Spider & F5 Round Table - Secure the Cloud Data Center with eMind
•
1 like•490 views
Emind Systems is a cloud expert system integrator and managed service provider that helps customers build ultra secure data centers on Amazon Web Services. They provide dedicated cloud architects, DevOps teams, and 24/7 support to help customers achieve security, availability, and compliance requirements. Emind follows best practices for access management, traffic control, anomaly detection, data protection, centralized logging, and ongoing security lifecycle management to deliver a highly secure cloud environment for customers on AWS.
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (13)
Similar to Spider & F5 Round Table - Secure the Cloud Data Center with eMind
Similar to Spider & F5 Round Table - Secure the Cloud Data Center with eMind (20)
More from Tzoori Tamam
More from Tzoori Tamam (6)
Recently uploaded
Recently uploaded (20)
Spider & F5 Round Table - Secure the Cloud Data Center with eMind
- 1. Ultra Secure Data Center on Amazon Cloud Lahav Savir, Architect & CEO Emind systems Ltd. lahavs@emind.co
- 2. Emind Systems • Cloud expert system integrator • Dedicated Cloud Architects • Dedicated DevOps teams • 24x7 SLA powered by DevOps Specialists • ~100 AWS customers • Partnerships with leading cloud vendors
- 4. Overview of Amazon Web Services 2:46 Minutes video
- 5. AWS Intro
- 6. Architected for Enterprise Security Requirements “The Amazon Virtual Private Cloud [Amazon VPC] was a unique option that offered an additional level of security and an ability to integrate with other aspects of our infrastructure.” Dr. Michael Miller, Head of HPC for R&D
- 7. Shared Responsibility for Security & Compliance Facilities Physical Security Compute Infrastructure Storage Infrastructure Network Infrastructure Virtualization Layer Operating System Applications Security Groups Firewalls Network Configuration Account Management + = Customer
- 8. What is secure data center ? • Isolated • Controlled • Firewalled • Secure access – VPN – SSL • IDS & IPS • Antivirus • Audited • User management – One time password • Data encryption • Frequent updates • Configuration analysis • Regulatory compliance • One spot for monitoring – Centralized alerts
- 10. Access Management • Control the data flow – AWS VPC – ACL – Routing – Handle all in/out traffic • Firewall – F5 Firewall – VPC Security groups • Identity access management – One-time-password – AWS IAM with MFA – F5 Access Policy Management
- 11. ACL & Routing in the VPC
- 12. F5 APM
- 14. Traffic Control • Web Applications Security • Log in / out traffic • Terminate encrypted connection • Sanitize in / out packets – Real-time decisions – Accept / reject connections – Rate limiting
- 16. Anomalies detection • Host-based IDS – Detect configuration changes – Track running processes – Track file integrity & access – Resource access – Detect abnormal behaviors • OS hardening • App cleanup
- 18. Data Protection • In-flight – SSL encryption – IPSec • In-rest – Storage level encryption – Data base encryption
- 20. Central log • Need to aggregate – VPN access logs – Traffic audit logs – Network IDS logs – Host IDS logs – Anti virus logs • Detect patterns
- 21. Security lifecycle management • Ongoing discovery & analysis – Access – Traffic – IDS – Anti virus – Encryption keys • Act on analysis results • Reveal and solve settings • Make them all orchestrate together !
Editor's Notes
- You might have questions about security in the cloud, but our biggest and most conservative customers have found that we’re able to meet their security requirements, and often we can provide a better security profile than what they can deliver internally. Our focus and investment in security, and the fact that we incorporate requirements from our most security conscious customers which then benefit all of the customers on our platform allows us to offer an effective approach to meeting enterprise security requirements. We encourage you to dig deeper with our security white paper, and would be happy to help you get the information you need to feel confident in our security capabilities and options.
- There’s a shared responsibility to accomplish security and compliance objectives in AWS cloud. There are some elements that AWS takes responsibility for, and others that the customer must address. The outcome of the collaborative approach is positive results seen by customers around the world.