windows xp is coming to an end: how to stay secure before you migrate
TRANSCRIPT
Windows XP is Coming to an End:
How to Stay Secure Before You Migrate
Chris MerrittDirector of Solution Marketing
Introduction
2
Background
• Microsoft Windows XP End of Support is April 08, 2014(146 days)
• Estimated 200M Enterprise WinXP Machines Worldwide» 96% of US schools still running XP
» 72% of PCs in China still running XP
• Impact on Compliance» FFIEC guidance – … identify, assess, and manage these risks to
ensure that safety, soundness, and the ability to deliver products and services are not compromised.
» PCI-DSS v3.0 – Ensure that all system components and software are protected from known vulnerabilities ….
• Impact from Supply Chain
3
4PROPRIETARY & CONFIDENTIAL - NOT FOR PUBLIC DISTRIBUTION
Windows XP Usage
5PROPRIETARY & CONFIDENTIAL - NOT FOR PUBLIC DISTRIBUTION
Windows XP Infection Rates
6PROPRIETARY & CONFIDENTIAL - NOT FOR PUBLIC DISTRIBUTION
Windows XP Infection Rates
Strategy 0 – Ignore
7
Plan:• Ignore EOS and Carry On
Pros:• Reduced Cost / Effort
(for now)
Cons:• Pwnage is Certain• More Expensive Long-Term
Source: http://joshblackman.com/blog/wp-content/uploads/2011/11/bird.jpg
Strategy 1 – Isolate
8
Plan:• Isolate WinXP boxes
Pros:• Reduced Cost / Effort
Cons:• User Productivity Hit• Physical Attack Vector
Source: http://www.ida.liu.se/~g-robek/images/linguistics-AnechoicChamber_id.jpg
Strategy 2 – Extend
9
Plan:• Get Premier Support from
MS for WinXP boxes
Pros:• Push Off Migration
Cons:• Expensive• No Native OS Security
Improvements
Source: http://erstarnews.com/wp-content/uploads/2013/07/stack-of-money.jpg
10PROPRIETARY & CONFIDENTIAL - NOT FOR PUBLIC DISTRIBUTION
Strategy 3 – Bandage
Plan:• Apply AV Bandaid
Pros:• Push Off Migration• Better than Nothing
Cons:• Pwnage is Certain• More Expensive Long-Term
Source: http://jet-computing.com/wp-content/uploads/2010/12/patch-bandaid.png
Strategy 4 – Replace
11
Plan:• Rip and Replace WinXP
[from OS only to entire box]
Pros:• Latest & Greatest
Cons:• Time / Cost / Effort• End User Disruption
Other Options
• Windows 7 XP Mode• Virtualization …
» with Microsoft MED-V
» with VMware or Citrix
• …
12
Source: http://www.cfpayne.com/images/buyPrints/Pleading-With-Computer.jpg
Strategy 5 – Lockdown
13
Plan:• Add Application Whitelisting
Pros:• Keep Existing Systems• Prevent Unwanted Change• Prepare for Wider Use
Cons:• Still on WinXP• Requires Some Planning
[time / cost / effort]
Malware
Application Whitelisting
14
Authorized
• Operating Systems• Business Software
Unauthorized
• Games• iTunes• Shareware• Unlicensed S/W
ApplicationsU
n-T
rust
ed
Known
• Viruses• Worms• Trojans
Unknown
• Viruses• Worms• Trojans• Keyloggers• Spywares
More Information
Surviving WinXP EOShttps://www.lumension.com/windows-xp
» Whitepaper – learn how to stay secure before, during and after your migration
» Free Application Scanner – discover all the apps being used in your network
Whitepapers» NSS Labs – Improving Windows Client
Performance and Security: Impact Comparison of AC and Traditional AV https://www.lumension.com/resources/free-content/improving-windows-client-performance-and-security.aspx
15
Get a Free Trial ofLumension Application Controlhttps://www.lumension.com/application-control-software/free-trial.aspx
Global Headquarters8660 East Hartford Drive
Suite 300
Scottsdale, AZ 85255
1.888.725.7828