Make Security a Competitive Advantage

Make Security a Competitive Advantage
Mordecai (Mo) Rosen
SECURITY
SECURITY
General Manager, Security
CA Technologies
General Manager
CA Veracode
Sam King

2 COPYRIGHT © 2017 CA. ALL RIGHTS RESERVED#CAWORLD #NOBARRIERS
Eliminate Barriers
Between Ideas and Outcomes
CREATE AN AGILE
BUSINESS
BUILD BETTER
APPS FASTER
MAKE SECURITY A
COMPETITIVE ADVANTAGE
MAXIMIZE APPLICATION
PERFORMANCE

HOME AUTOMATION
PHYSICAL SECURITY
EHEALTH DEVICES
WEARABLES
SMART METERS
SHIPPING LOGISTICS
PROPERTY MANAGEMENT
ECOLOGY
FACTORY AUTOMATION
SMART PHONES
TABLETS
CAMERAS
PHONES
TELEVISIONS
AUTOMOBILES
THERMOSTATS
WWW
CHAT & IM
API
SERVICES
CLOUD
SERVICES
First a Brief History of
THE EXPANDING
DIGITAL
EXPERIENCE

THE DIGITAL
EXPERIENCE
Is Between Users
and Applications
HOME AUTOMATION
PHYSICAL SECURITY
EHEALTH DEVICES
WEARABLES
SMART METERS
SHIPPING LOGISTICS
PROPERTY MANAGEMENT
ECOLOGY
FACTORY AUTOMATION
SMART PHONES
TABLETS
CAMERAS
PHONES
TELEVISIONS
AUTOMOBILES
THERMOSTATS
WWW
CHAT & IM
API
SERVICES
CLOUD
SERVICES

MAKES EVERY COMPANY A SOFTWARE COMPANY
APPLICATION
EXPLOSION
CONSUMERIZED
IT
CONNECTED
ENTERPRISES
DIGITAL
MARKETPLACES
DIGITAL
WORKPLACES
CONNECTED
IOT
The Application Economy

The Application Economy
REQUIRES NEW THINKING ON SECURITY
FIREWALL
IDS/IPS
WEB PROXY
ANTI-VIRUS
ANTI-MALWARE
100%
INEFFECTIVE
USERS & APPS
UNDER ATTACK
SHADOW IT
30%
Of all attacks will be in
shadow IT resources
APP DEFECTS
90%
Of breaches caused
by application defects
3RD PARTY RISK
70% Of attacks targeted a
secondary source
IDENTITY FRAUD
80% Of breaches used lost
stolen & weak credentials
CREDIT FRAUD
42%
Of all data stolen is
credit card data
FireEye Study of 6 Months of Penetration Testing

A QUESTION
OF TRUST
USERS
INTERACTIONS
APPLICATIONS
Security Becomes

CA Security Strategy To
SECURING THE APPLICATION ECONOMY
TRUSTED
USERS &
APPLICATIONS
PREVENTATIVE
DETECTION &
RESPONSIVE
INSIGHT
ANALYTICS &
INTELLIGENCE
FRICTIONLESS
SECURITY &
EXPERIENCE
CORE PRINCIPLES

IDENTITY &
ACCESS
APPLICATION
SECURITY
API
SECRUITY
PAYMENT
SECURITY
PRODUCT PORTFOLIO
CA Security Strategy To
SECURING THE APPLICATION ECONOMY

LINES OF CODE
SCANNED6 TRILLION
1400 CUSTOMERS 400K
APPLICATION
SECURITY
ADVISORY
HOURS
35.5M SECURITY FLAWS FIXED
4X GARTNER
MQ LEADER
24 LANGUAGES
77 FRAMEWORKS
APPLICATION
SECURITY
CA VERACODE

Ensuring
GREAT SOFTWARE IS SECURE SOFTWARE
EMPOWER
DEVELOPERS TO
SECURE CODE
INTEGRATED INTO
CONTINUOUS
DELIVERY
EARLY DETECT
TO REDUCE COST
AUTOMATED TO
REDUCE MTTR

CODECOMMIT BUILD
TEST
RELEASE OPERATE
SECURITY INTO CONTINUOUS DELIVERY
TEST TEST
DevSecOps
SECURE SOFTWARE
DEVELOPENT
SECURITY
ASSURANCE
OPERATIONAL
APPLICATION SECURITY
Merging

CODECOMMIT BUILD
TEST
RELEASE OPERATE
SECURE SOFTWARE
DEVELOPENT
SECURITY
ASSURANCE
OPERATIONAL
APPLICATION SECURITY
DevSecOps
TEST TEST
CA Veracode Greenlight CA Veracode Static Analysis
CA Veracode Web Application Scanning
CA Veracode Runtime Protection
CA Veracode Software Composition Analysis
CA Veracode Integrations, APIs
CA Veracode eLearning

Securing Applications With
NEXT GENERATION IDENTITY MANAGEMENT
80%of all data breaches exploit
lost, stolen & weak credentials
HYBRID
CLOUD
DEVELOPER
APIs
BEHAVIOR
ANALYTICS

API
ENABLED
HIGH SCALE
APPLIANCE
HYBRID
CLOUD
SECURE
CONTINUOUS
DELIVERY
PRIVILEGED
GOVERNANCE
Central Authentication
Credential Vault
Policy Enforcement
Role - Based Access
Federated Identity Session Recording
CA Privileged Access Manager
PROTECTING
PRIVILEGED
IDENTITY

ENABLING
APP TO APP
TRUST
User & App
Authentication API
Mobile
Authentication API
Secure Server
Communications
Context Based
Risk Analysis
CA Rapid App Security
Risk Based Analytics

17 COPYRIGHT © 2017 CA. ALL RIGHTS RESERVED#CAWORLD #NOBARRIERS COPYRIGHT © 2017 CA. ALL RIGHTS RESERVED#CAWORLD #NOBARRIERS
RISK
ANALYTICS
WORKS
EMPIRICALLY

Digital
Payments

Fraud
Directory
Identity

Management
Privileged

Access

Management
Single

Sign-‐on
Identity

Governance
Risk
Based

Authentication
Orchestrating

Identity
&

Access
Employees &
Administrators
Customers &
Partners
Internet of Things
Developers
Cloud

Services
On

Premise

Apps
Mobile
Web
API
CA Security & Identity Management Portfolio

CONTROLLING PRIVILEGED ACCESS
IN A WORLD ON TIME

IN A WORLD ON TIME

APPLICATION
SECURITY
TESTING
FRICTIONLESS

ARTHUR
WONG
Interview With
SVP & GM
DXC Security

BREAKING
BARRIERS
AWARD
Mo Ahddoud
First UK critical infrastructure
company running 100% in
the cloud
Todd Oxford
Enabled disaster recovery
access to comply with FEMA
first & second line response
regulations
Mark Merkow
Integrating app security
testing into SDLC for 500+
developer organization

BREAKING
BARRIERS
AWARD
Mo Ahddoud
the cloud
Todd Oxford
regulations
Mark Merkow

CA World ’17
See the latest
innovation in
the demo area
Immerse in all
of the customer
case studies
on stage
Meet with our
product teams
at the executive
center

Thank you.
Stay connected at communities.ca.com
& community.veracode.com

Security and DevSecOps
For more information on Security,
please visit: http://cainc.to/CAW17-Security
For more information on DevSecOps,
please visit: http://cainc.to/CAW17-DevSecOps
For more information on Veracode,
please visit: http://community.veracode.com

Make Security a Competitive Advantage

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Semelhante a Make Security a Competitive Advantage

Semelhante a Make Security a Competitive Advantage (20)

Mais de CA Technologies

Mais de CA Technologies (11)

Último

Último (20)

Make Security a Competitive Advantage