Next-Generation Managed Security Services

Reports of network attacks and stolen data are commonplace. Consumers routinely undergo the stress of fraudulent charges or compromised credit cards. Computer hacker terms like "botnet" are becoming a part of our everyday vocabulary.

As a result, enterprise security and risk professionals find themselves on a never-ending quest to maintain the integrity of their communication networks, according to the latest study by Forrester Research. Fortunately, managed service providers offer solutions to help relieve the burden.

In its latest initiative to help businesses protect their vital assets from cyber threats and other online attacks, Verizon Business is now offering its next-generation managed security services (MSS) platform, complete with new options.

This enhanced platform is designed to safeguard corporate networks by proactively identifying vulnerabilities and prioritizing threats across the extended enterprise -- resulting in better visibility, enhanced security and reduced risk.

Businesses can now identify the threats that could do the most damage, and then respond quickly. The Verizon Business platform is available immediately to customers throughout the U.S., Europe and Asia-Pacific.

Risk-Based Approach to Network Security
Going beyond first-generation threat and vulnerability strategies to address underlying risk, Verizon’s new platform enables the management of multiple security platforms, changing business requirements and increased security compliance requirements.

It also enables enterprises that lack in-house security expertise and have limited resources to effectively secure their networks while obtaining a consistent quality of service at an affordable, predictable cost.

"The Verizon Business risk-based approach to network security gives enterprise customers a better understanding of the threats to their businesses so they can plan accordingly," said Amy DeCarlo, principal analyst - Managed IT Services at Current Analysis. "This pragmatic approach, coupled with the global availability of this service platform, makes this a compelling managed security offering for the enterprise."

Benefits of Flexible Service Levels
Verizon customers can choose from one of the following three new service tiers to address individual requirements -- including providing effective security solutions across multiple networks in different parts of the world, each with country-specific requirements.

• Basic Monitoring: Allows customers to outsource only the monitoring of security devices to while leveraging in-house staffing and retaining management control.
• Premium Monitoring: Provides continuous monitoring of security devices with analytical support. Security logs and alerts generated by security devices are analyzed and interpreted by security analysts located in one of the company's global security operations centers.
• Premium Monitoring and Management: Incorporates the Premium Monitoring service, and also proactive management of all devices. This includes installing security patches, managing security policies and restoring devices.

Next Generation Managed Services Enable Retailers to Innovate

Online competition and access to price information has been squeezing already thin retailer profit margins for some time now. Combined with the added pressures of the economic crisis, many retailers are being pushed to the edge. Sadly, familiar names, such as Circuit City, have already been pushed over the edge.

To survive this crisis forward-looking retailers need to focus on:

1. Efficiency -- making every part of the business as lean and efficient as possible, especially in the supply chain.
2. Cost Removal -- driving out costs everywhere, especially in labor, their second biggest cost after the goods that they sell.
3. Customer Experience -- seeking ways to differentiate an increasingly homogeneous shopping experience.
   

Salvation in Managed Services
Retailers have traditionally been very closed to the idea of managed services provided by third parties. Razor thin margins have made them very risk adverse. There is a general skepticism of service providers, large IT firms, and their understanding of retail or their ability to adequately serve retailer needs.

Those fears and biases are beginning to fade as the reality of economic pressures for cost reduction and competitive pressures for differentiation bite harder than ever before. Retailers are now exploring how managed services allow them to address these monumental challenges.

Research by Cisco IBSG (the company's strategic consulting arm) reveals that successful providers of managed services must address retailer core buyer values:

• Proven Reliability -- to manage risk and complexity.
• Cost Effective -- pay for performance.
• Tailored Solutions -- specific to the retailing industry.
• Focus on Customer Experience -- enabling competitive differentiation.
• Speed to Market -- deliver benefits immediately.
  

Managed Services Enable In-Store Innovation
Many retailers are aggressively applying managed services to innovate. Digital Signage, or the ability to provide targeted multi-media messaging to customers, is being used by retailers such as WalMart and Eddie Bauer to influence buying decisions at the point-of-sale and to increase store traffic. The complexity involved in the deployment, underlying network and operations means that retailers are increasingly turning to proven, managed end-to-end solutions.

Companies like Best Buy and Home Depot are trialing Telepresence kiosks that allow them to enhance the shopping experience by bringing expertise directly to their customers in their stores -- in a scalable and cost effective manner. Service providers that install and deliver these solutions become valued partners who offer unique value-added solutions specific to the retail industry.

The current economic crisis will re-shape the retail business. Resilient retailers who survive and thrive will be those that proactively embrace next generation managed services as a means to attain competitive differentiation. Inventive managed service providers will deploy unique solutions that help to position retailers for the long term.

About the author: Stuart Taylor is a Director in Cisco IBSG. Stuart leads thought leadership and engagements with key Service Providers in managed services. He has over 15 years of experience focused on strategy, corporate development, business unit strategy, M&A and operational improvement with large mobile and wireline operators and high technology clients.

How to Stay Ahead of Hackers and Cybercriminals

My conversation with Jonathan Nguyen-Duy, Director of Product Management for Verizon, ended up being very thought-provoking. We were supposed to talk about a new security offering, a backbone-based solution aimed at stopping Internet-based attacks even before they hit a company's network. (I'd spoken previously to Nguyen-Duy about Verizon's risk-correlation service.)

Nguyen-Duy is a fount of knowledge about the changing landscape of international cybercriminals. Verizon is expanding its denial-of-service (DOS) detection and mitigation capabilities into eight network management centers serving 24 countries with new levels of scalability -- in part because of an increase in international cybercrime, according to Nguyen-Duy.

"Our customers are telling us that the frequency and complexity of DOS attacks has grown. We're now seeing cyberattacks based on social and political activism. We're also seeing less sophisticated hackers getting access to attack methodologies."

A case in point: consider the following related events.

Item: The Bureau of Alcohol, Tobacco, and Firearms, he says, recently arrested "the eBay of cybercrime" in Phoenix, Arizona which was selling automated attack programs, called botnets.

Item: A CIA official said at a conference that the recent power outages in South Florida were results of an unauthorized probe of the utility network originating from China.

Item: Crime syndicates are more frequently attacking financial services firms, online retailers, and government agencies for extortion purposes, in countries where there may be no laws or no enforcement of the laws.

"If you're a global enterprise or agency with deep pockets and a brand to protect, the challenge is real," Nguyen-Duy says.

"This gives rise to a clear problem: If you have a DOS attack that floods a device with five times the normal amount of traffic, do you have the capacity on site to parse through it and separate the legitimate traffic, and can you do it in real time so you don’t have degradation in service?" Remember that typical consumers won't sit through a transaction if they experience latency of more than 10 seconds.

Protection: Around the Clock, Around the Globe
No, we're not trying to write the script for Die Hard V here. However, because globalization is increasingly driven by the ability to share information anywhere, companies that take advantage of it are also making themselves more vulnerable.

Unless you want to deploy high-priced security experts everywhere you do business, it would be prudent to consider how expanded managed security services can protect your multinational communications network. And, thereby prevent the unthinkable from becoming a reality.

Managed Security Services Growing Among SMBs

A new report from Forrester Research on the state of IT security at small to midsize businesses (SMB) in North America and Europe predicts ongoing growth in the managed security space.

In a result similar to that of enterprise respondents, SMB executives reported that the two top drivers for using managed security services is the demand for a specialized skill set that security requires (cited by 31% of the respondents) and the need to reduce costs (cited by 24%).

Other reasons cited for adopting managed security services include:

• The need to reduce complexity (19%)
• The need for 24/7 security coverage (19%)
• The rest of the IT environment is outsourced (5%)
  

Managed Services Tops for Filtering and Monitoring
The report also revealed that the top two services SMBs ask from their managed security provider are e-mail or Web content filtering (36%) and network firewall monitoring (33%). Forrester believes that the biggest uptick in the next year, however, will come from increased use of vulnerability management and assessment. Some 20% of SMBs plan to deploy these services in the next twelve months.

The Forrester report clearly shows that SMBs have a strong interest in all facets of managed security services. Some 23% are already using it for identity and access management, and another 35% are interested in it, but either have no plans or no budget for adding it to their slate of services.

Similar proportions of SMB executives recognize these issues: host event log monitoring or management (31% are interested but have no plans or budget); IDS/IPS monitoring or management (30%); endpoint security (34%); and regulatory compliance monitoring and assessment (31%).

When To Add Managed Services
The Forrester survey didn't tackle one of the most interesting questions from a managed services standpoint (in fairness, the focus was on security, not managed services). That is, what will it take for SMBs to start adopting the services in which they express interest, but have not yet budgeted for?

Our recommendation is to be proactive and deliberate about adding services. Don't wait for the need to arise; develop a plan to takes into account your security needs and build capabilities into both your budget and deployment plans on an incremental basis. That way, you'll enjoy the highest level of protection with a minimum amount of disruption.

Eight Options for Managed Security Services

In the online network connected business environment, security is more critical -- and also more complex. Today, network security requires constant monitoring and management. All businesses now experience vulnerability on an infrastructure that often extends to many locations.

Managed service providers can create a comprehensive security offering that enables you to maintain the level of protection and control you require. They can manage some or all of your network security functions -- giving you access to their dedicated manpower, 24-hour safeguarding, as well as routine maintenance and management of disaster recovery.

Finding the right security solution for your organization begins with establishing your priorities and becoming informed about alternatives. The following describes typical managed security service offerings, and how you can apply them.

Managed Firewall
Firewalls protect internal and external networks by restricting the types of network protocols and traffic allowed on your network. Firewall appliances, which the service provider manages remotely, include dedicated hardware and software platforms located on your premises.

Managed Distributed Denial-of-Service Protection
This service involves protecting the network infrastructure and network-based resources from distributed denial-of-service (DDoS) attacks -- so that your business can operate without interruption. It also helps prevent worm propagation that can cause DDoS attacks. DDoS mitigation provides protection against emerging threats.

Managed Intrusion Prevention Systems
Intrusion prevention systems (IPSs) identify and stop inappropriate attempts to access your network, systems, services, applications, or data. Intrusion detection services (IDSs) rely on network-based or host-based monitors, and often match monitored traffic or activity against profiles of known attacks.

Managed Antivirus Protection
This service most often involves checking for viruses at the gateway or firewall as well as in your e-mail messages, attachments, and file transfers. The service often includes automatic updates to antivirus definition files.

Managed Endpoint Protection
This service detects and stops unusual behavior on your endpoint devices, such as desktops and servers. In this way, you can prevent damage from Day-Zero security threats whose signature has not yet been identified.

Managed Authentication
Authentication refers to a group of processes and technologies used to verify the identity of a user attempting to gain access to your systems or applications.

Managed Content Filtering
Filtering is used to isolate and block content deemed inappropriate according to your internal policies or regulatory policies.

Vulnerability Assessment
The service includes security risk assessments, network scanning, and probing to reveal vulnerabilities in your network, operating system, or applications that can be accessed from the public Internet.

Contact a managed service provider, to learn more about these security capabilities, and the associated cost savings or productivity benefits. Most providers will have customer case studies for your consideration.

Online Security in a Global Networked Economy

Because of the expanding growth and complexity of communication networking, and the risks presented by a new breed of skillful hackers, serious security threats are an unfortunate certainty within the highly interconnected office environment of today.

These threats are very real and the results are costly to those businesses that have been affected. Apparently, the victims aren't entirely at random, which is often assumed to be the case.

According to the 2007 CSI Computer Crime and Security Survey, almost one-fifth (18 percent) of those respondents who suffered one or more kinds of security incident further said they had suffered a "targeted attack" -- defined as a malware attack aimed exclusively at their organization or at organizations within a small subset of the general population.

Beyond the Virus Threat
Moreover, financial fraud overtook virus attacks as the source of the greatest financial losses. Virus losses, which had been the leading cause of loss for seven straight years, fell to second place.

In today's global marketplace, every business needs to be vigilant in pro-actively protecting its corporate assets. Gone are the days of simply scanning for viruses. Today a comprehensive, layered approach is required to secure the network and company resources from multiple types of threats.

Small and medium-sized businesses (SMBs) are particularly vulnerable because they typically do not have expert resources on staff to ensure the network is secure, that regulatory compliance issues are being properly addressed, and that network monitoring and updates are effectively maintained 24 hours a day.

Alternative to the In-House Solution
Managed service providers can help SMBs secure their network by deploying a layered approach that uses various advanced technologies and solutions, protecting the network, and anticipating multiple types of potential security breaches -- from Trojan horse attacks and spyware, to data tampering and information theft.

Managed security services create a resilient multilayer defense:

• Prevention -- proactively keeps the intrusions out
• Detection -- identifies when an intrusion is occurring or has occurred
• Response -- takes action to defeat a potential intrusion once detected
  

The advantage of working with a managed security provider is that services can be scaled to meet an organization's exact security requirements. This flexibility allows companies to minimize service outages and operational expenses, thereby reducing the overall financial impact.

The Challenge to Stay Current
Frankly, a large enterprise IT team can also benefit from an out-tasked network security solution, as the demands to ensure that in-house staff is staying current increases exponentially over time.

Ask a managed service provider to help you assess your security needs and design the best solution for your business. A comprehensive security audit is often the first step in this process.

By all means, be prepared for the unexpected, and keep your business safe. However, this is a complex task that's best left to the experts, while you free-up time to focus on your core business objectives.