AWS Summit 2014 Perth - Breakout 2 The cloud is a highly dynamic environment that changes the way organisations need to think about security, underpinned by the shared security model. Learn how to increase the effectiveness of your security response as you move to the cloud. We'll discuss how to leverage features in AWS and our security tools to reduce downtime with minimal impact to your security and business operations. Pulling from experiences helping clients move to the cloud, this talk will help provide practical advice you can apply today. Presenter: Greg Boyle, Director, Strategic Business and Alliances, Trend Micro ANZ

1. Effec%ve'Security'Response'in'the'Cloud'
Greg%Boyle,%Director,%Strategic%Business%and%Alliances%
Trend%Micro%

3. AWS%
A%infrastructure%plaKorm%defined%as%
Low%cost%
Agile%&%ElasPc%
Open%&%Flexible%
Secure%
*%hAp://aws.amazon.com/aboutIaws/%
©%2014,%Trend%Micro%Inc.%

4. The%movement%
DevOps%is%a%technology%movement%for%
and%your% %company%doesn’t%need%to%%
worry%about%it%
©%2014,%Trend%Micro%Inc.%
right?
asked%ironically%by%Peter%Waterhouse,%InformaPon%Week,%31IMarI2014%
hAp://www.informaPonweek.com/soYware/enterpriseIapplicaPons/busPngI5IdevopsImyths/d/dIid/1141597%

5. Driving%change%
©%2014,%Trend%Micro%Inc.%
Development% OperaPons%

6. Driving%change%
©%2014,%Trend%Micro%Inc.%
+%
Development% OperaPons%

7. Driving%change%
©%2014,%Trend%Micro%Inc.%
New%goals%
Breakdown%silos%
Directly%align%with%business%
Rapidly%deploy%&%iterate%
DevOps%

8. ©%2014,%Trend%Micro%Inc.%
Security%needs%to%keep%pace%
Our%Challenge%

10. You'
FaciliPes%
Physical%Security%
Physical%Infrastructure%
Network%Infrastructure%
VirtualisaPon%Infrastructure%
©%2014,%Trend%Micro%Inc.%
%%
OperaPng%System%
ApplicaPon%
Account%Management%
The%tradiPonal%responsibility%model%

11. AWS'
FaciliPes%
Physical%Security%
Physical%Infrastructure%
Network%Infrastructure%
VirtualisacPon%Infrastructure%
©%2014,%Trend%Micro%Inc.%
You'
OperaPng%System%
ApplicaPon%
Account%Management%
Security%Groups%
Network%ConfiguraPon%
Shared%Responsibility%model%

12. ©%2014,%Trend%Micro%Inc.%
Applied%at%the%boundary%
Operator%
TradiPonal%Security%

13. ©%2014,%Trend%Micro%Inc.%
Applied%to%each%instance%
Cloud%defences%
VPC'
VPC'
VPC'

14. New%challenges%
©%2014,%Trend%Micro%Inc.%
Deployment% Management%

15. ©%2014,%Trend%Micro%Inc.%
Leverage%exisPng%distribuPon%channels%
Addressing%the%challenges%I%deployment%

16. ©%2014,%Trend%Micro%Inc.%
Recommended'choices'
AWS%OpsWorks%
Chef%
Puppet%
Salt%
Deployment%channels%

17. ©%2014,%Trend%Micro%Inc.%
Centralise%control%management%
Addressing%the%challenges%I%management%

18. ©%2014,%Trend%Micro%Inc.%
In%acPon%
Our%challenge%

20. ©%2014,%Trend%Micro%Inc.%
On%the%clock%
Our%challenge%

21. SANS%incident%response%process%
PreparaPon%
IdenPficaPon%
Containment%
EradicaPon%
Recovery%
Lessons%Learned%
©%2014,%Trend%Micro%Inc.%

22. TradiPonal%process%
©%2014,%Trend%Micro%Inc.%
Server%
Defend% Replacement%
Analyse% Verify% Adjust%

23. ©%2014,%Trend%Micro%Inc.%
Instance%
Replacement% Defend%
Analyse% Verify% Adjust%
Cloud%process%

24. Cloud%process%–%automaPon%requirements%
Need%to%automate%
isolaPon%
©%2014,%Trend%Micro%Inc.%
Instance%
Replacement% Defend%
Analyse% Verify% Adjust%

25. ©%2014,%Trend%Micro%Inc.%
Instance% Replacement%
1.%Monitor%the%%
log%stream%
API%
2.%Call%the%AWS%API%to%
%isolate%the%instance%
Cloud%process%I%soluPon%

26. ©%2014,%Trend%Micro%Inc.%
In%acPon%
Our%Challenge%

27. Cloud%process%
©%2014,%Trend%Micro%Inc.%
Instance%
Replacement% Defend%
Analyse% Verify% Adjust%

29. ©%2014,%Trend%Micro%Inc.%
Piggyback%on%provisioning%
Central%management%
AutomaPon%
Keys%to%success%

30. Thank'you.' Learn%more%at%hAp://trendmicro.com/aws%

31. © 2014 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified, or distributed in whole or in part without the express consent of Amazon.com, Inc.