Lss implementing cyber security in the cloud, and from the cloud-feb14
1 like548 views
This document summarizes a presentation about implementing cyber security in and from the cloud. It discusses the Cloud Security Alliance (CSA), an organization that develops best practices for cloud security. The CSA has published a document called "Security Guidance for Critical Areas of Focus in Cloud Computing" that identifies important security domains for cloud computing like architecture, governance, compliance, and more. It also discusses how companies can provide cyber security solutions in the cloud through technologies like SecureCloud that give enterprises control over encrypted data in public clouds.
Lss implementing cyber security in the cloud, and from the cloud-feb14
- 1. Implementing Cyber Security In & From The Cloud LS Subramanian niseindia.com
- 2. Today’s Agenda Cloud Security Alliance (CSA) CSA’s “ Security Guidance for Critical Areas of Focus in Cloud Computing V 3.0” Cyber Security Solutions in the Cloud and from the cloud.
- 3. About the Cloud Security Alliance • Global, not-for-profit organization • Over 23,000 individual members, 100 corporate members, 50 chapters • Building best practices and a trusted cloud ecosystem • Agile philosophy, rapid development of applied research – GRC: Balance compliance with risk management – Reference models: build using existing standards – Identity: a key foundation of a functioning cloud economy – Champion interoperability – Enable innovation – Advocacy of prudent public policy “To promote the use of best practices for providing security assurance within Cloud Computing, and provide education on the uses of Cloud Computing to help secure all other forms of computing.”
- 4. CSA - Initiatives https://cloudsecurityalliance.org/research/ Copyright © 2011 Cloud Security Alliance
- 5. HOW DO WE BUILD THE “TRUSTED CLOUD?”… • Strategy • Education • Security Framework • Assessment • Build for the Future Copyright © 2011 Cloud Security Alliance www.cloudsecurityalliance.org
- 6. Security Guidance for Critical Areas of Focus in Cloud Computing V3.0 Prepared by the Cloud Security Alliance
- 7. What is Cloud Computing?
- 8. CSA Security Guidance Cloud Computing Architecture
- 9. CSA Security Guidance What is Security for Cloud Computing? Understanding the impact of these differences between service models and how they are deployed is critical to managing the risk posture of an organization.
- 10. CSA Guidance Domains Architecture 1. Cloud Computing Architectural Framework Governing in the Cloud 2. Governance & Enterprise Risk Management 3. Legal Issues : Contracts & Electronic Discovery 4. Compliance & Audit Management 5. Information Management & Data Security 6. Interoperability & Portability
- 11. CSA Guidance Domains Operating in the Cloud 7. Traditional Security, Business Continuity & DR 8. Data Center Operations 9. Incident Response 10. Application Security 11. Encryption & Key Mgmt 12. Identity & Access Mgmt 13. Virtualization 14. Security as a Service
- 12. CSA - Trend Micro Partnership Founding Sponsor of CSA’s HQ in APAC Chair of the CSA Executive Council Sponsor one global CSA research project Sponsor of all CSA events in APAC Update from all CSA Chapters in APAC CCSK certification for Trend Micro cloud security experts Engaging regional key stake holders including government, legal experts, service providers, technology providers and consumers. Customizing/developing relevant best practices and standards for the APAC market. Centre of excellence for research and training. Establishment of global standards secretariat within APAC
- 13. Cyber Security Solutions in the Cloud and from the cloud
- 14. Who Has Control? Servers Virtualization & Public Cloud Public Cloud Public Cloud Private Cloud’’’’’ IaaS PaaS SaaS End-User (Enterprise) Service Provider Trend Micro Confidential 2/26/2013 Copyright 2009 Trend Micro Inc.
- 15. SecureCloud: Enterprise Controlled Data Protection for the Cloud Patent pending Trend Micro technology enables enterprises to retain control of data in the cloud Trend Micro Confidential2/26/2013 Copyright 2009 Trend Micro Inc. 15
- 16. A New Security Architecture For A New Era All environments should be considered un-trusted Users access app Deep Security Datacenter SecureCloud: • Facilitates movement between Public Cloud datacenter & cloud • Delivers control, security and compliance through encryption • Host defends Avoids service provider lock-in • itself from attack Enables secure storage recycling SecureCloud Data encrypted within the server Encryption keys controlled by you Encrypted Data Data Data Copyright 2009 Trend Micro Inc.
- 17. CNAM – Real Time Attack Detection ARCHITECTURE
- 18. CNAM – Real Time Attack Detection TOPOLOGY
- 19. CNAM – Real Time Attack Detection MODEL
- 20. Acknowledgement All ownership and credits for pictures, logos copyright and trademarks rests with the owners. We Acknowledge & thank owners for the use of their material in this presentation to educate on cloud computing. Material for this presentation has been sourced from CSA, NIST & Trend Micro & Net Monastery & others. We thank the organizations for allowing us to use this material.
- 21. The Future of Computing is the Cloud lssubramanian@niseindia.com