Unisys Corporation New · NYSE:UIS
Unisys Corporation New — Unisys — Technical Presentation (2019)
37 slides from Unisys Corporation New's technical presentation, 2019
Slide 1: ClearPath Forward and Security
ClearPath Forward and Security Today’s Security Challenges Ronald Huijgens
Slide 2: Agenda
Agenda • Introduction • Security models today • Digital transformation changes everything • Zero Trust Model • Open Systems • ClearPath intrinsic security • Conclusion © 2019 Unisys Corporation. All rights reserved. | 2
Slide 3: Introduction
Introduction At Unisys today: ⁃ Security consultancy and advisory ⁃ Secure systems analysis and design ⁃ Implementations • Ronald Huijgens - Consulting Sr. Manager Specialist in • Ronald.Huijgens@unisys.com ⁃ Biometrics • Phone: +31 610 001 543 ⁃ Unisys Stealth(identity) and Stealth(core) • www.link
Slide 4: Professional Journey
Professional Journey AT&T CMG/LogicaCMG Unisys Corporation • 1987 – 1992 • 1992 – 2005 • 2005 – now • Roles: Hardware & software • Roles: SW engineer, lead architect, • Roles: Biometric SME, security architect, developer biometric SME, security architect, lead architect, security consultant/trusted
Slide 5: Security Model - Physical Perimeter
Security Model - Physical Perimeter © 2019 Unisys Corporation. All rights reserved. | 5
Slide 6: Logical perimeter
Logical perimeter Source: https://techcommunity.microsoft.com © 2019 Unisys Corporation. All rights reserved. | 6
Slide 7: Analysts Quote
Analysts Quote “ The idea of a secure network perimeter is dead. As organizations embrace digital transformation they become substantially more vulnerable to cyberattacks. Zero Trust affords digital businesses operational agility while containing risk. ” Forrester Opportunity Snapshot: A Custom Stud
Slide 8: Digital transformation forcing a new approach to security
Digital transformation forcing a new approach to security Digital transformation is Cyber Attackers are exploiting There is a path forward... everywhere... new vulnerabilities... 100% 81% 84% of businesses have a digital of data breaches are caused by practice or want to adopt new transformation str
Slide 9: Traditional security measures can't meet digital transformation security needs
Traditional security measures can’t meet digital transformation security needs Lack Large and Ever-evolving Sluggish Wider breach of dynamic threat sophisticated detection and impact and visibility landscape threats response downtime Where to start? How to protect what How to stay ahead of How to st
Slide 10: Unisys is Zero Trust: Implemented
Unisys is Zero Trust: Implemented Prioritize Protect Predict Isolate Remediate Prioritize investments Protect the most Strengthen your risk Quickly isolate critical Minimize the based on business vulnerable people, posture with AI- data and systems from operational impact of impact devices and netwo
Slide 11: Unisys Security Solutions
Unisys Security Solutions • TrustCheck™ Cyber Risk Management ⁃ Bridge the gap between the CISO and the board • Stealth™ Products and Services ⁃ Zero trust security built on identity based, encrypted micro segmentation, cloaking • Incident Response Ecosystem ⁃ Accurate and faster response for minima
Slide 12: Goal of information security
Goal of information security The basics
Slide 13: Information security – Core Pillars
Information security – Core Pillars • Confidentiality ⁃ Information may only be created, accessed, updated or removed by authorized actors • Integrity ⁃ Information must be correct, complete, accurate and protected against unintended and unauthorized modification • Availability ⁃ The ability of an a
Slide 14: Security Principles
Security Principles A security principle is a fundamental and seldom changing qualitative statement of intent that guides and directs Focus on Business secure development Continuity Security By Design. Security in-depth. and design Failing Securely Regulatory Compliance Accountability Policy Driven
Slide 15: What is the Zero Trust security model?
What is the Zero Trust security model? “A Zero Trust (ZT) security model — a more identity- and data- centric approach based on network segmentation, data obfuscation, security analytics, and automation that never assumes trust. ZT allows security and privacy protections to travel with the data itse
Slide 16: Utility vs. Security
Utility vs. Security Finding the right balance is key ! Security • Strict security may reduce ease of use • Easy access may increase risk of unauthorized access Utility Vs. • Segregation of duties requires more coordination • Enforcing least privilege may restrict people’s freedom • Zero-trust helps
Slide 17: Open systems
Open systems An analysis
Slide 18: Architecture - Usage quadrant: Perception
Architecture - Usage quadrant: Perception Generic Windows AIX Linux HP UX Intended Use OpenVMS Solaris UNIX Unisys OS2200 Unisys MCP IBM z Series IBM iSeries Special Proprietary Architecture Open © 2019 Unisys Corporation. All rights reserved. | 18
Slide 19: What defines an 'open system'?
What defines an ‘open system’? Ensures interoperability Provides portability Based on ‘open software standards’ (e.g. ISO, IEC, ITU-T, IETF) Open standards ⁃ Publicly available ⁃ Can be Implemented on royalty-free basis ⁃ “reasonable and non-discriminatory” patent licensing requirements (com
Slide 20: ClearPath is an OPEN System
ClearPath is an OPEN System ClearPath has all the popular industry standard integration technologies Heterogeneous external ClearPath environments: • Applications • Applications ClearPath • Mobile applications • Databases Middleware • Databases Portfolio • Systems • Transactions .NET XML J2EE, JCA,
Slide 21: Reality Architecture – Usage quadrant
Reality Architecture – Usage quadrant: Generic Windows AIX Unisys OS2200 Linux HP UX Unisys MCP IBM z Series Solaris Intended Use IBM i Series OpenVMS UNIX Special Proprietary Architecture Open © 2019 Unisys Corporation. All rights reserved. | 21
Slide 22: ClearPath and security
ClearPath and security Security features explained
Slide 23: ClearPath Intrinsic Security Highlights
ClearPath Intrinsic Security Highlights Security Principles Security Controls • Least Privilege • Discretionary Access Control (DAC) • Security by design • Mandatory Access Control (MAC) • Accountability • Strict segregation of duties • Policy driven security • Secure memory management • Failing sec
Slide 24: ClearPath was resistant to these vulnerabilities
ClearPath was resistant to these vulnerabilities • Meltdown: allow rogue process to read all memory ⁃ ClearPath was not vulnerable because: • Memory management: no direct access to memory • External programs have no access to system resources, and thus cannot read all data (MAC) • Strict separation
Slide 25: Operating System vulnerabilities comparison
Operating System Number of Date of Last Compromised Vulnerabilities Vulnerability User Data Unisys ClearPath OS 0 - No 2200 Unisys ClearPath MCP 3 02/26/2018 No IBM System z (zSeries) 24 02/13/2015 Yes IBM System i (iSeries) 26 06/14/2019 Yes OpenVMS 38 05/01/2018 Yes HP-UX 368 07/22/2019 Yes AIX 39
Slide 26: Conclusion
Conclusion • Digital transformation of businesses and the wide adoption of Cloud computing requires better protection against cyber threats • Infrastructures with generic, commodity servers can be protected by implementing Zero Trust and state of art tools for monitoring, detection, isolation and re
Slide 27: Thank You
Thank You Email: ronald.huijgens@unisys.com
Slide 28: Security Models
Security Models Enforcing Confidentiality and Integrity
Slide 29: Bell-LaPadula Confidentiality model (1973)
Bell-LaPadula Confidentiality model (1973) Layer of higher secrecy • Multilevel security policy Reading Reading secrets secrets • Developed for the military • Implements MAC and DAC Read/ Read/ Read Rules: Write Write • Simple: No read-up • Star (*): No write down Divulging secrets • Strong Star (*)
Slide 30: Biba Integrity model (1975)
Biba Integrity model (1975) • Ruleset to ensure data integrity. • Data and subjects are grouped into ordered levels of integrity Layer of Contamination higher integrity • Prevents corruption/contamination of data Rules: Read Write Invoke • Simple: read-up • Integrity Star (*): write down Layer of Ge
Slide 31: Clarke-Wilson model (1987)
Clarke-Wilson model (1987) • Three-part relationship of subject/program/object • subjects do not have direct access to objects • Objects can only be accessed through programs Based on: • Well-formed transactions to change the state • Integrity of transactions protected by integrity policy • Separati
Slide 32: TrustCheck Cyber Risk Management
TrustCheck™ Cyber Risk Management Bridge the gap between the CISO and the board • Assess cybersecurity and cyber risk posture in economic terms. • Understand where the risk transfer zone is for all cyber perils. • Easily communicate risk reduction initiatives to the board. • Prioritize risk mitigati
Slide 33: Stealth Products and Services
Stealth™ Products and Services Zero trust security built on identity based, encrypted microsegmentation Reduce attack surface Know your environment Extend datacenters to Cloud • Identity-based microsegmentation, encryption and cloaking. • Visibility into unsafe ecosystem Stealth(core) Stealth(aware)
Slide 34: Incident Response Ecosystem
Incident Response Ecosystem Accurate and faster response for minimal business impact Delivers a maturity and capability score based on a customized evaluation existing security program. Comparison against industry best practices to identify gaps and provide recommendations to mitigate issues. On-sit
Slide 35: Managed Security Services
Managed Security Services Proactive cyber defense to detect and respond to advanced cyberattacks • Powerful arsenal of high-performance tools for correlating and simplifying security, compliance and operations. Leverages best-in-class LogRhythm ® SIEM technology. • Detect and prevent malware that si
Slide 36: Security Consulting Services
Security Consulting Services Trusted partners for managing your global security risk • Industry-specific expertise. • Secure data today while moving your organization to a more efficient security program. • Executive advisory services on security, compliance, strategic planning, and mobile device se
Slide 37: Significant Industry Recognition & Awards for Unisys Security Transformation Capabilities
Significant Industry Recognition & Awards for Unisys Security Transformation Capabilities NelsonHall Philadelphia Business Minnesota High Tech Journal Association (MHTA) Leader‘ - NEAT vendor evaluation for Managed 2018 Healthcare Innovator of 2018 Tekne Award for Security Services, 2018, 2017 the Y