Since the arrival of cloud, security as we knew it changes tremendously, it sent us back 15 years from what we knew in Enterprise Security. This presentation talks about the challenges and measure that cloud presents to organizations in the cloud.

1. IaaS Security – Back to the Drawing Board
UP 2014, DEC 11th
Amit Cohen
CEO, FortyCloud

2. UP 2014, DEC 11th
5 Facts About FortyCloud

3. Fact #1
We provide a comprehensive
security solution for IaaS
deployments
UP 2014, DEC 11th

4. Fact #2 – Available On
UP 2014, DEC 11th

5. Fact #3 – Established in 2012
UP 2014, DEC 11th

6. Fact #4 – Deployed in data-centers on all continents
UP 2014, DEC 11th

7. Fact #5 – Our offices
UP 2014, DEC 11th
San Francisco
Boston
Israel
Opens Q1/15

8. Infrastructure as a Service (IaaS)
The service provides access to computing resource in a virtualized environment, “the
Cloud”, across a public connection, usually the internet. In the case of IaaS the computing resource provided is specifically
that of virtualized hardware, in other words, computing infrastructure. The definition includes such
offerings as virtual server space, network connections, bandwidth, IP addresses and load balancers. Physically, the pool of
hardware resource is pulled from a multitude of servers and networks usually distributed across numerous
data centers, all of which the cloud provider is responsible for maintaining. The
client, on the other hand, is given access to the virtualized components in order to build their own IT platforms
(source: interoute.com)
UP 2014, DEC 11th

9. IaaS Market Growth
IaaS is projected to grow at 29% CAGR through 2018
and reach approximately $18bn in revenue
$17.6B
2013 2014 2015 2016 2017 2018
Source: 451 Research, 2014
UP 2014, DEC 11th
$7.1B

10. Why is IaaS so Popular
UP 2014, DEC 11th

11. IaaS – A Shared Responsibility Model
UP 2014, DEC 11th

12. CSPs Security Toolsets
UP 2014, DEC 11th
CSP 1 CSP 2 CSP 3
Virtual Private Cloud Option + + +
Global Virtual Private Cloud - - +
IP Based Firewall Rules + - +
Identity Based Firewall Rules - - -
IPSec Connectivity
(to the virtual environment) + - -

13. Security in IaaS - A Serious Pain Point
UP 2014, DEC 11th

14. IaaS Security Challenges
Security
best-practices
in the cloud
Security
automation
Multi-datacenter
Multi-cloud
deployments
Compliance
(PCI, HIPAA)
UP 2014, DEC 11th

15. IaaS Security Challenges
Security
best-practices
in the cloud
Security
automation
Multi-datacenter
Multi-cloud
deployments
Compliance
(PCI, HIPAA)
UP 2014, DEC 11th

16. Security Best Practices in the Cloud
• Isolation
• Firewall
• Identity-based access
UP 2014, DEC 11th

17. IaaS Security Challenges
Security
best-practices
in the cloud
Security
automation
Multi-datacenter
Multi-cloud
deployments
Compliance
(PCI, HIPAA)
UP 2014, DEC 11th

18. Security Automation
• Configuration management
• Firewall policies
• Automation tool
UP 2014, DEC 11th

19. IaaS Security Challenges
Security
best-practices
in the cloud
Security
automation
Multi-datacenter
Multi-cloud
deployments
Compliance
(PCI, HIPAA)
UP 2014, DEC 11th

20. Multiple Cloud Locations
• Connectivity
• Global security policies
• One policy, different infrastructures
UP 2014, DEC 11th

21. IaaS Security Challenges
Security
best-practices
in the cloud
Security
automation
Multi-datacenter
Multi-cloud
deployments
Compliance
(PCI, HIPAA)

22. Compliance
• Encrypt sensitive data
• Differentiated access rights
• Log, analyze and alert
• Vulnerability monitoring
UP 2014, DEC 11th

23. Summary
 Leverage IaaS to increase business agility
 Security requires some white-board planning
 Choose the right (cloud, solution) partners for implementation

24. Questions?
Contact
Amit Cohen
CEO, FortyCloud
amit@fortycloud.com
www.fortycloud.com
UP 2014, DEC 11th