Clouds And Security

Cloud Computing = .COM 2.0? Predrag Mitrovic, CISSP, CISM, Author [email_address]

2 minute bio www.cloudadvisor.se

1990 Botkyrka kommun www.cloudadvisor.se

www.cloudadvisor.se 1995 IDG Nätverk & Kommunikation

1997 NetHouse Konsult & Media www.cloudadvisor.se

www.cloudadvisor.se 1999 Novell EMEA

2000 Microsoft www.cloudadvisor.se

www.cloudadvisor.se 2007 LabCenter

www.cloudadvisor.se October 1st MyNethouse

Security-as-a-Service Storage-as-a-Service Integration-as-a-Service Database-as-a-Service Information-as-a-Service Process-as-a-Service Application-as-a-Service Platform-as-a-Service Management/Governance-as-a-Service Testing-as-a-Service

Trends behind the hype ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],www.cloudadvisor.se

www.cloudadvisor.se ,[object Object]

Definition ,[object Object],[object Object],[object Object],[object Object],[object Object],www.cloudadvisor.se

The idea Shared infrastructure www.cloudadvisor.se Server OS Database App Server Storage Network App 1 Server OS Database App Server Storage Network App 2 Server OS Database App Server Storage Network App 100

Storage Virtualized resources Virtuell Image 1 Virtual Image.. n Virtual Image 1 Security Mgmt www.cloudadvisor.se CPU, RAM, Networking SW Kernel (OS & VM) Cloud applications Risk Governance Lifecycle mgmt AAA Auditing Security in- depth Incident mgmt Reporting Use monitor Kapacity planning Network management Automati- zation Billing ,[object Object]

IaaS example www.cloudadvisor.se

PaaS examples www.cloudadvisor.se

SaaS examples www.cloudadvisor.se

Storage Virtualized resources Virtuell Image 1 Virtual Image.. n Virtual Image 1 Security www.cloudadvisor.se CPU, RAM, Networking SW Kernel (OS & VM) Cloud applications Risk Governance Lifecycle mgmt AAA Auditing Security in- depth Incident mgmt

Security in depth - facility ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],www.cloudadvisor.se

www.cloudadvisor.se ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Security in depth - hardware CPU, RAM, Networking

Security in depth – SW Kernel www.cloudadvisor.se ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],SW Kernel (OS & VM)

Security in depth – virtualized resources www.cloudadvisor.se ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Storage Virtualized resources Virtual Image

Security in depth – applications www.cloudadvisor.se ,[object Object],[object Object],[object Object],[object Object],Applications

Soft side of security ,[object Object],[object Object],[object Object],[object Object],[object Object],www.cloudadvisor.se Security Risk Governance Lifecycle mgmt AAA Auditing Security in- depth Incident mgmt

Enter due diligence ,[object Object],[object Object],[object Object],[object Object],www.cloudadvisor.se

Risk management www.cloudadvisor.se

Risk management ,[object Object],[object Object],[object Object],www.cloudadvisor.se

Governance www.cloudadvisor.se

Governance ,[object Object],[object Object],[object Object],www.cloudadvisor.se

Legal ,[object Object],[object Object],[object Object],www.cloudadvisor.se

Compliance & Audit www.cloudadvisor.se

Compliance & audit ,[object Object],[object Object],[object Object],[object Object],[object Object],www.cloudadvisor.se

ILM ,[object Object],[object Object],www.cloudadvisor.se

Portability & Interoperability www.cloudadvisor.se

P & I ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],www.cloudadvisor.se

Identity ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],www.cloudadvisor.se

Datacenter operations www.cloudadvisor.se

Datacenter operations ,[object Object],[object Object],[object Object],[object Object],www.cloudadvisor.se

Incident handling www.cloudadvisor.se

Incident handling ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],www.cloudadvisor.se

Conclusions www.cloudadvisor.se

Cloud Computing is built on known technology – but the risks are definitively virgin territory! www.cloudadvisor.se

There are loads of exciting opportunities – open to all! www.cloudadvisor.se

Business demands results without ”whining and but´s” – handle it or be bypassed and marginalized! www.cloudadvisor.se

Why not implement the philosophy of the cloud in your IT? www.cloudadvisor.se

[object Object],www.cloudadvisor.se

Nice links ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],www.cloudadvisor.se

Thank you! ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],www.cloudadvisor.se

Clouds And Security

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Andere mochten auch

Andere mochten auch (6)

Ähnlich wie Clouds And Security

Ähnlich wie Clouds And Security (20)

Mehr von Predrag Mitrovic

Mehr von Predrag Mitrovic (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Clouds And Security