AWS Summit 2014 Brisbane - Breakout 2 Sponsor Session The cloud is a highly dynamic environment that changes the way organisations need to think about security, underpinned by the shared security model. Learn how to increase the effectiveness of your security response as you move to the cloud. We'll discuss how to leverage features in AWS and our security tools to reduce downtime with minimal impact to your security and business operations. Pulling from experiences helping clients move to the cloud, this talk will help provide practical advice you can apply today. Presenter: Greg Boyle, Director, Strategic Business and Alliances, Trend Micro ANZ

1. Effec%ve
Security
Response
in
the
Cloud
Greg
Boyle,
Director,
Strategic
Business
and
Alliances
Trend
Micro

3. ©
2014,
Trend
Micro
Inc.
*
hAp://aws.amazon.com/about-­‐aws/
A
infrastructure
plaKorm
defined
as
Low
cost
Agile
&
ElasPc
Open
&
Flexible
Secure
AWS

4. ©
2014,
Trend
Micro
Inc.
and
your
company
doesn’t
need
to
worry
about
it
asked
ironically
by
Peter
Waterhouse,
InformaPon
Week,
31-­‐Mar-­‐2014
hAp://www.informaPonweek.com/soYware/enterprise-­‐applicaPons/busPng-­‐5-­‐devops-­‐myths/d/d-­‐id/1141597
DevOps
is
a
technology
movement
for
right?
The
movement

5. ©
2014,
Trend
Micro
Inc.
Development
OperaPons
Driving
change

6. ©
2014,
Trend
Micro
Inc.
Development
OperaPons
+
Driving
change

7. ©
2014,
Trend
Micro
Inc.
New
goals
Breakdown
silos
Directly
align
with
business
Rapidly
deploy
&
iterate
DevOps
Driving
change

8. ©
2014,
Trend
Micro
Inc.
Security
needs
to
keep
pace
Our
Challenge

10. ©
2014,
Trend
Micro
Inc.
You
FaciliPes
Physical
Security
Physical
Infrastructure
Network
Infrastructure
VirtualisaPon
Infrastructure
OperaPng
System
ApplicaPon
Account
Management
The
tradiPonal
responsibility
model

11. ©
2014,
Trend
Micro
Inc.
AWS
FaciliPes
Physical
Security
Physical
Infrastructure
Network
Infrastructure
VirtualisacPon
Infrastructure
You
OperaPng
System
ApplicaPon
Account
Management
Security
Groups
Network
ConfiguraPon
Shared
Responsibility
model

12. ©
2014,
Trend
Micro
Inc.
Applied
at
the
boundary
Operator
TradiPonal
Security

13. ©
2014,
Trend
Micro
Inc.
Applied
to
each
instance
Cloud
defences
VPC
VPC
VPC

14. ©
2014,
Trend
Micro
Inc.
Management
Deployment
New
challenges

15. ©
2014,
Trend
Micro
Inc.
Leverage
exisPng
distribuPon
channels
Addressing
the
challenges
-­‐
deployment

16. ©
2014,
Trend
Micro
Inc.
Recommended
choices
AWS
OpsWorks
Chef
Puppet
Salt
Deployment
channels

17. ©
2014,
Trend
Micro
Inc.
Centralise
control
management
Addressing
the
challenges
-­‐
management

18. ©
2014,
Trend
Micro
Inc.
In
acPon
Our
challenge

20. ©
2014,
Trend
Micro
Inc.
On
the
clock
Our
challenge

21. ©
2014,
Trend
Micro
Inc.
PreparaPon
IdenPficaPon
Containment
EradicaPon
Recovery
Lessons
Learned
SANS
incident
response
process

22. ©
2014,
Trend
Micro
Inc.
Server
Analyse
Verify
Adjust
Replacement
Defend
TradiPonal
process

23. ©
2014,
Trend
Micro
Inc.
Instance
Analyse
Verify
Adjust
Defend
Replacement
Cloud
process

24. ©
2014,
Trend
Micro
Inc.
Need
to
automate
isolaPon
Cloud
process
–
automaPon
requirements
Instance
Analyse
Verify
Adjust
Defend
Replacement

25. ©
2014,
Trend
Micro
Inc.
Instance
Replacement
1.
Monitor
the
log
stream
API
2.
Call
the
AWS
API
to
isolate
the
instance
Cloud
process
-­‐
soluPon

26. ©
2014,
Trend
Micro
Inc.
In
acPon
Our
Challenge

28. ©
2014,
Trend
Micro
Inc.
Cloud
process
Instance
Analyse
Verify
Adjust
Defend
Replacement

30. ©
2014,
Trend
Micro
Inc.
Piggyback
on
provisioning
Central
management
AutomaPon
Keys
to
success

31. Thank
you.
Learn
more
at
hAp://trendmicro.com/aws