Slides from solution architect Mark Thomas' talk at Cloud Expo Europe 2014.

1. Practical methods to
improve your security
in the cloud

2. WHO WE ARE
Mark Thomas
Solutions Architect
Formerly Director of Cloud Professional
Services, EMEA at Virtustream, Mark is the
Solutions Architect at Databarracks. An
expert in cloud technology, data centre
infrastructure and virtualisation, Mark has
worked with major clients such as HSBC,
Field Fisher Waterhouse and Allied Irish
Bank.
www.databarracks.com | 2

3. About Databarracks
Secure & Compliant
• Nuclear bunker data centre,
certified & accredited
High Performance &
Flexibility
• Pedigree and
understanding of storage
www.databarracks.com | 3

4. Databarracks customers
www.databarracks.com | 4

5. Security – from the
service provider

6. Data centres & locations
www.databarracks.com | 6

7. Certifications
• Externally audited yearly
• Penetration tested yearly
www.databarracks.com | 7

8. This is what we do –
but what can you
do?

9. Pen Testing
Supplier testing
Your own testing
• Required for supplier
compliance
• May be required for your
specific compliance
• Testing of the entire
platform
• Test your exact servers
www.databarracks.com | 9

10. Access
THIS IS OFTEN THE
WEAKEST LINK
Federation
• Integrating your AD into access
• Manage access across multiple clouds
• Works for IaaS, PaaS & SaaS
www.databarracks.com | 10

11. Access
2 factor authentication
• Knowledge factor
• Possession factor
• Again – IaaS, PaaS & SaaS
This is now very common –
online banking and even Gmail use it
= LESS RESISTANCE
FROM USERS
www.databarracks.com | 11

12. Firewalls
(Just for Infrastructure as a Service)
• Ring-fence your environment
• Advanced intrusion detection & prevention
www.databarracks.com | 12

13. Encryption
What, where and when?
•
•
•
•
VPNs
Arrays
Files within the VM
The entire VM
www.databarracks.com | 13

14. Encryption
VPN
•
•
•
•
Why?
Why not?
Already doing it?
Can I do it myself?
www.databarracks.com | 14

15. Encryption
Array encryption
•
•
•
•
Why?
Why not?
Already doing it?
Can I do it myself?
www.databarracks.com | 15

16. Encryption
Files within the VMs
•
•
•
•
Why?
Why not?
Already doing it?
Can I do it myself?
www.databarracks.com | 16

17. Encryption
The entire VM
•
•
•
•
Why?
Why not?
Already doing it?
Can I do it myself?
www.databarracks.com | 17

18. Can you take an
unsecured cloud
and make it
secure?

19. Thank you