SAP Mobile Secure Fokus: Mobile App Protection by Mocana

Transkript

1 SAP Mobile Secure Fokus: Mobile App Protection by Mocana Michael Sambeth, CoE Mobile Solutions, SAP (Schweiz) AG Dienstag, 08. April 2014, Regensdorf

2 Legal disclaimer The information in this presentation is confidential and proprietary to SAP and may not be disclosed without the permission of SAP. This presentation is not subject to your license agreement or any other service or subscription agreement with SAP. SAP has no obligation to pursue any course of business outlined in this document or any related presentation, or to develop or release any functionality mentioned therein. This document, or any related presentation and SAP's strategy and possible future developments, products and or platforms directions and functionality are all subject to change and may be changed by SAP at any time for any reason without notice. The information in this document is not a commitment, promise or legal obligation to deliver any material, code or functionality. This document is provided without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or noninfringement. This document is for informational purposes and may not be incorporated into a contract. SAP assumes no responsibility for errors or omissions in this document, except if such damages were caused by SAP s willful misconduct or gross negligence. All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place undue reliance on these forward-looking statements, which speak only as of their dates, and they should not be relied upon in making purchasing decisions SAP AG. All rights reserved. 2

3 Intro

4 AGENDA Regensdorf, :00 13:10 Uhr Begrüssung Michael Sambeth, Pascal Hagedorn 13:10 13:30 Uhr Co-Innovation SMP 3.0 Ramp-Up; Roadmap Michael Sambeth 13:30 14:00 Uhr Security in mobilen Apps Daniele Kohler, HP Schweiz 14:00 14:30 Uhr Innovative Use-Cases mit SMP :30 15:00 Uhr Neue Entwicklungsparadigmen mit SMP 3.0 Alexander Schöne, Werner Schwarz, Novo Business Consultants AG Christian Montagner, Robert Kleger, Dominique Greuter, Swisscom IT Services 15:00 15:30 Uhr Kaffeepause 15:30 16:00 Uhr SAP Mobile Secure: SAP Mobile App Protection Arne Speck, Michael Sambeth 16:00 17:15 Uhr Experience-Workshop: SAP Mobile Documents Michael Wallenczus 17:15 17:30 Uhr Schweizer SAP Mobile Community: SAP CODE JAMs kommen in die Schweiz Marcel Ritschard, Michael Sambeth 17:30 19:00 Uhr Apéro 2014 SAP AG. All rights reserved. 4

5 SAP Mobile Secure Fokus: Mobile App Protection by Mocana

6 Enterprise Mobility Management SAP Mobile Secure Devices SAP Afaria Applications SAP Mobile App Protection by Mocana Content SAP Mobile Documents Enterprise Integration Enterprise Mobility Management System On-Premise Hybrid Cloud 2014 SAP AG. All rights reserved. 6

8 Securing DEVICES SAP Afaria SAP Afaria is the trusted solution to manage and secure deployments of mobile devices for any size of company in the cloud or on-premise. Mobile device management Highly secure and scalable Robust analytics Quickly self-enroll devices for enterprise use; have control needed by pre-configuring settings and enforcing security and compliance policies Meet the requirements of the world s largest enterprises. Remotely lock and wipe managed devices, control security settings for bring-yourown-device (BYOD) or corporate-owned devices Use built-in robust analytics for instant insight into mobile device usage and the ability to take immediate action 2014 SAP AG. All rights reserved. 8

10 Securing CONTENT SAP Mobile Documents SAP Mobile Documents is designed for enterprise deployments where collaboration, security, and control of business content are critical. Users enjoy anytime, anywhere access to view and collaborate on personal and corporate content, in an easy-to-use, native mobile app. My files any device Corporate content access Share my files HTTP iwork XML Access personal business documents instantly on your laptop or any mobile device Discover and access content from corporate document management systems Share files with teams, colleagues, and business partners from anywhere 2014 SAP AG. All rights reserved. 10

12 Securing APPS SAP Mobile App Protection by Mocana SAP Mobile App Protection by Mocana helps organizations accelerate mobile initiatives by automating app security. App-wrapping technology enables enterprises to quickly secure existing corporate and third-party applications without having to write any code Meet strict regulations Speed mobile initiatives Increase flexibility Protect corporate data and meet compliance and audit requirements in highly regulated industries with additional encryption and security requirements Accelerate app adoption: no coding or security expertise required. Eliminate security bottlenecks for operational app deployments at scale Ensure security when managing the device isn t ideal (for example, BYOD) and when building B2B apps 2014 SAP AG. All rights reserved. 12

13 Mobile app security New techniques gaining traction Mobile Device Management Device-level Course-grain management, control, and security policies Typically requires device client Ideal for corporate-managed devices Difficult to separate corporate data from personal data Bottom line: Focus is on the device Mobile App Security Application-level Fine-grain management, control, and security policies No device client Ideal for corporate-managed, unmanaged, and BYOD devices Completely separates corporate data from personal data Bottom line: Focus is on the app and it s data 2014 SAP AG. All rights reserved. 13

14 SAP Mobile App Protection Create a self-defending app End user license agreement enforcement, lock-out with app expiration Enterprise App User Authentication Restricts copy and paste to unsecured area of device Secure Data Transfer Passcode policy enforcement expiration, lock-out and helpdesk assisted passcode reset Data At Rest Encryption Restrict app usage to a geographic location Geo-fencing FIPS certified encryption for all data storage. Prevent malware and rogue apps from accessing sensitive data Jailbreak/ Rooting Detection Per-App VPN Disable app when the device is compromised by jail breaking or rooting Secure transfer among federated wrapped apps on the device EULA, App Expiration Secure VPN tunnel to enterprise network prevents rogue apps and malware from gaining unwanted access Federation of apps 2014 SAP AG. All rights reserved. 14

15 Why Mocana Mocana invented app wrapping Mocana has been securing Capitol Hill, the drones communications, top banks and many three letter agencies for the last 10 years. Mocana is everywhere but you do not see it: VPN for Samsung KNOX, encryption for Good mail We offer real full app wrapping not just SDK 10 yrs of Mocana s IP put in Mobile App Protection (MAP) Integrated with SAP Afaria MDM 2014 SAP AG. All rights reserved. 15

16 SAP Mobile App Protection Key Benefits Enterprise IT 1. Protects corporate data, meets compliance and audit requirements 2. Accelerates app adoption: No coding or security expertise required 3. Standardizes security: Single approach for ios and Android apps Lines of Business 1. Business enablement: Eliminates security bottlenecks for operational app deployments at scale 2. Does not compromise the user experience Mobile App ISV 1. Enables focus on core business innovation, not security 2. Increases enterprise adoption: No need for security customizations 2014 SAP AG. All rights reserved. 16

17 Demo Mocana

18 SAP Mobile Secure at a glance SAP Mobile Secure employs a multi-layer approach to overcome the current mobile security limitations Starting with Afaria, additional security layers such as NitroDesk or SAP Mobile Documents can be added over time Device Security Device Encryption Passcode Control Feature / Function Certificate Management User Authentication Jailbreak & Root Detection Provisioning Encryption MDM MDM + Secure container MDM + Secure container + App Wrapping MDM + Secure container + App Wrapping + Mobile Content SAP Afaria can be utilized to both provision and remediate additional layers SAP Mobile Secure allows organizations to only deploy additional security layers on all devices OR on select devices to reduce licensing costs Device & Mobile App Provisioning & Revocation Network Access Control Containerized App-level security policies Application Encryption Content Managment Content Asset Tracking & Version Control Content Revocation Content Encryption 2014 SAP AG. All rights reserved. 18

19 Key points to take home 1 The mobile landscape changes frequently 2 Mobile devices are not created equally 3 Mobility management begins with solid planning 4 Understand the various approaches to manage mobility and choose wisely 5 Leverage SAP research and experience in mobile strategy 6 Consider the SAP Mobile Secure portfolio as your EMM solution 2014 SAP AG. All rights reserved. 19

21 Vielen Dank! Kontaktinformation: Michael Sambeth CoE Mobile Solutions SAP (Schweiz) AG M

22 2014 SAP AG. Alle Rechte vorbehalten. Weitergabe und Vervielfältigung dieser Publikation oder von Teilen daraus sind, zu welchem Zweck und in welcher Form auch immer, ohne die ausdrückliche schriftliche Genehmigung durch SAP AG nicht gestattet. In dieser Publikation enthaltene Informationen können ohne vorherige Ankündigung geändert werden. Die von SAP AG oder deren Vertriebsfirmen angebotenen Softwareprodukte können Softwarekomponenten auch anderer Softwarehersteller enthalten. Microsoft, Windows, Excel, Outlook, und PowerPoint sind eingetragene Marken der Microsoft Corporation. IBM, DB2, DB2 Universal Database, System i, System i5, System p, System p5, System x, System z, System z10, System z9, z10, z9, iseries, pseries, xseries, zseries, eserver, z/vm, z/os, i5/os, S/390, OS/390, OS/400, AS/400, S/390 Parallel Enterprise Server, PowerVM, Power Architecture, POWER6+, POWER6, POWER5+, POWER5, POWER, OpenPower, PowerPC, BatchPipes, BladeCenter, System Storage, GPFS, HACMP, RETAIN, DB2 Connect, RACF, Redbooks, OS/2, Parallel Sysplex, MVS/ESA, AIX, Intelligent Miner, WebSphere, Netfinity, Tivoli und Informix sind Marken oder eingetragene Marken der IBM Corporation. Linux ist eine eingetragene Marke von Linus Torvalds in den USA und anderen Ländern. Adobe, das Adobe-Logo, Acrobat, PostScript und Reader sind Marken oder eingetragene Marken von Adobe Systems Incorporated in den USA und/oder anderen Ländern. Oracle und Java sind eingetragene Marken von Oracle und/oder ihrer Tochtergesellschaften. UNIX, X/Open, OSF/1 und Motif sind eingetragene Marken der Open Group. Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame und MultiWin sind Marken oder eingetragene Marken von Citrix Systems, Inc. HTML, XML, XHTML und W3C sind Marken oder eingetragene Marken des W3C, World Wide Web Consortium, Massachusetts Institute of Technology. SAP, R/3, SAP NetWeaver, Duet, PartnerEdge, ByDesign, SAP BusinessObjects Explorer, StreamWork und weitere im Text erwähnte SAP-Produkte und Dienstleistungen sowie die entsprechenden Logos sind Marken oder eingetragene Marken der SAP AG in Deutschland und anderen Ländern. Business Objects und das Business-Objects-Logo, BusinessObjects, Crystal Reports, Crystal Decisions, Web Intelligence, Xcelsius und andere im Text erwähnte Business-Objects-Produkte und Dienstleistungen sowie die entsprechenden Logos sind Marken oder eingetragene Marken der Business Objects Software Ltd. Business Objects ist ein Unternehmen der SAP AG. Sybase und Adaptive Server, ianywhere, Sybase 365, SQL Anywhere und weitere im Text erwähnte Sybase- Produkte und -Dienstleistungen sowie die entsprechenden Logos sind Marken oder eingetragene Marken der Sybase Inc. Sybase ist ein Unternehmen der SAP AG. Alle anderen Namen von Produkten und Dienstleistungen sind Marken der jeweiligen Firmen. Die Angaben im Text sind unverbindlich und dienen lediglich zu Informationszwecken. Produkte können länderspezifische Unterschiede aufweisen. Die in dieser Publikation enthaltene Information ist Eigentum der SAP. Weitergabe und Vervielfältigung dieser Publikation oder von Teilen daraus sind, zu welchem Zweck und in welcher Form auch immer, nur mit ausdrücklicher schriftlicher Genehmigung durch SAP AG gestattet SAP AG. All rights reserved. 22