際際滷

際際滷Share a Scribd company logo
SSL for Server-to-Server Authentication
May 2013
Lim Chin Wan
Have you ever wanted to rob a bank?
DOING IT THE OLD SCHOOL WAY?
Hacking A Bank Is
Easy Because Were
All Humans!
I think you should meet
someone
This is Yuri.
In 2010, he and his anonymous friends hacked AT&T.
In 2011, they hacked Sony and bought a BMW.
This year, Yuri hit a major telco with the secret keys
provided by a disgruntled employee.
Then Yuri went on a nice 2 month long vacation in the
Caribbean Islands.
Sony and AT&T both
used State of the Art
encryption yet they
were still hacked!
So how does Yuri do it?
Usually, I just find one
disgruntled employee.
Just one.
SSL for server to-server authentication
Dont Believe Me?
Lets Play A Game
Can Anyone Tell
Me Who These
People Are?
Heidi Klum
Emma
Watson
Cameron Diaz
Halle Berry
Scarlett
Johansson
Megan Fox
Brad Pitt
RATED TOP 10
MOST DANGEROUS
CELEBRITIES IN 2012
BY
McAfee
Heidi Klum
12%
SSL for server to-server authentication
Because your users are
your weakest link
They are your customers
They are your
Employees...They are your vendors
SSL for server to-server authentication
SSL for server to-server authentication
SSL for server to-server authentication
SSL for server to-server authentication
Common Problems
 Weak password
 Lack of awareness
 Lack of skills
 Outdated policies
 Management problems
SSL for server to-server authentication
Whos
Responsible?
SSL for server to-server authentication
How can you as a bank
protect your customers and
yourself?
Implement Server-to-Server
Authentication using PKI
Your typical server room scene
How many servers do you have?
How many servers are talking to each
other?
Which server is talking to which server?
How do you take control of your
servers?
How many vendors do you have logged
onto your servers?
Assign each server a digital certificate
Digital Certificates Provides
Identity to each server
Expiry date
How much does
it cost?
SSL for server to-server authentication
Become my
own CA!
A Typical Full Scale Enterprise PKI
SSL for server to-server authentication
Aiyo! So
complicated!
What if?
Become my own CA!
Next generation PKI
PrimeKey PKI Appliance
46
Why a PKI Appliance?
 Make deployments easier and faster
 Minimize installation/integration efforts
 Lower the TCO with simplified management and maintenance
 Provide one source for Software/Hardware stack
A PKI Appliance Gives You...
 Overview of all your servers in your data centre
 Better security via Server-to-Server authentication
 Control over who can access your servers
 Easy management of your server access
SSL for server to-server authentication
Questions?
SecureMetric Technology Group
Lim Chin Wan
Mobile : +6 016 261 8925
Office : +603 8996 8225
chinwan@securemetric.com
Formula for Strong Digital Security
sales@securemetric.com www.securemetric.com

More Related Content

SSL for server to-server authentication