Trust and Identity Management in Cloud Security (Business Software Alliance Cyber Security Forum)

European Cyber Security Awareness Day Cloud Security Panel
Tim Brown
SVP Distinguished Engineer
Chief Architect Security Management
13 April, 2010

Market Undergoing a Transition to “Elastic” IT
2
Automation
SaaS, IaaS, PaaS, Virtualization, SOA
Enablement
WWW
Prevention
Client Server
Secure Platform/ Dumb Terminal
The Cloud
Elastic
Self-provisioning
Pay per use
Virtualized
Simplified
Web 2.0
Collaborative
Mobile
Dynamic
Distributedx86 Computing
87.5% rate cloud security issues as
“very significant” IDC Survey 2009
Mainframe
Source: IDC Enterprise Panel, 3Q09, n = 263, September 2009

Trust is critical in the Cloud
How to choose a provider?
Embrace and Enable
Identities are critical
User ID and Password are not enough
Strong authentication
Claims based Identity
Open Identity, InfoCard
Trust Models (OIX, Kantara)
Validated Identity
Federation
Auditing and tracking
3

Understand the risks, create complete compliance plans and include compliance for your cloud vendors
Closely scrutinize contracts and SLA’s
Become an auditor:
Implement an inspection program
Test the SLA’s
Trust the contracts but continually verify
Independently audit critical systems
Manage identities roles and relationships:
Utilize Identity Systems, do not reinvent new ones
Cloud brings together complex systems and allows for more collaboration. More collaboration requires more control
Simple role systems will not be sufficient - dynamic roles are necessary
Move security closer to the data
Encrypt sensitive data and manage keys appropriately
Utilize DLP to safeguard and tag sensitive data
4
8 Things to consider as you move to the Cloud

Do not recreate the issues of the past:
Make security a foundational component
Insist on built-in Security and transparency
Utilize appropriate Identities - Complete anonymity in the cloud is not appropriate
Cloud Security is in its infancy. Continue to watch for technology advancement. Old Security Systems will morph and new ones will be created to address security in the cloud
Look for new ways to collaborate about threats. In this interconnected world public private partnerships to share data are critical
5
8 Things to consider as you move to the Cloud

Questions?
Tim Brown
SVP Distinguished Engineer
Chief Architect Security Management
13 April, 2010

Trust and Identity Management in Cloud Security (Business Software Alliance Cyber Security Forum)

by CA Technologies on Apr 13, 2010

Accessibility

Tags

Upload Details

Usage Rights

2 Embeds 27

Statistics

Trust and Identity Management in Cloud Security (Business Software Alliance Cyber Security Forum) — Presentation Transcript

http://www.slideshare.net	25
http://facebook.slideshare.com	2