Transforming security part 1 - Cloud and virtualization

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

SESSION ID:SESSION ID:
#RSAC
Tom Corn
Transforming Security Part 1:
Cloud & Virtualization
SPO1-R10
Senior Vice President,...

GLASS. WOOD.
CONCRETE.

THE PLANNING
PHASE
DEVELOPMENT
PHASE
FUNCTIONAL
TEST
GENERAL
AVAILABILITY

THE PLANNING
PHASE
DEVELOPMENT
PHASE
FUNCTIONAL
TEST
GENERAL
AVAILABILITY

DAY 2
OPERATIONS

THREAT
THREAT
THREAT THREAT
THREAT
THREAT

11
YOUR CRITICAL APPLICATION
IS YOUR BABY

From Monolithic Stack
to Distributed Apps

The Application is a Network

Securing the Infrastructure
PERIMETER SECURITY

The Impact of Architectural Shifts on Security
PERIMETER SECURITY

The Impact of Architectural Shifts on Security
PERIMETER SECURITY

18
Misalignment
Security Policies Security Controls
APPS DATA COMPUTE NETWORK

Propagation Extraction ExfiltrationInfiltration
Attack vector/malware
Delivery mechanism
Entry point compromise
Escalate p...

Propagation Extraction
Escalate privileges
Install C2* infrastructure
Lateral movement
Break into data stores
Network eave...

The Only Thing Outpacing Growth in Security
Spend is Growth in Security Breaches
IT Spend Security Spend Security Breaches...

22
We need to align controls and
policies to the application
Security Policies
APPS DATA
Security Controls
COMPUTE NETWORK...

23
Application
We need to establish least
privilege environments

“Every program and every privileged
user of the system should operate using
the least amount of privilege necessary
to com...

Least Privilege Is More Than Just Blocking
Propagation Extraction ExfiltrationInfiltration
Attack vector/malware
Delivery ...

Least Privilege Is More Than Just Blocking
Propagation Extraction
Application
Network
Data Plane

Least Privilege Is More Than Just Blocking
Static
Course Grained
Dynamic
Fine Grained
Prevent
Detect
Respond
Application
N...

28
• Highly complex and noisy
• Exposed, i.e., untrusted monitoring, limited context
• Manual and lacking orchestration
Fr...

29
To a new model
Focused on good (intended) behavior
• Simpler and smaller problem set
• Better signal to noise ratio
• A...

Why Haven’t We Done This Already?
APPLICATION
UNDERSTANDING
INFRASTRUCTURE
ALIGNMENT
DATACENTER
DYNAMICS
Application conte...

What does this have to do with
virtualization and cloud?

It Provides an Abstraction Layer Between I/F and Apps

Unique Properties of the Virtualization Layer
It’s in a unique position to see both Intentional and Runtime State
Intended...

Unique Properties of the Virtualization Layer
It’s in a unique position to understand the infrastructure and control topol...

Unique Properties of the Virtualization Layer
It’s in a unique position to maintain this alignment as the datacenter and a...

Unique Properties of the Virtualization Layer
It’s in a unique position to deliver a high degree of automation
Topology Al...

Unique Properties of the Virtualization Layer
It’s in a unique position to deliver isolation: maintain a separate trust do...

Isolation
We can leverage the unique
properties of cloud and virtualization to
secure critical applications
Application To...

VMVM
VMVM
APP
VMVM
VMVM
APP
VMVM
VMVM
APP
Software-Defined Security

Attack Vectors
Application
Data Plane
Network

Attack Vectors

Traditional Segmentation

Micro-Segmentation
FW
FW
DB
WEB
APP
APP
APP

Attack Vectors

What About Exposure from the Physical Underlay?
Listening Inserting
DB
WEB
APP
APP
APP

You Can Solve that with Encryption
…. But that turns out to be enormously complex
DB
WEB
APP
APP
APP

Encryption as a Distributed Service
DB
WEB
APP
APP
APP

Application-Focused Least Privilege

The Application as a System of Components
Processes
Security Agents / Monitoring
OS
Inbound
Communications
Outbound
Commun...

Least Privilege for the Application Layer
Detection and Response
Intentional State
Intended State Runtime State

Least Privilege for the Application Layer
Detection and Response
Intentional State
Infrastructure Events
(vRA, vCenter, NS...

Least Privilege for the Application Layer
Detection and Response
Intentional State
Untrusted Zone (Guest)
Processes
Securi...

Least Privilege for the Application Layer
Detection and Response
al State
Untrusted Zone (Guest)
Processes
Security Agents...

Least Privilege for the Application Layer
Detection and Response
al State
Untrusted Zone (Guest)
Processes
Security Agents...

Least Privilege for the Application Layer
Detection and Response
al State Remediation
Untrusted Zone (Guest)
Processes
Sec...

Least Privilege for the Application Layer
st)
ring
Outbound
Communications
)
tion Remediation

Least Privilege for the Application Layer
Intentional State Remediation
Untrusted Zone (Guest)
Processes
Security Agents /...

Extending the Concept to the Security Ecosystem
Intentional State Remediation
Trusted Zone (Kernel)
Virtual Enclave
Runtim...

The Future of Software-Defined Security
Correlation/AnalyticsGovernance, Risk & Compliance
Network Security Controls Data ...

Propagation Extraction ExfiltrationInfiltration
Attack vector/malware
Delivery mechanism
Entry point compromise
Escalate p...

Propagation Extraction
Escalate privileges
Install C2* infrastructure
Lateral movement
Break into data stores
Network eave...

Propagation Extraction
Escalate privileges
Install C2* infrastructure
Lateral movement
Break into data stores
Network eave...

How do you secure
virtualization?
How do you use virtualization
to secure?

64
Practitioners Vendors Cloud Infrastructure
What will you deliver next?

SESSION ID:SESSION ID:
#RSAC
Tom Corn
Transforming Security Part 1:
Cloud & Virtualization
SPO1-R10
Senior Vice President,...

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1063109 views
Storytelling For The Web: Integrate... by Chiara Aliotta 981811 views
Artificial Intelligence, Data and C... by OECD Directorate ... 923520 views
How to Leverage AI to Boost Employe... by SocialHRCamp 392340 views
2024 State of Marketing Report – by... by Marius Sescu 221896 views
Everything You Need To Know About C... by Expeed Software 237729 views

View on Slideshare

1 of 65 Ad

View on Slideshare

1 of 65 Ad