Securing Mobile Device Access

OracleDay PT 2013 - Securing Mobile Device Access by Artur Alves

Tecnologia

Securing Mobile
Device Access
Artur Alves
Solution Architect - IAM
EMEA Presales Specialists Group

1 Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

The following is intended to outline our general product direction. It is
intended for information purposes only, and may not be incorporated into
any contract. It is not a commitment to deliver any material, code, or
functionality, and should not be relied upon in making purchasing
decisions. The development, release, and timing of any features or
functionality described for Oracle’s products remains at the sole discretion
of Oracle.

2

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

AGENDA
 The New Experience
 More Devices Than We Can Predict
 New Requirements
 Case Studies
 A Mobile Identity Architecture

3

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

4

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

5

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

The Internet of things
6

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

The Internet of things
7

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

Point 2 Point
Expensive

Inflexible

Maintenance

Hard Coded

Status Quo

First Generation

Brittle

Custom

Internal Slow
Users Only

Not Scaleable

Fragmentation

Integration
Proprietary
Client Server Legacy Rigid VPN Based
8

8 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
Copyright © 2012, Oracle and/or its affiliates. All rights reserved.

CHANGING MOBILE APPLICATION DEMANDS
EMPLOYEE
OWNED DEVICES

9

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

DESIGNED FOR
WIRELESS & 3G

LIMITED POWER
& STORAGE

CHALLENGES for MOBILE APPLICATIONS

10

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

76
11

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

%

10

%

12

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

13

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

SuperValu Deploys 2,200 Pads with Oracle Identity
Reduce Cost & Increase Security
 Situation: Increasing productivity and

providing store managers with better
business analytics on the go.
 Challenge: Providing access on IPads to
2200 store managers across North America
 Solution: Deploy Oracle Access
Management 11g R2 to provide access
management for apps deployed on IPads.
 Result: Improved manager satisfaction,
Improved productivity by providing application
access anytime and anywhere.

14

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

VIRGIN MEDIA CASE STUDY VIDEO

15

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

Using social network account (OAuth)
Using enterprise SSO account

16

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

17

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

18

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

19

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

SECURING THE NEW DIGITAL EXPERIENCE
IDENTITY

DIRECTORY

ACCESS

PASSWORD RESET
PASSWORD VAULT
ACCESS REQUEST
PROVISIONING
ROLE MINING
ATTESTATION
SEPARATION OF DUTIES

WEB SSO
MOBILE,SOCIAL
EXTERNAL AUTH
SOA SECURITY
INTEGRATED SSO
TOKEN SERVICES
API GATEWAY

LDAP STORAGE
VIRTUAL DIRECTORY
META DIRECTORY

PLATFORM SECURITY SERVICES
20

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

48%
46%
35%

Cost Savings
More
Responsive
Fewer Audit
Deficiencies

Source: Aberdeen “Analyzing point solutions vs. platform” 2011

21

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

22 Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

FOR MORE INFORMATION

OracleIDM

OracleIDM

blogs.oracle.com/
OracleIDM

OracleIDM YouTube/Oracle

Visit us at: oracle.com/identity
23

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

Thank you :-)

24 Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

Mais conteúdo relacionado

Mais procurados

Good Migrations: APM Essentials For Cloud Success at AppD Global Tour London

What's next for AppD and Cisco? - AppD Global Tour

Today, the most important measure in application performance management is not whether the lights are green, it’s whether users think performance is good. End User Monitoring provides immediate performance visibility of mobile devices, browsers, scripts, images and crashes - complementing application performance metrics and ensuring you have complete understanding of performance from an end user perspective. In this session learn how EUM enriches your APM deployment and get your EUM questions answered. In this session, we’ll: -Reveal what’s possible in our latest version of EUM, and give a sneak preview of upcoming features -Outline the challenges that AppDynamics EUM solves and our differentiators -Demonstrate how browser, mobile real user monitoring, and synthetic monitoring can improve overall monitoring strategy For more information, visit: www.appdynamics.com

Mastering APM With End User Monitoring - AppD Summit Europe

Con8808 enabling business growth in the new economy final

Securing Corporate Applications and Data on Personal Devices

Metrics in IT and business are nothing new but with digital they are more important than ever. Metrics are your compass – they help you manage and set the right path for success, help you motivate people and act as a primary way of communicating value. The right metrics will also provide the early warning that you need to change direction, but the reality is that the best metrics are devised using an outside-in approach, putting your customers and business outcomes first. In this session, Sharon Cooper, CDO at BMJ, who in 2016 was voted into 3rd place in the Top CIO list, along with John Rakowski, Director of Technology Strategy at AppDynamics, will outline how to think about metrics today and structure your measurement strategy. We’ll explore: -The persona of today’s tech leader — what you should care about and the challenges you face -Recommendations for structuring your metric and reporting strategy -The monitoring and analytics technologies required to achieve measurement success For more information, visit: www.appdynamics.com

British Medical Journal: Refine Your Metrics For Digital Success - AppD Summi...

Tim Dubois Lucas Jellema What does a simple approach to extensibility look like? What does it mean to make adminsitration of cloud applications easy to use for a company? See a demo of the latest release of Oracle Applications Cloud extensibility for a view into extensiblity for the business system analyst. Participate in a conversation about what this means for businesses, both for IT organizations as well as for the line of business buyer.

Extensibility in the cloud – power to the business user

Getting value from IoT, Integration and Data Analytics

Intech corporation 2016 (1)

Rootkause .

Александр Белокрылов, Александр Мироненко. Java Embedded у вас дома

Volha Banadyseva

Dashboards are critical for visualising data and making data actionable. Learn how to leverage high quality data captured by AppDynamics to power engaging, useful dashboards that go well beyond what comes out of the box. Dashboards are great for troubleshooting problems, but not every user of AppDynamics is concerned with troubleshooting. Learn how to build dashboards that cater to different audiences and ensure that dashboards drive intended actions. If you’re using AppDynamics APM, come to this session and become an AppDynamics rockstar by covering: -Why build a dashboard in the first place? -How to capture and present the right data for each audience -A live, step-by-step demonstration on how to build great dashboards For more information, visit: www.appdynamics.com

Become an AppDynamics Dashboard Rockstar - AppD Summit Europe

Jeremy Ashley / Sten Vesterli Learn how the 10:90:90 rule helped drive the first generation of Oracle’s cloud user experience. Built with Application Development Framework, or ADF, the elegant new paradigm enforces a light-touch interaction with a new springboard, strict adherence to use of white space, only the essential information, thoughtful use of side tabs, and a clean navigation path. Come to get inspired by what you can build with ADF!

Chi erika webb2013

Janaki Kumar

Reconsidering applications: 10:90:90

Getting value from IoT, Integration and Data Analytics

The Android platform is notoriously unsecure. But did you know that many Android devices have hardware security built that you can use to secure data, user identities and much more? Millions of popular devices such as the Samsung S4 and S5 have this capability. Most developers and even CIOs are unaware of this option but if your organization is diving into mobile app development or you are an Android app developer this presentation will give you the basics of how to utilize hardware based security when developing your app.

Using Hardware Security with Android Apps

Abhijeet Rane

What sets Kaseya’s software platform apart from stand-alone solutions is the embedded integration approach. Kaseya’s VSA embeds industry-leading Security and Backup solutions from OEM partners, providing complete endpoint protection from malicious software and easy data protection and recovery, all managed from the central Kaseya web-based console. This session will provide you with a thorough understanding of the OEM architecture design and the integration of these key elements in Kaseya’s single-pane of glass.

Security and Backup I: OEM Architecture

Kaseya

Digital is the new over-used, over-hyped term, but today there really is no more 'business as usual'. Nigel Fenwick, Vice President and Principal CIO Analyst at Forrester Research, has been researching digital business and strategy for five years – he was one of the first analysts to identify the shift to digital. This don't-miss session offers insights from his latest research into the how to organise your team for success today, and how your firm can shape itself to succeed in the digital era. Nigel will cover: -Does the enterprise require a CDO? -The role of IT and the CIO in digital transformation -Skill requirements for your team For more information, visit: www.appdynamics.com

Forrester Research: How To Organise Your Business For Digital Success - AppD ...

Getting value from IoT, Integration and Data Analytics

COMPANY PROFILE

SACHIN KHOPKAR

Oracle’s Strategy for Cloud User Experiences

Accelerate Your IoT and Robotics Development Using Web Technology and Apache ...

Intel® Software

Imaginea Overview

Jimit Shah

SAP NetWeaver Neo*: Community-Driven Development

Matthias Steiner

Mais procurados (20)

Good Migrations: APM Essentials For Cloud Success at AppD Global Tour London

What's next for AppD and Cisco? - AppD Global Tour

Mastering APM With End User Monitoring - AppD Summit Europe

Con8808 enabling business growth in the new economy final

Securing Corporate Applications and Data on Personal Devices

British Medical Journal: Refine Your Metrics For Digital Success - AppD Summi...

Extensibility in the cloud – power to the business user

Intech corporation 2016 (1)

Александр Белокрылов, Александр Мироненко. Java Embedded у вас дома

Become an AppDynamics Dashboard Rockstar - AppD Summit Europe

Chi erika webb2013

Reconsidering applications: 10:90:90

Using Hardware Security with Android Apps

Security and Backup I: OEM Architecture

Forrester Research: How To Organise Your Business For Digital Success - AppD ...

COMPANY PROFILE

Oracle’s Strategy for Cloud User Experiences

Accelerate Your IoT and Robotics Development Using Web Technology and Apache ...

Imaginea Overview

SAP NetWeaver Neo*: Community-Driven Development

Semelhante a Securing Mobile Device Access

Apouc 2014-business-analytics-and-big-data

OUGTH Oracle User Group in Thailand

B4 the identity of things-securing the internet of everything

Dr. Wilfred Lin (Ph.D.)

Identityofthings amitjasuj av10

Oracle 360

Ana Galindo

Identityofthings amitjasuj av10

(This slidedeck was presented at the AUSOUG Perth 2013 conference) Most Oracle Forms applications contain hundreds of man-years of investment. So what do you do with that investment? Squeeze an extra few years out of your investment by getting on the latest version? Modernize your technologies? Or dump it and migrate to Java, Oracle Application Development Framework (Oracle ADF), Oracle Application Express, or even .NET? Come to this session to discuss some of the options; costs; risks; and fear, uncertainty, and doubt about Oracle Forms. Thanks to Grant Ronald from Oracle Corporation for the original slidedeck.

Integrate Oracle Identity Management and Advanced Controls for maximum effici...

Oracle

ODA Target Markets – Partnering to Win

MarketingArrowECS_CZ

Future of Oracle Forms AUSOUG 2013

Chris Muir

Percona Live - Dublin 02 security + tuning

Mark Swarbrick

MySQL Security Best Practises

Mark Swarbrick

Con8836 leveraging the cloud to simplify your identity management implement...

Oracle Database 12c includes more new security capabilities than any other release in Oracle history! In this presentation you will learn about these capabilities, as well as innovative new solutions to protect Oracle Database instances and non-Oracle databases. Hear how Oracle is responding to customer requirements to stay ahead of the evolving threat and regulatory landscape with new preventive controls that include data redaction and a new unified platform that provides database traffic monitoring and enterprise wide auditing.

Security Inside Out: Latest Innovations in Oracle Database 12c

Troy Kitch

Developing Mobile Applications for iOS and Android the Oracle way

Toronto-Oracle-Users-Group

Applications moved into a managed cloud environment need Identity and Access Management services to ensure user accounts, passwords and roles are all managed properly for the purposes of Security and Audit. In this session, we’ll discuss the key considerations for a Hosted Private Cloud deployment of Oracle applications integrated with Oracle Identity Management Suite to provide self-service account provisioning and federated Single Sign-on (SSO) for an organization’s internal and external users. You will also hear from a customer on how their key business requirements were addressed with Managed Identity Services from Oracle running at Oracle.

OOW13:Leveraging the Cloud to Simplify Your Identity Management Implementatio...

GregOracle

Customer Experience the new differentiator

Alfonso Gadea

With Oracle WebLogic Server now available "as a service" both on premise working in conjunction with Oracle Enterprise Manager Cloud Pack and also in several Public Clouds beyond Oracle Public Cloud, customers have a clear set of architectural alternatives when looking at building out an enterprise cloud strategy for WebLogic Server. Cloud with WebLogic Server is not just core server but the layered and related products needed in a cloud infrastructure -Web Tier, WebLogic Server, Database and Fusion Middleware - as well as the full lifecycle capabilities needed: development, administration and operations. Navigate a pragmatic cloud approach for your organization and WebLogic Server.

Approaches for WebLogic Server in the Cloud (OpenWorld, September 2014)

jeckels

A6 harnessing the power of big data and business analytics to transform bus...

Dr. Wilfred Lin (Ph.D.)

Ppt dbsec-oow2013-avdf

Melody Liu

This talk was first given at Code Mash 2019. It covers some of the aspects of how data management changes in the microservices world but also how data management has changed over time and where we have reinvented the wheel with failed attempts to change how we store and organize data. Parts of this presentation is about to remind us that certain ways of doing things we had before and we are about to repeat the same mistakes. Parts of this presentation is about common sense applied when dealing with data. The data tier cannot just be ignored or neglected when building new systems, data is the only thing that will still be there long when the applications or system on top has evolved. It's therefore crucial to make smart choices, based on actual requirements and business asks how to store and manage our data, rather than basing the decision on hyped technologies ranking high on Hackernews the last week. Parts of the presentation is about capabilities that we already have since a long time in databases and that you might not know about. These are pointed out as potentially complimentary to your application architectures. It is again up to you to apply _your_ business requirements and common sense whether these capabilities solve your problem or not. Note that this presentation is intended as visual aid for a talk. Parts of this presentation may be meaningless or wrongly intended without having the context that was given by me.

Data Management in a Microservices World

gvenzl

Oracle Mobile Cloud Service

Juan Carlos Ruiz Rico

Semelhante a Securing Mobile Device Access (20)

Apouc 2014-business-analytics-and-big-data

B4 the identity of things-securing the internet of everything

Identityofthings amitjasuj av10

Oracle 360

Identityofthings amitjasuj av10

Integrate Oracle Identity Management and Advanced Controls for maximum effici...

ODA Target Markets – Partnering to Win

Future of Oracle Forms AUSOUG 2013

Percona Live - Dublin 02 security + tuning

MySQL Security Best Practises

Con8836 leveraging the cloud to simplify your identity management implement...

Security Inside Out: Latest Innovations in Oracle Database 12c

Developing Mobile Applications for iOS and Android the Oracle way

OOW13:Leveraging the Cloud to Simplify Your Identity Management Implementatio...

Customer Experience the new differentiator

Approaches for WebLogic Server in the Cloud (OpenWorld, September 2014)

A6 harnessing the power of big data and business analytics to transform bus...

Ppt dbsec-oow2013-avdf

Data Management in a Microservices World

Oracle Mobile Cloud Service

Mais de Artur Alves

Securing your Applications for the Cloud Age

Strategies for Reducing Access Controls Risk

GlassFish OSGi Server

Java keynote preso

A.Alves Sun GlassFish Portfolio preso - JavaPT '09

MySQL June/2009 FDTI - Portuguese Version