1.
CloudSec The real voyage of discovery consists in having new eyes . Marcel Proust

2.
Kris Buytaert <ul><li>Senior Linux and Open Source Consultant @inuits.be

3.
„ Infrastructure Architect“

4.
Building Clouds since 2004

5.
Surviving the 10 th floor test

6.
Co-Author Virtualization with Xen

7.
Guest Editor at Virtualization.com </li></ul>

8.
The Cloud ? Cloud computing refers to the use of Internet (&quot;cloud&quot;) based computer technology for a variety of services. It is a style of computing in which dynamically scalable and often virtualised resources are provided as a service over the Internet. The concept incorporates software as a service (SaaS), Web 2.0 and other recent, well-known technology trends, in which the common theme is reliance on the Internet for satisfying the computing needs of the users.

9.
SAAS <(>) Cloud PAAS <(>) Cloud IAAS > Cloud

10.
Cloud and Open Source <ul><li>Xen

11.
Enomalism

12.
openQRM

13.
OpenNebula

14.
SnowFlock

15.
Eucalyptus

16.
ScalR </li></ul><ul><li>Python (Google AppEng)

17.
Puppet

18.
Chef

19.
Hadoop

20.
MemcacheD </li></ul>

21.
Cloud and Open Source Imagine having to pay software licenses for machines that have only lived 1 hour. And 10000 of them each month

22.
The Cloud in 2005 for host in `seq 1 10000` create_vhost { Create LVM partitions Chroot Rsync Configure }

23.
CloudSec <ul><li>Deploying in an untrusted domain </li><ul><li>This is not your average DMZ

24.
You don't even own the Vhost </li></ul><li>Cloud Datacenters Attrackt Attackers </li><ul><li>Identical Hypervisors => Only 1 exploit needed

25.
Cloud Hijacking </li></ul><li>Pre and Post Deployment </li><ul><li>What was there and what stays behind ? </li></ul></ul>

26.
What changed with Cloud ? <ul><li>Deployment Methods

27.
Scale </li><ul><li>1 physical machine => MANY VM's

28.
Deploy on demand </li></ul><li>The Network stack </li><ul><li>System vs Network vs Virtualization

29.
Who's network is this anyhow ? </li></ul></ul>

30.
What changed with Cloud ? Involvement of IT, or the lack thereof!

31.
Flux and Scale <ul><li>Can Traditional HIDS follow the quick changing state of Hosts ?

32.
My HA Clusters, are Active Passive, Active Active, or N+M too. Their state is in constant flux too

33.
The role Config Management and Platform Automation grows every second. </li></ul>

34.
Static Security was DEAD before Virtualization Cloud <ul><li>High Availability Clusters

35.
VM Relocation

36.
Live Migration

37.
Rapid ReDeployment

38.
Multiple Instances of a service </li></ul>

39.
Image Sprawl, your update nightmare <ul><li>Image sprawl </li><ul><li>Copy VM, Deploy VM, Modify VM, Copy VM </li></ul><li>How do you patch 1 VM ?

40.
Did you patch before or after that one was copied ?

41.
How do you patch 100 VM's ?

42.
What about machines that are offline ? </li></ul>

43.
Image Sprawl, your update nightmare The biggest challenges we have in virtualization cloud are operational and organizational rather than technical. Christofer Hoff

44.
For better nights <ul><li>Automate Deployment

45.
Implement Configuration Management

46.
Map Security management to Config Mgmt </li></ul><ul><li>Prepare to Survive the 10 th floor test ! </li></ul>

47.
Security Advise <ul><li>Increase security as never before

48.
Encrypt all inter Vhost traffic

49.
FireWall as Never before

50.
Don't store critical data in the cloud </li><ul><li>Use it for analytics

51.
Workload offload

52.
Volatile data </li></ul><li>Build your own Private Cloud </li></ul>

53.
Security still isn't a product you can buy It's not even a process It's a lifestyle

54.
` Kris Buytaert < [email_address] > Further Reading http://www.krisbuytaert.be/blog/ http://www.inuits.be/ http://www.virtualization.com/ http://www.oreillygmt.com/ ? !

55.
SaaSSec <ul><li>One Vendor

56.
Full control over </li><ul><li>His application

57.
His application stack </li></ul><li>Supposed to manage his platform in Secure Fashion

58.
But do you TRUST him ? </li></ul>