Nimbo/Alert Logic - Azure in the Cloud
โขDownload as PPT, PDFโข
0 likesโข1,316 views
Johnathan Norman Nimbo/AL/Azure Event in a Box 01/27
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (11)
Similar to Nimbo/Alert Logic - Azure in the Cloud
Similar to Nimbo/Alert Logic - Azure in the Cloud (20)
More from Alert Logic
More from Alert Logic (20)
Recently uploaded
Recently uploaded (20)
Nimbo/Alert Logic - Azure in the Cloud
- 1. Alert Logic โ Azure Cloud Security Johnathan Norman Cloud Solutions Architect jnorman@alertlogic.com
- 2. Agenda โข Key Findings: Cloud Security Report, Spring 2014 - Alert Logic Customer Data - Honeypot Research โข Common Azure Security & Compliance Issues โข Alert Logic for Azure - Log Manager - Threat Manager - Web Security Manager
- 3. Cloud Adoption is Gaining Momentum โข Major Public cloud vendors predicted to eclipse $10B in revenue by 2015 โข Oracle Cloud bookings increased by 35% in 2013 โข Gartner predicts 60% of banking institutions to migrate to the cloud โข Healthcare is expected to adopt cloud computing at a 21% year over year rate through 2017 โข VDI (Desktop as a Service) market reached $13.4 billion in 2013
- 4. Over 2,800 Organizations Worldwide Trust Alert Logic Millions of devices secured 3.7 Petabytes of log data under management 8.5 Million security events correlated per day 40,000 incidents identified and reviewed per month
- 5. Threats in the Cloud are Increasing With Adoption โข Increase in attack frequency โข Traditional on-premises threats are now moving to the cloud โข Majority of cloud incidents were related to web application attacks, brute force attacks, and vulnerability scans โข Brute force attacks and vulnerability scans are now occurring at near-equivalent rates in both cloud and on-premises environments โข Malware/Botnet is increasing year over year
- 6. Global Honeypot Network Why Honeypots? โขHoneypots give us a unique data set โขSimulates vulnerable systems without the risk of real data loss โขGives the ability to collect intelligence from malicious attackers โขAllows for collection of various different attacks based on system โขHelps identify what industry specific targets are out there
- 8. Common Azure Compliance & Security Issues Secure your code Know your scope Instance Isolation Shared Responsibility Storage Key Management 1 2 3 4 5 6 7
- 9. 1- Secure Your Code โ Implement SDL
- 10. 1- Secure Your Code โ Sharing is badโฆ
- 11. 2- Know Your Scope Web Traffic Web Role Web Role Azure Website Azure Website Azure Storage Azure Storage Traffic Manager
- 12. 2 โ Know your scope
- 13. 3 โ Instance Isolation worker rolesweb roles service endpoint service endpoint Virtual NetworkVirtual Network Web Traffic
- 14. 4 - Storage Key Management storage blob Azure Mobile Services 1. Upload() 2. Path = http://blah.storage.azure.com/public/xyz/foo.jpg 3. UploadToPath(Path);
- 15. 4 - Storage Key Management storage blob Azure Mobile Services 1. Upload() 2.) Return SAS (write/expires 5 min) and Path 3.) Authenticate & Upload
- 16. 5 - Security in the Cloud is a Shared Responsibility Customer Responsibilit y Foundation Services Hosts โข Logical network segmentation โข Perimeter security services โข External DDoS, spoofing, and scanning prevented โข Hardened hypervisor โข System image library โข Root access for customer โข Access management โข Patch management โข Configuration hardening โข Security monitoring โข Log analysis Apps โข Secure coding and best practices โข Software and virtual patching โข Configuration management โข Access management โข Application level attack monitoring โข Network threat detection โข Security monitoring Networks Cloud Service Provider Responsibilit y Compute Storage DB Network http://azure.microsoft.com/en-us/support/trust-center/compliance/
- 17. Alert Logic โSecurity Solutions
- 18. Security and Compliance is Challenging Skilled security resources are in high demand and hard to find Moving to cloud and hybrid IT environments brings different threats and complexities Maintaining continuous security and compliance is expensive
- 19. Applications Systems Networks Building a Security and Compliance Solution IDS Vulnerability Scanning Web Application Firewall Log Management Threat Intelligence Feeds SIEM Staff capable of: โขProvisioning โขMonitoring โขConfiguration and tuning โขResearching incidents, emerging threats, and defining remediation steps Big Data Analytics Products Automated Correlation and Analytics People & Process
- 20. Alert Logic Solutions Alert Logic Threat Managerโข Alert Logic Web Security Managerโข Alert Logic Log Managerโข Alert Logic Unified Web User Interface Intrusion Detection & Vulnerability Scanning Log Management & Compliance Reporting Active Protection for Web Applications
- 21. Thank you.
Editor's Notes
- Highest volume of attacks occurred in Europe Attacks against Microsoft DS accounted for over 51% of the overall attack vectors Database services have been a consistent target Underscores the importance of a defense in depth strategy for the need to secure your cloud infrastructure