Test all the IT assets of the
organization without login privileges
Identify all vulnerabilities
Penetration tests to remove false positives
Vulnerability Assessment and Penetration

testing
05/26/15
32
AUTH-SHIELD LABS PVT. LTD

http://auth-shield.com/
+91-11-47065864 / 66
contact@auth-shield.com
33
QUESTIONS WELCOME
05/26/15
THANK YOU

AuthShield - Information Security Solution Provider For Banking Sector in India

Caricato da

Informazioni sul documento

Titolo originale

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

AuthShield - Information Security Solution Provider For Banking Sector in India

Caricato da

Copyright:

Formati disponibili

INFORMATION SECURITY

The threats from within are increasing on a

Private and Confdential - INNEFU LABS

Private and Confdential - INNEFU LABS

Private and Confdential - INNEFU LABS

Private and Confdential - INNEFU LABS

INFORMATION SECURITY CURRENT

Unifed Threat Management

People and Processes

Private and Confdential - INNEFU LABS

Single Sign on, authentication and Authorization

Technical Audit Vulnerability Assessment and

Private and Confdential - INNEFU LABS

Reduces time spent re-entering passwords for the

Private and Confdential - INNEFU LABS

User only has to remember a single password

Client Server Architecture

VPN FOR THIRD PARTY

Extended connections across multiple geographic

Private and Confdential - INNEFU LABS

11 Million Americans affected in 2010-2011

900,000 new victims each year

Cost to businesses more than $50 billion

Cost per incident to company $6,383

Hours spent per victim resolving the problem as shown by identity

Private and Confdential - INNEFU LABS

Fastest growing white collar crime

Irreparable loss to Companys Brand/Image

Virus, Trojans, worms inside the companys

Private and Confdential - INNEFU LABS

Local LAN / WiFi

Private and Confdential - INNEFU LABS

the user based on

he knows (user name / password)

Private and Confdential - INNEFU LABS

the physical identity of the user to the

Private and Confdential - INNEFU LABS

factor authentication system which uses

HARD TOKEN IDENTIFYING THE USER

PROTECT VPN AND CUSTOM MADE

The device displays a changing number that is

Private and Confdential - INNEFU LABS

Security device given to authorized users

SOFT TOKEN IDENTIFYING THE

Private and Confdential - INNEFU LABS

MOBILE TOKEN GENERATING TOKEN

2).Request Sent to BES

3). Request Forwarded to IAS

Private and Confdential - INNEFU LABS

Innefu BlackBerry AuthShield for Web Clients

PROTECT INTERNET BANKING

The user use the OTP to log into any web

Private and Confdential - INNEFU LABS

The OTP is sent either via SMS or the OTP is

Integration with the current business

as a stand alone authentication

Private and Confdential - INNEFU LABS

encryption on the lines of those

Prevent identity theft by up to 99%

Private and Confdential - INNEFU LABS

the log on security for critical

Access to logs only available to Admin team

Privileges assigned to every users