IBM Security SaaS IaaS and PaaS
4 likes1,148 views
The document provides an overview of IBM's cloud security portfolio, detailing various services and solutions available for SaaS, IaaS, and PaaS environments. It highlights key offerings such as cloud identity services, managed security services, and application security tools designed to protect data and manage access in cloud applications. Additionally, it outlines customer needs related to cloud adoption and the associated security solutions provided by IBM to accommodate these needs.
IBM Security SaaS IaaS and PaaS
- 1. IBM Cloud Security SAAS, IAAS AND PAAS OVERVIEW June 17, 2016
- 2. 2 IBM Security IBM Cloud Security Portfolio Capabilities Delivering capabilities and adding differentiating security value Manage Access Protect Data Gain Visibility Securely consume (SaaS) Cloud Security Enforcer Cloud Identity Service IBM MaaS360 Mobile Device Management Trusteer Mobile Risk Engine Cloud Security Enforcer QRadar on Cloud X-Force Exchange Securely create and integrate (IaaS, PaaS and hybrid) Cloud Sign On Service (SSO for Bluemix) Cloud Access Manager Cloud Privileged Identity Manager Application Security on Cloud Key management service & Hardware security module (HSM) Data Encryption Services – Database & Files Vulnerability Advisor for Containers Trusted computing platform Network Security Groups, Firewalls and IPS Cloud Security Intelligence Cloud Data Activity Monitoring Vulnerability Advisor for Containers Access Trail Platform user authentication Role based access & granular permissions Privileged user management Block storage encryption Isolating customer workloads and containers Network security and protection Secure Engineering and Operations Platform security monitoring Incident management processes Vulnerability scanning and management
- 3. 3 IBM Security “I’m composing Cloud apps and I need: • Middleware/ APIs • Databases • Mobile • AppSec • IAM …” “I’m moving on-premise workloads to the cloud and need flexible: • Hardware • Storage • Network …” Customer need “I want to leverage your security product(s), but please deliver the capability via the cloud. No ‘on-premise’ solution for me to manage.” IBM offering(s) A large/growing number of IBM Security solutions, including • IBM Cloud Security Enforcer • IBM X-Force Exchange Commercial API • IBM Security Intelligence on Cloud • Intelligent Log Management on Cloud • IBM MaaS360 • Trusteer Web Fraud Protection family • IBM Cloud Identity Services • AppScan Mobile Analyzer on IBM Cloud Marketplace “I want to discover, manage and secure my employees’ use of cloud applications and services.” IBM Cloud Security Enforcer Secure employee cloud usage SaaS IaaS PaaS IBM Cloud Security addresses a wide range of use cases
- 4. 4 IBM Security Current IBM Security Cloud Offerings – September 2016 Delivering capabilities and adding differentiating security value Managed Security Services Cloud Identity Service Security Intelligence and Operations Consulting Services Cloud Security Managed Services Intelligent Threat Protection Cloud Executive Protection Service Hosted security event and log management Managed SIEM Advanced Cyber Threat Intelligence Advanced Persistent Threat (APT) Survival Kit Infrastructure as a Service (IaaS) BigFix (SoftLayer/AWS)** Security Identity Manager VA*** Security Access Manager V9*** Security Directory Suite V8*** Guardium Data Activity Monitor VA*** Guardium Vulnerability Assessment VA*** Cloud Data Encryption Services QRadar SIEM V7.2.3+*** Platform as a Service (PaaS)Software as a service (SaaS) Cloud Sign On Service (SSO for Bluemix) Cloud Mobile App Analyzer Service Cloud Web App Analyzer Service Guardium is a feature of Bluemix/SQLDB and Bluemix/dashDB IBM Key Protect ***Supports SoftLayer (bare metal) & Amazon Web Services (AWS) EC2*Managed services IBM Cloud Security Enforcer IBM MaaS360 Trusteer Web Fraud Protection suite Application Security on Cloud IBM Cloud Identity Service* Intelligent Log Management on Cloud* QRadar on Cloud X-Force Exchange Commercial API ** BigFix helps secure on- premise workloads moved to the cloud on SoftLayer and AWS.
- 5. 5 IBM Security Notices and Disclaimers 5 Copyright © 2016 by International Business Machines Corporation (IBM). No part of this document may be reproduced or transmitted in any form without written permission from IBM. U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM. Information in these presentations (including information relating to products that have not yet been announced by IBM) has been reviewed for accuracy as of the date of initial publication and could include unintentional technical or typographical errors. IBM shall have no responsibility to update this information. THIS DOCUMENT IS DISTRIBUTED "AS IS" WITHOUT ANY WARRANTY, EITHER EXPRESS OR IMPLIED. IN NO EVENT SHALL IBM BE LIABLE FOR ANY DAMAGE ARISING FROM THE USE OF THIS INFORMATION, INCLUDING BUT NOT LIMITED TO, LOSS OF DATA, BUSINESS INTERRUPTION, LOSS OF PROFIT OR LOSS OF OPPORTUNITY. IBM products and services are warranted according to the terms and conditions of the agreements under which they are provided. Any statements regarding IBM's future direction, intent or product plans are subject to change or withdrawal without notice. Performance data contained herein was generally obtained in a controlled, isolated environments. Customer examples are presented as illustrations of how those customers have used IBM products and the results they may have achieved. Actual performance, cost, savings or other results in other operating environments may vary. References in this document to IBM products, programs, or services does not imply that IBM intends to make such products, programs or services available in all countries in which IBM operates or does business. Workshops, sessions and associated materials may have been prepared by independent session speakers, and do not necessarily reflect the views of IBM. All materials and discussions are provided for informational purposes only, and are neither intended to, nor shall constitute legal or other guidance or advice to any individual participant or their specific situation. It is the customer’s responsibility to insure its own compliance with legal requirements and to obtain advice of competent legal counsel as to the identification and interpretation of any relevant laws and regulatory requirements that may affect the customer’s business and any actions the customer may need to take to comply with such laws. IBM does not provide legal advice or represent or warrant that its services or products will ensure that the customer is in compliance with any law
- 6. 6 IBM Security Notices and Disclaimers Con’t. 6 Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products in connection with this publication and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products. IBM does not warrant the quality of any third-party products, or the ability of any such third-party products to interoperate with IBM’s products. IBM EXPRESSLY DISCLAIMS ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. The provision of the information contained h erein is not intended to, and does not, grant any right or license under any IBM patents, copyrights, trademarks or other intellectual property right. IBM, the IBM logo, ibm.com, Aspera®, Bluemix, Blueworks Live, CICS, Clearcase, Cognos®, DOORS®, Emptoris®, Enterprise Document Management System™, FASP®, FileNet®, Global Business Services ®, Global Technology Services ®, IBM ExperienceOne™, IBM SmartCloud®, IBM Social Business®, Information on Demand, ILOG, Maximo®, MQIntegrator®, MQSeries®, Netcool®, OMEGAMON, OpenPower, PureAnalytics™, PureApplication®, pureCluster™, PureCoverage®, PureData®, PureExperience®, PureFlex®, pureQuery®, pureScale®, PureSystems®, QRadar®, Rational®, Rhapsody®, Smarter Commerce®, SoDA, SPSS, Sterling Commerce®, StoredIQ, Tealeaf®, Tivoli®, Trusteer®, Unica®, urban{code}®, Watson, WebSphere®, Worklight®, X-Force® and System z® Z/OS, are trademarks of International Business Machines Corporation, registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at: www.ibm.com/legal/copytrade.shtml.
- 7. © Copyright IBM Corporation 2016. All rights reserved. The information contained in these materials is provided for informational purposes only, and is provided AS IS without warranty of any kind, express or implied. Any statement of direction represents IBM's current intent, is subject to change or withdrawal, and represent only goals and objectives. IBM, the IBM logo, and other IBM products and services are trademarks of the International Business Machines Corporation, in the United States, other countries or both. Other company, product, or service names may be trademarks or service marks of others. Statement of Good Security Practices: IT system security involves protecting systems and information through prevention, detection and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, misappropriated or misused or can result in damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single product, service or security measure can be completely effective in preventing improper use or access. IBM systems, products and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products or services to be most effective. IBM does not warrant that any systems, products or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party. ibm.com/security securityintelligence.com xforce.ibmcloud.com @ibmsecurity youtube/user/ibmsecuritysolutions FOLLOW US ON: THANK YOU