SlideShare a Scribd company logo
1 of 32
Effec%ve 
Security 
Response 
in 
the 
Cloud 
Greg 
Boyle, 
Director, 
Strategic 
Business 
and 
Alliances 
Trend 
Micro
AWS 
A 
infrastructure 
plaKorm 
defined 
as 
Low 
cost 
Agile 
& 
ElasPc 
Open 
& 
Flexible 
Secure 
* 
hAp://aws.amazon.com/about-­‐aws/ 
© 
2014, 
Trend 
Micro 
Inc.
The 
movement 
DevOps 
is 
a 
technology 
movement 
for 
and 
your 
company 
doesn’t 
need 
to 
worry 
about 
it 
© 
2014, 
Trend 
Micro 
Inc. 
right? 
asked 
ironically 
by 
Peter 
Waterhouse, 
InformaPon 
Week, 
31-­‐Mar-­‐2014 
hAp://www.informaPonweek.com/soYware/enterprise-­‐applicaPons/busPng-­‐5-­‐devops-­‐myths/d/d-­‐id/1141597
© 
2014, 
Trend 
Micro 
Inc. 
Development 
OperaPons 
Driving 
change
© 
2014, 
Trend 
Micro 
Inc. 
Development 
OperaPons 
+ 
Driving 
change
Driving 
change 
© 
2014, 
Trend 
Micro 
Inc. 
New 
goals 
Breakdown 
silos 
Directly 
align 
with 
business 
Rapidly 
deploy 
& 
iterate 
DevOps
© 
2014, 
Trend 
Micro 
Inc. 
Security 
needs 
to 
keep 
pace 
Our 
Challenge
You 
FaciliPes 
Physical 
Security 
Physical 
Infrastructure 
Network 
Infrastructure 
VirtualisaPon 
Infrastructure 
© 
2014, 
Trend 
Micro 
Inc. 
OperaPng 
System 
ApplicaPon 
Account 
Management 
The 
tradiPonal 
responsibility 
model
AWS 
FaciliPes 
Physical 
Security 
Physical 
Infrastructure 
Network 
Infrastructure 
VirtualisacPon 
Infrastructure 
© 
2014, 
Trend 
Micro 
Inc. 
You 
OperaPng 
System 
ApplicaPon 
Account 
Management 
Security 
Groups 
Network 
ConfiguraPon 
Shared 
Responsibility 
model
© 
2014, 
Trend 
Micro 
Inc. 
Applied 
at 
the 
boundary 
Operator 
TradiPonal 
Security
© 
2014, 
Trend 
Micro 
Inc. 
Applied 
to 
each 
instance 
Cloud 
defences 
VPC 
VPC 
VPC
New 
challenges 
© 
2014, 
Trend 
Micro 
Inc. 
Deployment 
Management
© 
2014, 
Trend 
Micro 
Inc. 
Leverage 
exisPng 
distribuPon 
channels 
Addressing 
the 
challenges 
-­‐ 
deployment
© 
2014, 
Trend 
Micro 
Inc. 
Recommended 
choices 
AWS 
OpsWorks 
Chef 
Puppet 
Salt 
Deployment 
channels
© 
2014, 
Trend 
Micro 
Inc. 
Centralise 
control 
management 
Addressing 
the 
challenges 
-­‐ 
management
© 
2014, 
Trend 
Micro 
Inc. 
In 
acPon 
Our 
challenge
© 
2014, 
Trend 
Micro 
Inc. 
On 
the 
clock 
Our 
challenge
SANS 
incident 
response 
process 
PreparaPon 
IdenPficaPon 
Containment 
EradicaPon 
Recovery 
Lessons 
Learned 
© 
2014, 
Trend 
Micro 
Inc.
© 
2014, 
Trend 
Micro 
Inc. 
Server 
Analyse 
Defend 
Verify 
Adjust 
Replacement 
TradiPonal 
process
© 
2014, 
Trend 
Micro 
Inc. 
Instance 
Replacement 
Defend 
Analyse 
Verify 
Adjust 
Cloud 
process
Cloud 
process 
– 
automaPon 
requirements 
Need 
to 
automate 
isolaPon 
© 
2014, 
Trend 
Micro 
Inc. 
Instance 
Replacement 
Defend 
Analyse 
Verify 
Adjust
© 
2014, 
Trend 
Micro 
Inc. 
Instance 
Replacement 
1. 
Monitor 
the 
log 
stream 
API 
2. 
Call 
the 
AWS 
API 
to 
isolate 
the 
instance 
Cloud 
process 
-­‐ 
soluPon
© 
2014, 
Trend 
Micro 
Inc. 
In 
acPon 
Our 
Challenge
Cloud 
process 
© 
2014, 
Trend 
Micro 
Inc. 
Instance 
Replacement 
Defend 
Analyse 
Verify 
Adjust
© 
2014, 
Trend 
Micro 
Inc. 
Piggyback 
on 
provisioning 
Central 
management 
AutomaPon 
Keys 
to 
success
Thank 
you. 
Learn 
more 
at 
hAp://trendmicro.com/aws

More Related Content

What's hot

Alex Glushchenko presents CA DevOps 2014
Alex Glushchenko presents CA DevOps 2014Alex Glushchenko presents CA DevOps 2014
Alex Glushchenko presents CA DevOps 2014
Alex Glushchenko
 

What's hot (20)

The Business Benefits of GitOps
The Business Benefits of GitOpsThe Business Benefits of GitOps
The Business Benefits of GitOps
 
Operational Transformation: Teachers’ Journey from App Servers to VMware Tanzu
Operational Transformation: Teachers’ Journey from App Servers to VMware TanzuOperational Transformation: Teachers’ Journey from App Servers to VMware Tanzu
Operational Transformation: Teachers’ Journey from App Servers to VMware Tanzu
 
Four Strategies to Create a DevOps Culture & System that Favors Innovation & ...
Four Strategies to Create a DevOps Culture & System that Favors Innovation & ...Four Strategies to Create a DevOps Culture & System that Favors Innovation & ...
Four Strategies to Create a DevOps Culture & System that Favors Innovation & ...
 
Making the Business a First-Class Citizen During the Application Modernizatio...
Making the Business a First-Class Citizen During the Application Modernizatio...Making the Business a First-Class Citizen During the Application Modernizatio...
Making the Business a First-Class Citizen During the Application Modernizatio...
 
Demystifying DevOps
Demystifying DevOpsDemystifying DevOps
Demystifying DevOps
 
3 Steps to Expand DevOps and Automation Throughout the Enterprise
3 Steps to Expand DevOps and Automation Throughout the Enterprise3 Steps to Expand DevOps and Automation Throughout the Enterprise
3 Steps to Expand DevOps and Automation Throughout the Enterprise
 
Building the Business Case for App Modernization
Building the Business Case for App ModernizationBuilding the Business Case for App Modernization
Building the Business Case for App Modernization
 
Efficient Performance Test Automation - Opitmizing the Jenkins Pipeline
Efficient Performance Test Automation - Opitmizing the Jenkins PipelineEfficient Performance Test Automation - Opitmizing the Jenkins Pipeline
Efficient Performance Test Automation - Opitmizing the Jenkins Pipeline
 
Transformation: Not Only the App But Also the Way We Work
Transformation: Not Only the App But Also the Way We WorkTransformation: Not Only the App But Also the Way We Work
Transformation: Not Only the App But Also the Way We Work
 
Alex Glushchenko presents CA DevOps 2014
Alex Glushchenko presents CA DevOps 2014Alex Glushchenko presents CA DevOps 2014
Alex Glushchenko presents CA DevOps 2014
 
Building Kubernetes images at scale with Tanzu Build Service
Building Kubernetes images at scale with Tanzu Build ServiceBuilding Kubernetes images at scale with Tanzu Build Service
Building Kubernetes images at scale with Tanzu Build Service
 
Operationalizing your Virtual Network: Getting to the Next Level with SDN/NFV...
Operationalizing your Virtual Network: Getting to the Next Level with SDN/NFV...Operationalizing your Virtual Network: Getting to the Next Level with SDN/NFV...
Operationalizing your Virtual Network: Getting to the Next Level with SDN/NFV...
 
InfoQ Live - Reducing Uncertainty in Software Delivery - Building reliability...
InfoQ Live - Reducing Uncertainty in Software Delivery - Building reliability...InfoQ Live - Reducing Uncertainty in Software Delivery - Building reliability...
InfoQ Live - Reducing Uncertainty in Software Delivery - Building reliability...
 
Maximize the Value of CA Workload Automation AE (AutoSys®)
Maximize the Value of CA Workload Automation AE (AutoSys®)Maximize the Value of CA Workload Automation AE (AutoSys®)
Maximize the Value of CA Workload Automation AE (AutoSys®)
 
Implementing SRE practices: SLI/SLO deep dive - David Blank-Edelman - DevOpsD...
Implementing SRE practices: SLI/SLO deep dive - David Blank-Edelman - DevOpsD...Implementing SRE practices: SLI/SLO deep dive - David Blank-Edelman - DevOpsD...
Implementing SRE practices: SLI/SLO deep dive - David Blank-Edelman - DevOpsD...
 
Fail Fast and Win with Continuous Testing: Uri Scheiner – Jenkins World
Fail Fast and Win with Continuous Testing: Uri Scheiner – Jenkins WorldFail Fast and Win with Continuous Testing: Uri Scheiner – Jenkins World
Fail Fast and Win with Continuous Testing: Uri Scheiner – Jenkins World
 
Take Advantage of CA PPM Application Management Services
Take Advantage of CA PPM Application Management ServicesTake Advantage of CA PPM Application Management Services
Take Advantage of CA PPM Application Management Services
 
Azure Devops Build Tools for Powerapps
Azure Devops Build Tools for PowerappsAzure Devops Build Tools for Powerapps
Azure Devops Build Tools for Powerapps
 
Spring Cloud Kubernetes: An Easier Path from Idea to Production
Spring Cloud Kubernetes: An Easier Path from Idea to ProductionSpring Cloud Kubernetes: An Easier Path from Idea to Production
Spring Cloud Kubernetes: An Easier Path from Idea to Production
 
Oracle Cloud upcoming trends
Oracle Cloud upcoming trendsOracle Cloud upcoming trends
Oracle Cloud upcoming trends
 

Viewers also liked

AWSome Day 2014 Kuala Lumpur - Keynote
AWSome Day 2014 Kuala Lumpur - KeynoteAWSome Day 2014 Kuala Lumpur - Keynote
AWSome Day 2014 Kuala Lumpur - Keynote
Amazon Web Services
 
AWS Customer Presentation - mediabrands - marc dispensa
AWS Customer Presentation - mediabrands - marc dispensa AWS Customer Presentation - mediabrands - marc dispensa
AWS Customer Presentation - mediabrands - marc dispensa
Amazon Web Services
 
AWS Public Sector Symposium 2014 Canberra | Storage and Archiving options on ...
AWS Public Sector Symposium 2014 Canberra | Storage and Archiving options on ...AWS Public Sector Symposium 2014 Canberra | Storage and Archiving options on ...
AWS Public Sector Symposium 2014 Canberra | Storage and Archiving options on ...
Amazon Web Services
 
AWS Summit 2014 - Perth - Keynote
AWS Summit 2014 - Perth - KeynoteAWS Summit 2014 - Perth - Keynote
AWS Summit 2014 - Perth - Keynote
Amazon Web Services
 
AWS - Migrating Internal IT Applications
AWS - Migrating Internal IT Applications AWS - Migrating Internal IT Applications
AWS - Migrating Internal IT Applications
Amazon Web Services
 

Viewers also liked (20)

Deploy, Scale and Manage your Microsoft Investments with AWS
Deploy, Scale and Manage your Microsoft Investments with AWS Deploy, Scale and Manage your Microsoft Investments with AWS
Deploy, Scale and Manage your Microsoft Investments with AWS
 
AWSome Day 2014 Kuala Lumpur - Keynote
AWSome Day 2014 Kuala Lumpur - KeynoteAWSome Day 2014 Kuala Lumpur - Keynote
AWSome Day 2014 Kuala Lumpur - Keynote
 
AWS Customer Presentation - mediabrands - marc dispensa
AWS Customer Presentation - mediabrands - marc dispensa AWS Customer Presentation - mediabrands - marc dispensa
AWS Customer Presentation - mediabrands - marc dispensa
 
AWS Public Sector Symposium 2014 Canberra | Storage and Archiving options on ...
AWS Public Sector Symposium 2014 Canberra | Storage and Archiving options on ...AWS Public Sector Symposium 2014 Canberra | Storage and Archiving options on ...
AWS Public Sector Symposium 2014 Canberra | Storage and Archiving options on ...
 
AWS Summit 2014 - Perth - Keynote
AWS Summit 2014 - Perth - KeynoteAWS Summit 2014 - Perth - Keynote
AWS Summit 2014 - Perth - Keynote
 
Security Overview
Security Overview Security Overview
Security Overview
 
DynamoDB at HasOffers
DynamoDB at HasOffers DynamoDB at HasOffers
DynamoDB at HasOffers
 
When Clouds Collide - Session Sponsored by Datacom
When Clouds Collide - Session Sponsored by DatacomWhen Clouds Collide - Session Sponsored by Datacom
When Clouds Collide - Session Sponsored by Datacom
 
AWS Paris Summit 2014 - T1 - Startup Showcase
AWS Paris Summit 2014 - T1 - Startup ShowcaseAWS Paris Summit 2014 - T1 - Startup Showcase
AWS Paris Summit 2014 - T1 - Startup Showcase
 
(BDT307) Running NoSQL on Amazon EC2 | AWS re:Invent 2014
(BDT307) Running NoSQL on Amazon EC2 | AWS re:Invent 2014(BDT307) Running NoSQL on Amazon EC2 | AWS re:Invent 2014
(BDT307) Running NoSQL on Amazon EC2 | AWS re:Invent 2014
 
(APP202) Deploy, Manage, and Scale Your Apps with AWS OpsWorks and AWS Elasti...
(APP202) Deploy, Manage, and Scale Your Apps with AWS OpsWorks and AWS Elasti...(APP202) Deploy, Manage, and Scale Your Apps with AWS OpsWorks and AWS Elasti...
(APP202) Deploy, Manage, and Scale Your Apps with AWS OpsWorks and AWS Elasti...
 
APN Partner Webinar - AWS Marketplace & Test Drive
APN Partner Webinar - AWS Marketplace & Test DriveAPN Partner Webinar - AWS Marketplace & Test Drive
APN Partner Webinar - AWS Marketplace & Test Drive
 
(SDD414) Amazon Redshift Deep Dive and What's Next | AWS re:Invent 2014
(SDD414) Amazon Redshift Deep Dive and What's Next | AWS re:Invent 2014(SDD414) Amazon Redshift Deep Dive and What's Next | AWS re:Invent 2014
(SDD414) Amazon Redshift Deep Dive and What's Next | AWS re:Invent 2014
 
SAP HANA - The Foundation of Real Time, Now on the AWS Cloud Computing Platform
SAP HANA - The Foundation of Real Time, Now on the AWS Cloud Computing PlatformSAP HANA - The Foundation of Real Time, Now on the AWS Cloud Computing Platform
SAP HANA - The Foundation of Real Time, Now on the AWS Cloud Computing Platform
 
AWS - Migrating Internal IT Applications
AWS - Migrating Internal IT Applications AWS - Migrating Internal IT Applications
AWS - Migrating Internal IT Applications
 
DynamoDB In-depth & Developer Drill Down
DynamoDB In-depth & Developer Drill Down DynamoDB In-depth & Developer Drill Down
DynamoDB In-depth & Developer Drill Down
 
AWS Webcast - Amazon Elastic Map Reduce Deep Dive and Best Practices
AWS Webcast - Amazon Elastic Map Reduce Deep Dive and Best PracticesAWS Webcast - Amazon Elastic Map Reduce Deep Dive and Best Practices
AWS Webcast - Amazon Elastic Map Reduce Deep Dive and Best Practices
 
Bringing Governance to an Existing Cloud at NASA’s Jet Propulsion Laboratory ...
Bringing Governance to an Existing Cloud at NASA’s Jet Propulsion Laboratory ...Bringing Governance to an Existing Cloud at NASA’s Jet Propulsion Laboratory ...
Bringing Governance to an Existing Cloud at NASA’s Jet Propulsion Laboratory ...
 
Webinar AWS 201 Delivering apps without servers
Webinar AWS 201 Delivering apps without serversWebinar AWS 201 Delivering apps without servers
Webinar AWS 201 Delivering apps without servers
 
(MBL401) Social Logins for Mobile Apps with Amazon Cognito | AWS re:Invent 2014
(MBL401) Social Logins for Mobile Apps with Amazon Cognito | AWS re:Invent 2014(MBL401) Social Logins for Mobile Apps with Amazon Cognito | AWS re:Invent 2014
(MBL401) Social Logins for Mobile Apps with Amazon Cognito | AWS re:Invent 2014
 

Similar to Effective Security Response in the Cloud - Session Sponsored by Trend Micro

Similar to Effective Security Response in the Cloud - Session Sponsored by Trend Micro (20)

Successfully Migrating Business-Critical Applications to AWS - ENT401 - re:In...
Successfully Migrating Business-Critical Applications to AWS - ENT401 - re:In...Successfully Migrating Business-Critical Applications to AWS - ENT401 - re:In...
Successfully Migrating Business-Critical Applications to AWS - ENT401 - re:In...
 
Case Study: Worry Free Application Deployments...Really!
Case Study: Worry Free Application Deployments...Really!Case Study: Worry Free Application Deployments...Really!
Case Study: Worry Free Application Deployments...Really!
 
Continuous Delivery for cloud - scenarios and scope
Continuous Delivery for cloud  - scenarios and scopeContinuous Delivery for cloud  - scenarios and scope
Continuous Delivery for cloud - scenarios and scope
 
Deployment Automation for Hybrid Cloud and Multi-Platform Environments
Deployment Automation for Hybrid Cloud and Multi-Platform EnvironmentsDeployment Automation for Hybrid Cloud and Multi-Platform Environments
Deployment Automation for Hybrid Cloud and Multi-Platform Environments
 
Supercharge Your Application Delivery
Supercharge Your Application DeliverySupercharge Your Application Delivery
Supercharge Your Application Delivery
 
DevOps and Application Delivery for Hybrid Cloud - DevOpsSummit session
DevOps and Application Delivery for Hybrid Cloud  - DevOpsSummit sessionDevOps and Application Delivery for Hybrid Cloud  - DevOpsSummit session
DevOps and Application Delivery for Hybrid Cloud - DevOpsSummit session
 
Supercharge Your Application Delivery: The Journey to Enterprise PaaS
Supercharge Your Application Delivery: The Journey to Enterprise PaaSSupercharge Your Application Delivery: The Journey to Enterprise PaaS
Supercharge Your Application Delivery: The Journey to Enterprise PaaS
 
Automating your Microsoft® World - Part 2: Cloud and Application Management B...
Automating your Microsoft® World - Part 2: Cloud and Application Management B...Automating your Microsoft® World - Part 2: Cloud and Application Management B...
Automating your Microsoft® World - Part 2: Cloud and Application Management B...
 
The Cloud Adoption Program for Financial Services
The Cloud Adoption Program for Financial ServicesThe Cloud Adoption Program for Financial Services
The Cloud Adoption Program for Financial Services
 
Accelerate Application Migration - August 5, 2020
Accelerate Application Migration - August 5, 2020Accelerate Application Migration - August 5, 2020
Accelerate Application Migration - August 5, 2020
 
FSV306_Getting to Yes—Minimal Viable Cloud with Maximum Security
FSV306_Getting to Yes—Minimal Viable Cloud with Maximum SecurityFSV306_Getting to Yes—Minimal Viable Cloud with Maximum Security
FSV306_Getting to Yes—Minimal Viable Cloud with Maximum Security
 
Pivotal CF 소개
Pivotal CF 소개 Pivotal CF 소개
Pivotal CF 소개
 
Upmc tpdev5
Upmc tpdev5Upmc tpdev5
Upmc tpdev5
 
REAN Cloud DevOps Accelerators
REAN Cloud DevOps AcceleratorsREAN Cloud DevOps Accelerators
REAN Cloud DevOps Accelerators
 
Par208
Par208Par208
Par208
 
Comment déployer et gérer dans le cloud Azure les environnements de développe...
Comment déployer et gérer dans le cloud Azure les environnements de développe...Comment déployer et gérer dans le cloud Azure les environnements de développe...
Comment déployer et gérer dans le cloud Azure les environnements de développe...
 
DevOps and Cloud Tips and Techniques to Revolutionize Your SDLC
DevOps and Cloud Tips and Techniques to Revolutionize Your SDLCDevOps and Cloud Tips and Techniques to Revolutionize Your SDLC
DevOps and Cloud Tips and Techniques to Revolutionize Your SDLC
 
Gartner IT Symposium 2014 - VMware Cloud Services
Gartner IT Symposium 2014 - VMware Cloud ServicesGartner IT Symposium 2014 - VMware Cloud Services
Gartner IT Symposium 2014 - VMware Cloud Services
 
Automation, Audits, and Apps Tour
Automation, Audits, and Apps TourAutomation, Audits, and Apps Tour
Automation, Audits, and Apps Tour
 
Scaling DevOps from Ground Zero to Enterprise
Scaling DevOps from Ground Zero to EnterpriseScaling DevOps from Ground Zero to Enterprise
Scaling DevOps from Ground Zero to Enterprise
 

More from Amazon Web Services

Tools for building your MVP on AWS
Tools for building your MVP on AWSTools for building your MVP on AWS
Tools for building your MVP on AWS
Amazon Web Services
 
How to Build a Winning Pitch Deck
How to Build a Winning Pitch DeckHow to Build a Winning Pitch Deck
How to Build a Winning Pitch Deck
Amazon Web Services
 
Building a web application without servers
Building a web application without serversBuilding a web application without servers
Building a web application without servers
Amazon Web Services
 
AWS_HK_StartupDay_Building Interactive websites while automating for efficien...
AWS_HK_StartupDay_Building Interactive websites while automating for efficien...AWS_HK_StartupDay_Building Interactive websites while automating for efficien...
AWS_HK_StartupDay_Building Interactive websites while automating for efficien...
Amazon Web Services
 

More from Amazon Web Services (20)

Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...
Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...
Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...
 
Big Data per le Startup: come creare applicazioni Big Data in modalità Server...
Big Data per le Startup: come creare applicazioni Big Data in modalità Server...Big Data per le Startup: come creare applicazioni Big Data in modalità Server...
Big Data per le Startup: come creare applicazioni Big Data in modalità Server...
 
Esegui pod serverless con Amazon EKS e AWS Fargate
Esegui pod serverless con Amazon EKS e AWS FargateEsegui pod serverless con Amazon EKS e AWS Fargate
Esegui pod serverless con Amazon EKS e AWS Fargate
 
Costruire Applicazioni Moderne con AWS
Costruire Applicazioni Moderne con AWSCostruire Applicazioni Moderne con AWS
Costruire Applicazioni Moderne con AWS
 
Come spendere fino al 90% in meno con i container e le istanze spot
Come spendere fino al 90% in meno con i container e le istanze spot Come spendere fino al 90% in meno con i container e le istanze spot
Come spendere fino al 90% in meno con i container e le istanze spot
 
Open banking as a service
Open banking as a serviceOpen banking as a service
Open banking as a service
 
Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...
Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...
Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...
 
OpsWorks Configuration Management: automatizza la gestione e i deployment del...
OpsWorks Configuration Management: automatizza la gestione e i deployment del...OpsWorks Configuration Management: automatizza la gestione e i deployment del...
OpsWorks Configuration Management: automatizza la gestione e i deployment del...
 
Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads
Microsoft Active Directory su AWS per supportare i tuoi Windows WorkloadsMicrosoft Active Directory su AWS per supportare i tuoi Windows Workloads
Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads
 
Computer Vision con AWS
Computer Vision con AWSComputer Vision con AWS
Computer Vision con AWS
 
Database Oracle e VMware Cloud on AWS i miti da sfatare
Database Oracle e VMware Cloud on AWS i miti da sfatareDatabase Oracle e VMware Cloud on AWS i miti da sfatare
Database Oracle e VMware Cloud on AWS i miti da sfatare
 
Crea la tua prima serverless ledger-based app con QLDB e NodeJS
Crea la tua prima serverless ledger-based app con QLDB e NodeJSCrea la tua prima serverless ledger-based app con QLDB e NodeJS
Crea la tua prima serverless ledger-based app con QLDB e NodeJS
 
API moderne real-time per applicazioni mobili e web
API moderne real-time per applicazioni mobili e webAPI moderne real-time per applicazioni mobili e web
API moderne real-time per applicazioni mobili e web
 
Database Oracle e VMware Cloud™ on AWS: i miti da sfatare
Database Oracle e VMware Cloud™ on AWS: i miti da sfatareDatabase Oracle e VMware Cloud™ on AWS: i miti da sfatare
Database Oracle e VMware Cloud™ on AWS: i miti da sfatare
 
Tools for building your MVP on AWS
Tools for building your MVP on AWSTools for building your MVP on AWS
Tools for building your MVP on AWS
 
How to Build a Winning Pitch Deck
How to Build a Winning Pitch DeckHow to Build a Winning Pitch Deck
How to Build a Winning Pitch Deck
 
Building a web application without servers
Building a web application without serversBuilding a web application without servers
Building a web application without servers
 
Fundraising Essentials
Fundraising EssentialsFundraising Essentials
Fundraising Essentials
 
AWS_HK_StartupDay_Building Interactive websites while automating for efficien...
AWS_HK_StartupDay_Building Interactive websites while automating for efficien...AWS_HK_StartupDay_Building Interactive websites while automating for efficien...
AWS_HK_StartupDay_Building Interactive websites while automating for efficien...
 
Introduzione a Amazon Elastic Container Service
Introduzione a Amazon Elastic Container ServiceIntroduzione a Amazon Elastic Container Service
Introduzione a Amazon Elastic Container Service
 

Recently uploaded

Recently uploaded (20)

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivity
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organization
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day Presentation
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
 
08448380779 Call Girls In Diplomatic Enclave Women Seeking Men
08448380779 Call Girls In Diplomatic Enclave Women Seeking Men08448380779 Call Girls In Diplomatic Enclave Women Seeking Men
08448380779 Call Girls In Diplomatic Enclave Women Seeking Men
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a Fresher
 
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
 
Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Script
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men
 
What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 

Effective Security Response in the Cloud - Session Sponsored by Trend Micro

  • 1. Effec%ve Security Response in the Cloud Greg Boyle, Director, Strategic Business and Alliances Trend Micro
  • 2.
  • 3. AWS A infrastructure plaKorm defined as Low cost Agile & ElasPc Open & Flexible Secure * hAp://aws.amazon.com/about-­‐aws/ © 2014, Trend Micro Inc.
  • 4. The movement DevOps is a technology movement for and your company doesn’t need to worry about it © 2014, Trend Micro Inc. right? asked ironically by Peter Waterhouse, InformaPon Week, 31-­‐Mar-­‐2014 hAp://www.informaPonweek.com/soYware/enterprise-­‐applicaPons/busPng-­‐5-­‐devops-­‐myths/d/d-­‐id/1141597
  • 5. © 2014, Trend Micro Inc. Development OperaPons Driving change
  • 6. © 2014, Trend Micro Inc. Development OperaPons + Driving change
  • 7. Driving change © 2014, Trend Micro Inc. New goals Breakdown silos Directly align with business Rapidly deploy & iterate DevOps
  • 8. © 2014, Trend Micro Inc. Security needs to keep pace Our Challenge
  • 9.
  • 10. You FaciliPes Physical Security Physical Infrastructure Network Infrastructure VirtualisaPon Infrastructure © 2014, Trend Micro Inc. OperaPng System ApplicaPon Account Management The tradiPonal responsibility model
  • 11. AWS FaciliPes Physical Security Physical Infrastructure Network Infrastructure VirtualisacPon Infrastructure © 2014, Trend Micro Inc. You OperaPng System ApplicaPon Account Management Security Groups Network ConfiguraPon Shared Responsibility model
  • 12. © 2014, Trend Micro Inc. Applied at the boundary Operator TradiPonal Security
  • 13. © 2014, Trend Micro Inc. Applied to each instance Cloud defences VPC VPC VPC
  • 14. New challenges © 2014, Trend Micro Inc. Deployment Management
  • 15. © 2014, Trend Micro Inc. Leverage exisPng distribuPon channels Addressing the challenges -­‐ deployment
  • 16. © 2014, Trend Micro Inc. Recommended choices AWS OpsWorks Chef Puppet Salt Deployment channels
  • 17. © 2014, Trend Micro Inc. Centralise control management Addressing the challenges -­‐ management
  • 18. © 2014, Trend Micro Inc. In acPon Our challenge
  • 19.
  • 20.
  • 21. © 2014, Trend Micro Inc. On the clock Our challenge
  • 22. SANS incident response process PreparaPon IdenPficaPon Containment EradicaPon Recovery Lessons Learned © 2014, Trend Micro Inc.
  • 23. © 2014, Trend Micro Inc. Server Analyse Defend Verify Adjust Replacement TradiPonal process
  • 24. © 2014, Trend Micro Inc. Instance Replacement Defend Analyse Verify Adjust Cloud process
  • 25. Cloud process – automaPon requirements Need to automate isolaPon © 2014, Trend Micro Inc. Instance Replacement Defend Analyse Verify Adjust
  • 26. © 2014, Trend Micro Inc. Instance Replacement 1. Monitor the log stream API 2. Call the AWS API to isolate the instance Cloud process -­‐ soluPon
  • 27. © 2014, Trend Micro Inc. In acPon Our Challenge
  • 28.
  • 29. Cloud process © 2014, Trend Micro Inc. Instance Replacement Defend Analyse Verify Adjust
  • 30.
  • 31. © 2014, Trend Micro Inc. Piggyback on provisioning Central management AutomaPon Keys to success
  • 32. Thank you. Learn more at hAp://trendmicro.com/aws