Enterprise Privacy Architectures Leveraging Encryption to Keep Data Private Karim Toubba VP of Product Management Ingrian Networks

Ingrian Networks, Inc. 2 Security vs. Data Privacy Security—A Journey not a Destination: o According to Gartner, 75% of external-based attacks are tunneling through applications—and so go undetected by firewalls. o According to Symantec, in 2003, 70 percent of all security vulnerabilities were simple for attackers to manage, and the number’s growing. o Most estimates cite that now approximately 50% of security breaches are perpetrated by internal staff—a number consistently rising each year. o Plus, physical storage systems and data in the databases and applications themselves can be stolen. Need to have a solution in place for securing critical data inside the enterprise. That solution needs to work with existing enterprise privacy architectures.

Ingrian Networks, Inc. 3 Encryption—A Vital Component of Enterprise Privacy Architectures One of the best ways to achieve data privacy in an enterprise is by selectively encrypting the sensitive data that needs to stay private. To be effective, an encryption architecture needs to be… o Centralized. Keys, auditing, and logging can’t be managed disparately. o Secure. Cryptographic processing needs to be on dedicated, tamper resistant device. o Redundant. Need to ensure availability and scalability—if security processing fails, business is at risk. o Open. Leverage standards to integrate with existing privacy architectures. Storage Systems NAS/SAN Application Servers Databases Web Servers

Ingrian Networks, Inc. 4 Data Privacy from Ingrian Ingrian delivers data privacy solutions with capabilities for… o Encrypting critical data in Web, application, and database servers. o Ensuring all access to data is securely managed, logged, and controlled. o Administering keys and policies in a secure, centralized fashion. o Ensuring security processing is highly scalable, reliable, and redundant. o Using standard interfaces and protocols to do integration. Ingrian DataSecure Platform Storage Systems NAS/SAN Application Servers Databases Web Servers

Ingrian Networks, Inc. 5 Ingrian DataSecure Platforms Authentication & Authorization Secure Key Management Specialized Cryptographic Engine Backup and Recovery Logging, Auditing, Mgmt Platform Security Database Application Server Application Server Commercial Applications Commercial Applications Web Server Database Application Server Application Server Commercial Applications Commercial Applications Web Server

Ingrian Networks, Inc. 6 Summary Ingrian’s Data Privacy Solutions Enable Enterprises to: o Protect Business-Critical Customer and Corporate Data o Ensure Compliance with Legislation and Industry Guidelines o Augment Security Technologies—They’re No Longer Enough