GIAC Enterprises Desktop Protection

1
GIAC Enterprises Desktop Protection

• Jim Beechey and Emilio Valente
  SANS Technology Institute
  Master of Science in
  Information Security Engineering

2
Summary of Issues

• GIAC investment in securing our Fortune Cookie
  System
• Concerns that malware could steal company data
• Signature-based systems cannot keep up

3
List of Top Ten

• Kaspersky Check Point
• McAfee Norton
• Symantec Endpoint BitDefender
• The Shield Deluxe Sunbelt Vipre
• Bit9 Parity CoreTrace

4
List of Top Three

• Upgrade to Norton 2009
• Consistent platform for users/support
• Instant Update Feature
• Purchase Check Point Internet Security 2009
• Has all the tools you would expect
• Impressive Firewall
• Purchase Bit9 Parity
• Meets our need of blocking unknown malware
• Easy to manage, good price point

5
Recommendation

• Bit9 Parity Recommended Solution
• Best way to address malware
• Parity Database a big plus
• Centralized control from one console
• Address concerns regarding patching and business
  critical apps

6
Projects Budget

• Based upon 250 Workstations
• Total Cost Year 1 14,750
• Total Cost Year 2 17,000
• Total Cost Year 3 19,250
• 30 per workstation
• 10 of purchase price for Parity Subscription
• 20 of purchase price for support
• 5,000 for initial hardware

7
Implementation Plan

• Phase I Project Proposal 9/28
• Phase II Evaluation 10/15
• Phase III Purchase 10/31
• Phase IV Setup in Lab 11/30
• Phase V Deployment 12/15