Windows XP is Coming to an End:

How to Stay Secure Before You Migrate

Chris MerrittDirector of Solution Marketing

Introduction

2

Background

• Microsoft Windows XP End of Support is April 08, 2014(146 days)

• Estimated 200M Enterprise WinXP Machines Worldwide» 96% of US schools still running XP

» 72% of PCs in China still running XP

• Impact on Compliance» FFIEC guidance – … identify, assess, and manage these risks to

ensure that safety, soundness, and the ability to deliver products and services are not compromised.

» PCI-DSS v3.0 – Ensure that all system components and software are protected from known vulnerabilities ….

• Impact from Supply Chain

3

4PROPRIETARY & CONFIDENTIAL - NOT FOR PUBLIC DISTRIBUTION

Windows XP Usage

5PROPRIETARY & CONFIDENTIAL - NOT FOR PUBLIC DISTRIBUTION

Windows XP Infection Rates

6PROPRIETARY & CONFIDENTIAL - NOT FOR PUBLIC DISTRIBUTION

Windows XP Infection Rates

Strategy 0 – Ignore

7

Plan:• Ignore EOS and Carry On

Pros:• Reduced Cost / Effort

(for now)

Cons:• Pwnage is Certain• More Expensive Long-Term

Source: http://joshblackman.com/blog/wp-content/uploads/2011/11/bird.jpg

Strategy 1 – Isolate

8

Plan:• Isolate WinXP boxes

Pros:• Reduced Cost / Effort

Cons:• User Productivity Hit• Physical Attack Vector

Source: http://www.ida.liu.se/~g-robek/images/linguistics-AnechoicChamber_id.jpg

Strategy 2 – Extend

9

Plan:• Get Premier Support from

MS for WinXP boxes

Pros:• Push Off Migration

Cons:• Expensive• No Native OS Security

Improvements

Source: http://erstarnews.com/wp-content/uploads/2013/07/stack-of-money.jpg

10PROPRIETARY & CONFIDENTIAL - NOT FOR PUBLIC DISTRIBUTION

Strategy 3 – Bandage

Plan:• Apply AV Bandaid

Pros:• Push Off Migration• Better than Nothing

Cons:• Pwnage is Certain• More Expensive Long-Term

Source: http://jet-computing.com/wp-content/uploads/2010/12/patch-bandaid.png

Strategy 4 – Replace

11

Plan:• Rip and Replace WinXP

[from OS only to entire box]

Pros:• Latest & Greatest

Cons:• Time / Cost / Effort• End User Disruption

Other Options

• Windows 7 XP Mode• Virtualization …

» with Microsoft MED-V

» with VMware or Citrix

• …

12

Source: http://www.cfpayne.com/images/buyPrints/Pleading-With-Computer.jpg

Strategy 5 – Lockdown

13

Plan:• Add Application Whitelisting

Pros:• Keep Existing Systems• Prevent Unwanted Change• Prepare for Wider Use

Cons:• Still on WinXP• Requires Some Planning

[time / cost / effort]

Malware

Application Whitelisting

14

Authorized

• Operating Systems• Business Software

Unauthorized

• Games• iTunes• Shareware• Unlicensed S/W

ApplicationsU

n-T

rust

ed

Known

• Viruses• Worms• Trojans

Unknown

• Viruses• Worms• Trojans• Keyloggers• Spywares

More Information

Surviving WinXP EOShttps://www.lumension.com/windows-xp

» Whitepaper – learn how to stay secure before, during and after your migration

» Free Application Scanner – discover all the apps being used in your network

Whitepapers» NSS Labs – Improving Windows Client

Performance and Security: Impact Comparison of AC and Traditional AV https://www.lumension.com/resources/free-content/improving-windows-client-performance-and-security.aspx

15

Get a Free Trial ofLumension Application Controlhttps://www.lumension.com/application-control-software/free-trial.aspx

Global Headquarters8660 East Hartford Drive

Suite 300

Scottsdale, AZ 85255

1.888.725.7828

info@lumension.com