Cloud Security Management Overview and Challenges © 2012 Newvem All rights reserved IGT

Slide 1

Slide 1 text

Slide 2

Slide 2 text

© 2012 Newvem All rights reserved Who Am I ? Ofir Nachmani, Cloud Computing Evangelist Chief Community at Newvem.com Blogger at IAmOnDemand.com My Experience  Cloud Adoption  SaaS Deployment  Cloud Management

Slide 3

Slide 3 text

Slide 4

Slide 4 text

© 2012 Newvem All rights reserved … manage is ensuring there is a consistent, time- boxed, and reliable, set of access control policies and systems implemented so that as users move around various levels of privileges What is the first priority cloud security concern? http://www.quora.com/KnowYourCloud

Slide 5

Slide 5 text

© 2012 Newvem All rights reserved First priority is to figure out what data you have there and how important it is to you (Data Classification). Then look at the risks to that data What is the first priority cloud security concern? http://www.quora.com/KnowYourCloud

Slide 6

Slide 6 text

© 2012 Newvem All rights reserved I can readily think of these risk buckets 1. Security Risks …. 2. Privacy Risks .. 3. Control Risks .. What is the first priority cloud security concern? http://www.quora.com/KnowYourCloud

Slide 7

Slide 7 text

© 2012 Newvem All rights reserved When on the cloud, it is very important to know what laws would be applicable. For example, many of our clients do not want to host in the US due to PATRIOT Act (and in the inevitable Protect IP Act). .. What laws would be applicable on the data and what privacy laws will protect my data on the cloud What is the first priority cloud security concern? http://www.quora.com/KnowYourCloud

Slide 8

Slide 8 text

© 2012 Newvem All rights reserved Cloud computing is seen as being more vulnerable to online attacks than having the data stored on private servers .. Additionally, there are considerations concerning data security, including confidentiality and availability What is the first priority cloud security concern? http://www.quora.com/KnowYourCloud

Slide 9

Slide 9 text

Slide 10

Slide 10 text

Slide 11

Slide 11 text

Slide 12

Slide 12 text

Slide 13

Slide 13 text

Slide 14

Slide 14 text

Slide 15

Slide 15 text

© 2012 Newvem All rights reserved 5 biggest security AWS users’ mistakes Leaving database server IP ports open Opening access to IP ports from all internal AWS servers Leaving IP ports open to all IP addresses Allowing access to critical IP ports from public Internet IP addresses Making Amazon Machine Images publicly accessible