2009年10月29日木曜日

Trend Micro社のクラウドセキュリティ戦略の発表。内容は=>

On-Premiseサーバセキュリティとクラウド上の仮想化環境のサーバ、両方をカバーするソリューションとして位置づけられており、次の機能が特に強化されている。
  • On-Premiseサーバ、仮想化レイヤー、クラウド環境、の3つに共通的に対応
  • 仮想化環境とクラウド環境向けのセキュリティコストの低下
  • 各種規格の準拠保証: PCI、SAS70、FISMA、HIPAA、等

Trend Micro Introduces Advanced Server Security Strategy

Trend Micro is introducing an advanced server security strategy that encompasses protection for the cloud, as well as products and solutions that help corporations address the challenging data protection, security and compliance needs of today's datacenters that stretch across physical, virtualized and cloud-computing environments.

Trend Micro Deep Security, the flagship product for advanced server security at Trend Micro, introduces a new paradigm for server security where the entire server is protected, including the operating system, network and applications layers for superior and comprehensive security, regardless of computing environment, virtualization platform or storage location.

It emphasizes:

  • Preventing data breaches and disruptions by providing a layer of defense at the server itself, whether physical, virtual or cloud.
  • Lowering the cost of security management for virtual and cloud computing environments.
  • Helping to make possible compliance over a wide range of regulations and standards, including PCI, SAS 70, FISMA, HIPAA, and more.
  • Addressing immediate security concerns plaguing enterprises in physical and virtual worlds such as SQL injection and cross-site scripting attacks perpetrated by sophisticated, for-profit hackers.

Trend Micro Deep Security provides advanced protection for servers right from the operating system to resident applications with a modular architecture that includes: A deep packet inspection engine with intrusion detection/prevention (IDS/IPS), Web application protection and network-level application control; firewall, integrity monitoring and log inspection modules. This protection is available for both physical and virtual systems using server-based software agents and, coming soon with Deep Security 7.0, using virtual security appliances specifically designed for VMware VI3 and vSphere 4 environments. Trend Micro Deep Security 7.0, the latest version, is the world's first security software that coordinates VMsafe API-based security applied at the hypervisor with additional protection on virtual machines to protect VMware environments. This version also includes new features designed to improve management and simplify compliance for a lower total cost of ownership such as: Event tagging to enable better workflow of security incident handling, the ability to create a "reference system" or known good state to reduce false positive alerts resulting from normal system updates such as patching. Other enhancements include integrity monitoring, log inspection, and SIEM integration capabilities.

Trend Micro Deep Security combines with Trend Micro ServerProtect and Core Protection for Virtual Machines, the company's anti-malware products designed for physical servers and VMware virtual servers respectively. This unique blend delivers layered and comprehensive server security now vital to business continuity. Trend Micro Deep Security, with advanced anti-malware protection, further adds to Trend Micro's ability to broadly deliver layered and comprehensive server security now vital to business continuity.

Trend Micro Deep Security 7 will be available in November 2009 with two pricing models designed to deliver maximum value to organizations. Deep Security is available for traditional physical servers on a per server basis starting at $885 per server. A virtual server license is also available for VMware environments with unlimited agents per host machine starting at $2100 per socket.

Trend Micro advanced server security solutions are part of Trend Micro Enterprise Security – a tightly integrated offering of content security products, services and solutions which is powered by the Trend Micro Smart Protection Network. Trend Micro Enterprise Security delivers maximum protection from emerging threats while greatly reducing the cost and complexity of security management.