HP Revamps Enterprise Security Portfolio

Hewlett-Packard has integrated the security and technology it gained from recent acquisitions to unveil an expanded Enterprise Security Solutions portfolio.

The new HP security portfolio is designed to help businesses deal with persistent security threats from cloud applications and social media.

This new offering reflects the HP’s desire to move more into the security and services markets.

Acquired Expertise

The new security portfolio provides organisations with the necessary tools to combat threats arising from mobile computing, consumerisation of IT, the increased adoption of cloud services and the prevalence of social media in the workplace, HP officially announced 12 September.

The technology that HP acquired from ArcSight, Fortify Software and TippingPoint have been integrated into a comprehensive risk-management platform.

Traditional IT security is focused on establishing strong perimeters around the network and systems to keep bad guys out and define policies on what the good guys can do inside, Tom Reilly, vice-president and general manager of HP enterprise security products, told eWEEK.

“Organisations have to stop worrying only about the perimeter,” Reilly said, especially with recent trends changing how people access the data.

New Challenges

Organisations have to deal with a “whole new set of security challenges” with the consumerisation of IT and the growing popularity of mobile devices, Reilly said. Employees increasingly expect to be able to access data even when not at work, and IT departments have to start thinking about home computers and other non-corporate-issued devices regularly connecting to the network.

The cloud “poses its own challenges” because data lives on some virtualised server in a data centre under someone else’s control, Reilly added.  Social media breaks down traditional notions of enterprise security because the bad guys can trick the good guys to let them in.

Businesses often wind up implementing security products from various vendors in order to handle different types of threats, and the various components are often unable to work together, Reilly said. The new Enterprise Security portfolio would help businesses and IT departments establish and execute a security strategy that addresses threats and potential liabilities in a unified manner, Reilly said.

The platform consists of security technology from acquisitions – including ArcSight, which HP acquired in 2010 for $1.5 billion (£949m); Tipping Point, which was part of the $2.7 billion (£1.7bn) acquisition of 3Com in 2009; and Fortify Software and SPI Dynamics.

Instead of selling new security products to companies for a specific problem, HP is positioning the new portfolio to offer customers a service that can fill in the gaps in their security strategy. The service-based approach allows HP to provide customers with information about new threats while working with existing infrastructure.

New Tools

HP announced new tools and services, such as the Information Security Management services, Enterprise Cloud Service threat-management software and Application Security Testing-as-a-Service to find vulnerabilities in the application layer. ArcSight Express 3.0 would detect and prevent cyber-threats. HP Reputation Security Monitor lists and identifies malicious IP and DNS addresses. HP has integrated the reputation service, provided by TippingPoint’s DV Labs, into ArcSight Express, Reilly said.

The Fortify Software Security Center suite would test for vulnerabilities, and the TippingPoint Web Application Digital Vaccine would sniff out malicious traffic on the network. Web-based attacks were “up 35 percent” in the first half of 2011, said Michael Callahan, director of product marketing at HP Enterprise Security Products. The Digital Vaccine tool would scan web applications to find vulnerabilities in real-time and alert the IT department to fix the issues, Callahan added.

ArcSight Express 3.0 is expected to be available worldwide “soon,” according to HP. Web Application Digital Vaccine 2.0 is currently available worldwide, and pricing is expected to vary based on the number of Web application scans performed. The DVToolKit 2.0 is currently available worldwide at no additional cost to clients who already have an HP TippingPoint IPS. HP TippingPoint Reporting and Archiving is also currently available worldwide as a free add-on product to Logger clients. HP WebInspect Real-Time is available worldwide, as well, bundled with HP WebInspect and HP Fortify SecurityScope.

While cyber-attackers are getting “better,” the new trends mean enterprises now have a bigger attack surface that they have to secure, Reilly said. HP’s ArcSight sponsored a recent cyber-crime study by the Ponemon Institute that found cyber-attacks against a group of 50 large companies grew by 44 percent last year versus the prior year. The companies were hit with a combined 72 successful attacks per week, and the costs to mitigate these attacks went up by 56 percent year-over-year, Reilly said.