The cloud is a highly dynamic environment that changes the way organizations need to think about security, underpinned by the shared security model. Learn how to increase the effectiveness of your security response as you move to the cloud. We’ll discuss how to leverage features in AWS and our security tools to reduce downtime with minimal impact to your security and business operations. Pulling from experiences helping clients move to the cloud, this talk will help provide practical advice you can apply today.

1. Effec%ve
Security
Response
in
the
Cloud
Sasha
Pavlovic,
Senior
Cloud
Security
Architect
Trend
Micro

2. ©
2014,
Trend
Micro
Inc.
Abstract
Effective Security Response in the Cloud
=====================================
The cloud is a highly dynamic environment that changes the way
organisations need to think about security, underpinned by the shared
security model. Learn how to increase the effectiveness of your security
response as you move to the cloud. We’ll discuss how to leverage
features in AWS and our security tools to reduce downtime with minimal
impact to your security and business operations. Pulling from
experiences helping clients move to the cloud, this talk will help provide
practical advice you can apply today.

4. ©
2014,
Trend
Micro
Inc.
*
hAp://aws.amazon.com/about-­‐aws/
A
infrastructure
plaJorm
defined
as
Low
cost
Agile
&
ElasPc
Open
&
Flexible
Secure
AWS

5. ©
2014,
Trend
Micro
Inc.
and
your
company
doesn’t
need
to
worry
about
it
asked
ironically
by
Peter
Waterhouse,
InformaPon
Week,
31-­‐Mar-­‐2014
hAp://www.informaPonweek.com/soXware/enterprise-­‐applicaPons/busPng-­‐5-­‐devops-­‐myths/d/d-­‐id/1141597
DevOps
is
a
technology
movement
for
right?
The
movement

6. ©
2014,
Trend
Micro
Inc.
Development
OperaPons
Driving
change

7. ©
2014,
Trend
Micro
Inc.
Development
OperaPons
+
Driving
change

8. ©
2014,
Trend
Micro
Inc.
New
goals
Breakdown
silos
Directly
align
with
business
Rapidly
deploy
&
iterate
DevOps
Driving
change

9. ©
2014,
Trend
Micro
Inc.
Security
needs
to
keep
pace
Our
Challenge

11. ©
2014,
Trend
Micro
Inc.
You
FaciliPes
Physical
Security
Physical
Infrastructure
Network
Infrastructure
VirtualisaPon
Infrastructure
OperaPng
System
ApplicaPon
Account
Management
The
tradiPonal
responsibility
model

12. ©
2014,
Trend
Micro
Inc.
AWS
FaciliPes
Physical
Security
Physical
Infrastructure
Network
Infrastructure
VirtualisacPon
Infrastructure
You
OperaPng
System
ApplicaPon
Account
Management
Security
Groups
Network
ConfiguraPon
Shared
Responsibility
model

13. ©
2014,
Trend
Micro
Inc.
Applied
at
the
boundary
Operator
TradiPonal
Security

14. ©
2014,
Trend
Micro
Inc.
Applied
to
each
instance
Cloud
defences
VPC
VPC
VPC

15. ©
2014,
Trend
Micro
Inc.
Management
Deployment
New
challenges

16. ©
2014,
Trend
Micro
Inc.
Leverage
exisPng
distribuPon
channels
Addressing
the
challenges
-­‐
deployment

17. ©
2014,
Trend
Micro
Inc.
Recommended
choices
AWS
OpsWorks
Chef
Puppet
Salt
Deployment
channels

18. ©
2014,
Trend
Micro
Inc.
Centralise
control
management
Addressing
the
challenges
-­‐
management

19. ©
2014,
Trend
Micro
Inc.
In
acPon
Our
challenge

21. ©
2014,
Trend
Micro
Inc.
On
the
clock
Our
challenge

22. ©
2014,
Trend
Micro
Inc.
PreparaPon
IdenPficaPon
Containment
EradicaPon
Recovery
Lessons
Learned
SANS
incident
response
process

23. ©
2014,
Trend
Micro
Inc.
Server
Analyse
Verify
Adjust
Replacement
Defend
TradiPonal
process

24. ©
2014,
Trend
Micro
Inc.
Instance
Analyse
Verify
Adjust
Defend
Replacement
Cloud
process

25. ©
2014,
Trend
Micro
Inc.
Need
to
automate
isolaPon
Cloud
process
–
automaPon
requirements
Instance
Analyse
Verify
Adjust
Defend
Replacement

26. ©
2014,
Trend
Micro
Inc.
Instance
Replacement
1.
Monitor
the
log
stream
API
2.
Call
the
AWS
API
to
isolate
the
instance
Cloud
process
-­‐
soluPon

27. ©
2014,
Trend
Micro
Inc.
In
acPon
Our
Challenge

29. ©
2014,
Trend
Micro
Inc.
Cloud
process
Instance
Analyse
Verify
Adjust
Defend
Replacement

31. ©
2014,
Trend
Micro
Inc.
Piggyback
on
provisioning
Central
management
AutomaPon
Keys
to
success

32. Thank
you.
Learn
more
at
hAp://www.trendmicro.com/aws