Introducing Kaspersky Security for Virtualization - Light Agent
22
INTRODUCING KASPERSKY SECURITY FOR VIRTUALIZATION | LIGHT AGENT Matvey Voytov Product Marketing
-
Upload
kaspersky-lab -
Category
Internet
-
view
1.013 -
download
1
description
Organisations globally are subject to greater levels of cyber-threat than ever before. It is vital that the It infrastructure, both physical and virtual, is fully and effectively secured. This presentation gives an overview of why and how!
Transcript of Introducing Kaspersky Security for Virtualization - Light Agent
INTRODUCING KASPERSKY SECURITY FOR VIRTUALIZATION | LIGHT AGENT
Matvey VoytovProduct Marketing
VIRTUALIZATION BASICS
WHAT IS VIRTUALIZATION
3
4
HYPERVISOR – CORE OF VIRTUALIZATION
Hypervisor – specialized software which allows to create and operate virtual machines (VM). It manages physical computing resources sharing them among VM.
Hardware
Hypervisor
VM VM VM VM VM
5
VIRTUAL MACHINE – BASIC ELEMENT OF VIRTUALIZATIONVirtual Machine (VM) – isolated software environment that takes all necessary computing resources like CPU, RAM, HDD from hypervisor, which allows you to run different operating systems and applications on single host.
Hardware
Hypervisor
Windows Server
2008
Windows Server
2012
Windows XP
Windows 7
Windows 8
6
TWO MOST COMMON TYPES OF VIRTUALIZATION
Server Virtualization Infrastructure
Desktop Virtualization Infrastructure (VDI)
Hardware
Hypervisor
Windows Server
2008
Windows Server
2012
Windows XP
Windows 7
Windows 8
VIRTUALIZATION BENEFITS FOR BUSINESS
VMVM
IT-COSTS REDUCTION
FLEXIBLE MANAGEMENT
RESOURCE OPTIMIZATION
HARDWARE INDEPENDENCE
7
► VIRTUAL ENVIRONMENTS ARE MORE SECURE THAN PHYSICAL ENVIRONMENTS?GUEST OS IS THE SAME TARGET FOR MALWARE AS USUAL OS. FROM MALWARE STANDPOINT THERE IS NO DIFFERENCE BETWEEN VM AND REAL PC.
FALSE
► CYBERCRIMINALS DON’T TARGET VIRTUAL MACHINES?FALS
EMORCUT (AKA CRISIS), THE FIRST TROJAN TARGETING VIRTUAL MACHINES, WAS IDENTIFIED IN 2012
► MALWARE CAN’T SURVIVE THE DECOMMISSIONING OF NON-PERSISTENT VIRTUAL MACHINES
?FALSE
RESIDENT MALWARE CAN
SECURITY IN VIRTUAL ENVIRONMENT
8
9
SERVER VIRTUALIZATION USAGE
Security in Private and Public Datacenters
Database applications
E-mail applications
CRM applications
ERP applications
Financial Management applications
Other
Hard to say
0% 10% 20% 30% 40% 50% 60% 70% 80% 90%
80%
75%
57%
50%
46%
3%
1%
67%
58%
45%
37%
34%
2%
4%
Business critical among themUse in virtual environment
Kaspersky Lab study | Base: 525 companies over Europe, 2012
VIRTUALIZATION SECURITY SOLUTIONS&LIGHT AGENT APPROACH
11
VIRTUAL SECURITY – THE OPTIONS
AGENTLESS
NO PROTECTION
LIGHT AGENT
TRADITIONAL
NOT AN OPTION!GREAT
PROTECTION /INEFFICIENT
IMPLEMENTATION
EASY DEPLOY/MANAGE
FOR VMWARE
FEATURE-RICH SECURITY
Each guest protects itself - All set of
antimalware bases locally at every VM, separate kernel to
scan every VM
•Excessive resource consumption•Update storms•Instant-On gaps•Lower VM densities
AGENT-BASED SECURITY
13
•Keeps VM density (consolidation ratio) high•No problems of Agent-based security, but..
•Less security•Only VMware
AGENTLESS SECURITY
14
LIGHT AGENT SECURITY
PROACTIVE DEFENSE INCLUDING AUTOMATIC EXPLOIT PREVENTION
LIGHT AGENT | FILE LEVEL PROTECTION
15
AWARD-WINNING ANTI-MALWARE ENGINE
REAL-TIME RESPONSE TO ZERO-DAY THREATS - KASPERSKY SECURITY NETWORK CLOUD-BASED INTELLIGENCE
DEEP-LEVEL SCANNING AT INDIVIDUAL MACHINE LEVEL, PROTECTING AGAINST THE MOST ADVANCED MALWARE
LIGHT AGENT | NETWORK LEVEL PROTECTION
16
FEATURES HOST-BASED INTRUSION PROVENSION SYSTEM (HIPS) AND FIREWALL
NETWORK ATTACK BLOCKER IDENTIFIES AND RESPONDS TO SUSPICIOUS TRAFFIC BEHAVIOUR
IDENTIFIES AND BLOCKS LINKS TO PHISHING SITES
WEB CONTROL
APPLICATION CONTROL
DEVICE CONTROL
LIGHT AGENT | CONTROLS
17
18
Internet
vSphere MicrosoftHyper-V
Linux-based hypervisor
VDI for internal use Servers with conf info Test bed
KSV KSV
Endpoint EndpointKaspersky
Security Center (KSC)
KSV | Agentless Kaspersky Endpoint Security
KSV | Light Agent
REAL LIFE CASE – WHAT SOLUTION TO CHOOSE
19
WHAT OUR SOLUTION IS COMPRISED OF
*NB!! Kaspersky Security for Virtualization is managed via Kaspersky Security Center
20
WHO CAN BENEFIT THE MOST FROM USING KASPERSKY SECURITY FOR VIRTUALIZATION?
Enterprises
Service Providers
Multi-hypervisor infrastructure owners
..as well as SMB
21
WHAT MAKES OUR SOLUTION DIFFERENT?
Low performance impact on virtual infrastructure, thanks to optimized architecture and dedicated virtual appliance for AV-scan tasks1.
Better protection quality, thanks to wide range of protection components and technologies, including Anti-Malware, Automatic Exploit Prevention, Application Control, HIPS, Firewall, Network Attack Blocker, and URL Scan.
Comprehensive solution supporting multiple hypervisor platforms (VMware, Citrix and Hyper-V), set of protection components with flexible configuration.
Efficient deployment and management of the entire IT infrastructure security with Kaspersky Security Center unified management solution.
1
2
3
41 – read more at http://www.kaspersky.com/about/news/compare/2014/Kaspersky-Lab-Tops-Competitors-in-Testing-of-Security-Software-in-Virtual-Environments
WANT TO KNOW MORE?Please visit kaspersky.com/business or business.kaspersky.com
Follow us @KasperskyLabB2B
#EnterpriseSec
