mcafee-cloud-acceleration-and-risks.pdf
- 1. The Less Known Risks of Running the Enterprise at Cloud Speed Sekhar Sarukkai VP & Fellow, Cloud BU, McAfee
- 2. of companies experience business acceleration from their use of cloud services. Source: McAfee Cloud Adoption Report: Business Growth Edition, June 2019 87%
- 3. 3 Customer Drivers for Cloud Adoption Shadow SaaS Approved SaaS IaaS/PaaS Faster Collaboration Faster Time to Market Higher Employee Satisfaction
- 4. 4 Mapping ECC To Cloud Computing • Domain 4 Specifically Covers Cloud Computing • Other Domains Also Relevant • You Need Control of Data • To Clouds • From Clouds • Between Clouds • Cloud Configuration • Cloud Security Is A Shared Responsibility
- 5. 5 59% Higher- performance IT Infrastructure 57% IT Cost Reduction 52% Improved Security How Companies Benefit from the Cloud The three most common benefits: What benefits does your organization experience from its overall use of cloud services?
- 6. 6 59% Higher- performance IT Infrastructure 57% IT Cost Reduction 52% Improved Security How Companies Benefit from the Cloud The three most common benefits: What benefits does your organization experience from its overall use of cloud services?
- 7. 7 44% How Companies Benefit from the Cloud Business acceleration measures: 43% 41% 37% 33% 30% 29% More Efficient Collaboration Improved Employee Productivity Business Growth Faster Time to Market Higher Employee Satisfaction Ability to Launch New Products Expansion to New Markets What benefits does your organization experience from its overall use of cloud services?
- 8. 8 36% 37% 36% 43% 46% 47% 51% How Companies Benefit from the Cloud with Infrastructure-as-a-Service (IaaS) Business acceleration measures: More Efficient Collaboration Improved Employee Productivity Business Growth Faster Time to Market Higher Employee Satisfaction Ability to Launch New Products Expansion to New Markets What benefits does your organization experience from its overall use of cloud services?
- 9. 9 Companies do more with the cloud when they protect their data with a CASB Source: McAfee Cloud Adoption Report: Business Growth Edition, June 2019 Excluding Shadow IT
- 10. 10 Where is enterprise sensitive data in the cloud? Salesforce Office 365 Google Docs Slack AWS Custom Apps Box ServiceNow High-Risk Shadow Med/Low-Risk Shadow 31% 13% 11% 16% 8% 5% 5% 7% 2% 2%
- 11. 11 2. Traditional Solutions don’t Work Traditional ways of identifying threats and breaches are not sufficient Cloud Data Breaches - Why 1. Not Malware Cloud based data breaches are not typically due to Malware 3. Data Loss Cloud Speed Attacks Result in Cloud Scale Data Loss Collaboration SaaS, 42%
- 12. 12 The Cloud (First) Enterprise Challenges Data Creation and Access in the Cloud Bypasses Existing Network Security Infrastructure 1 Network Controls SaaS IaaS/PaaS Cloud-to-Cloud traffic 95% of Network Traffic
- 13. 13 Data Classification & Accountability Client & End-Point Protection Identity & Access Management Application Level Controls Network Control Host Infrastructure Physical Security SaaS PaaS IaaS The Cloud (First) Enterprise Challenges Service Provider Responsibility Customer Responsibility Customers Are Still Responsible for Security 2 Cloud Shared Responsibility Model
- 14. 14 Data Classification & Accountability End-Point Protection Identity & Access Management Application Level Controls Network Control Host Infrastructure Physical Security & Connectivity SaaS PaaS IaaS Cloud Security 3600 Shared Responsibility Model Service Provider Responsibility Service Provider feature, enterprise configuration Enterprise Responsibility User Responsibility User/Device/Data control Collaboration control © McAfee 2019. OK for reuse if unedited
- 15. “Through 2020, 95% of cloud security failures will be the customer’s fault.” Gartner Magic Quadrant for CASB—2017
- 16. How Data Exfiltrate from the Cloud Some Examples
- 17. 17 Partner Office 365 Maria—Sharing and Collaboration GetItDone Office 365 Collaboration puts confidential data at risk
- 18. 18 Sensitive Data in the Cloud – When Sharing isn’t Caring 17% 18% 22% 16% 17% 18% 19% 20% 21% 22% 23% 2016 2017 2018 22% of cloud users share files
- 19. 19 Sensitive Data in the Cloud – When Sharing isn’t Caring 43% 47% 48% 40% 41% 42% 43% 44% 45% 46% 47% 48% 49% 2016 2017 2018 48% of all files in the cloud are shared with at least one other person
- 20. 20 2. Advanced Threat Protection Detect Malware, compromised accounts, insider/privileged threats Collab SaaS Use Cases 1. Data Protection Prevent sensitive data from being stored and shared externally 3. Contextual Access Control Block sync/download of corporate O365 data to personal devices 31% 13% 11% 16% 8% 5% 5% 7% 2% 2% Collaboration SaaS, 42%
- 21. 21 Maria—Using Connected Apps Connected Apps are potential vehicles for Data Leaks EasyCast
- 22. 22 Business SaaS Use Cases 31% 13% 11% 16% 8% 5% 5% 7% 2% 2% 2. Data Exfiltration Protect report data from being exfiltrated and enable encryption with customer managed keys 1. Compliance Management Discover where your confidential data is inside structured applications Business SaaS, 24% 3. Threat Protection Identify insider and external threats
- 23. 23 Sam—Shadow IaaS IaaS/PaaS Account 1,2 3 Account 4,5 Account 6,7,8 Account drift as developers create dev and test accounts over time
- 24. 24 The average company has 70 custom apps running in IaaS Please estimate how many applications your organization runs in IaaS
- 25. 25 Sam—Unsecure IaaS/PaaS Configuration IaaS/PaaS Configuration drift as developers misconfigure their IaaS/PaaS instaces Storage Bucket Encrypted Storage Bucket Closed Port Configuration Firewall rules …
- 26. 26 Sam— Top 10 Unsecure IaaS/PaaS Configuration Problems 1. EBS Data encryption is not turned on 2. There’s unrestricted outbound access 3. Access to resources is not provisioned using IAM roles 4. EC2 security group port misconfigured 5. EC2 security group inbound access misconfigured 6. Unencrypted AMI 7. Unused security groups 8. VPC Flow logs disabled 9. Multi-factor authentication not enabled for IAM users 10. S3 bucket encryption not turned on
- 27. Average organization has 14 misconfigured IaaS services running at a given time Source: McAfee Cloud Adoption Report, Nov 2018
- 28. 28 3. Advanced Threat Protection Detect compromised accounts, privileged user threats, malware IaaS Security Use Cases 31% 13% 11% 16% 8% 5% 5% 7% 2% 2% 2. Visibility of Confidential Data Visibility of regulated/high-value data stored in S3/Azure Blobs 1. Managing Drift Identify IaaS resources with security settings that are non- compliant IaaS, 24%
- 29. 29 Shadow IT Use Cases 31% 13% 11% 16% 8% 5% 5% 7% 2% 2% Shadow IT 1. Discover & Govern Discover & Coach on use of high risk 3. Data Loss Prevention Prevent data exfiltration to medium risk services 2. Conditional Access Control Activity and Instance based access control
- 30. 30 MVISION Cloud— 100% Cloud Security Coverage Source: McAfee Cloud Adoption Report, Nov 2018 5% 5% Shadow IT, 10% Business SaaS, 24% Collaboration SaaS, 42% IaaS, 24%
- 31. 31 McAfee MVISION Cloud protects ALL customer data in the cloud MVISION Cloud Enterprise SaaS Long Tail SaaS
- 32. 32 McAfee MVISION Cloud protects ALL customer data in the cloud Common Security Services Compliance & Risk Assessment Shadow Apps Reporting Orchestration DLP Access Control Encryption Config Audit Classification Data Protection Activity Monitoring Malware Protection UEBA Threat Protection Enterprise SaaS Long Tail SaaS CASB Connect APIs Cloud Native IaaS/PaaS Lift & Shift Apps CASB Reverse Proxy
- 33. 33 Unified Cloud Edge Unified Data and Threat Protection DLP SWG CASB MVISION ePO DEVICES FEATURES CLOUD DATA BENEFITS Centralized Policy Definition For threat prevention and data protection Unified Incident Management Access Control Over managed and unmanaged devices Cloud Data and Permission Controls Via APIs integrations Acceptable Use Policy Enforcement With advanced malware protection. Other names and brands may be claimed as the property of others.
- 34. 34 MVISION Cloud Unmanaged Managed SaaS IaaS/PaaS Shadow ▪ Data Security ▪ Threat Protection Control ▪ What: Data, Device, App ▪ Who ▪ Where ▪ When Visibility Adopt a CASB Platform
- 35. 35 Companies are more likely to experience business acceleration when they protect their data with a CASB Source: McAfee Cloud Adoption Report: Business Growth Edition, June 2019 +15% +11% +32% +36% +45% +40% +38% With CASB Without CASB
- 36. 36 Mapping ECC To Cloud Computing – Paper Available
- 37. 37 Cloud Security Recap Cloud require new thinking and platform for data security Embrace a cloud native approach Do it now!! Get a cloud security assessment done 1 2 4
- 38. McAfee, the McAfee logo and are trademarks or registered trademarks of McAfee LLC or its subsidiaries in the U.S. and/or other countries. Other names and brands may be claimed as the property of others. Copyright © 2018 McAfee, LLC.