Upload File

didzis balodis, cissp, head of it security and infrastructure at squalio using the cloud - practical...

  • Home
  • Documents
  • Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications
15
odis, CISSP, Head of IT Security and Infrastructure at SQU Using the Cloud - practical security implications

Upload: gwen-shanna-price

Post on 22-Dec-2015

220 views

Category:

Documents


1 download

Report

Tags:

TRANSCRIPT

Page 1: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO

Using the Cloud - practical security implications

Page 2: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

Facts and numbers

Practical Cloud security

Conclusions

Page 3: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

Data source: KPMG research- http://www.kpmg-institutes.com/institutes/shared-services-outsourcing-institute/articles/2015/03/spps-it-outsourcing-management-summary-2014-15.html

28%

17%

16%

Data location, security and privacy risks

Integration with existing IT

Regulatory and compliance concerns

TOP 3 barriers to adoption of Cloud Services

Page 4: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

Data source: Eurostat - http://ec.europa.eu/eurostat/statistics-explained/mobile/index.php#Page?title=Cloud computing - statistics on the use by enterprises&lg=en

57%

48%17%

Risk of security breach

Location of data, legal jurisdiction

Insufficient knowledge and skills

Factors limiting use of cloud Services

38%

32%32%

Risk of security breach

Insufficient knowledge and skills

High cost of cloud computing

Small and medium enterprises:

Large enterprises:

Page 5: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

Microsoft Azure

IT security statistics don’t change

SIMPLE ATTACKS96%

VERY FEW SECURITY

BREACHES IN THE PUBLIC

CLOUD

«TO DATE, THERE HAVE BEEN

Gartner Inc.

- MOST BREACHES CONTINUE TO INVOLVE

ON-PREMISES DATA CENTER

ENVIRONMENTS.»

Page 6: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

Customer Cloud provider

On-PremisesInfrastructureas a Service

Platformas a Service

Softwareas a Service

Networking

Hardware

Physical Security

Operating System

Middleware

Virtualization

Data

Applications

Users

Shared responsibilityREDUCES SECURITY COSTS + MAINTAINS FLEXIBILITY, ACCESS, & CONTROL

Page 7: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

Is cloud more or less secure than my on-

premises infrastructure?

Page 8: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

Cameras

24X7 security staff

Barriers

Fencing

Alarms

Two-factor access control: Biometric readers & card readersSecurity operations center

Days of backup power

Seismic bracing

BuildingPerimeter

Computer room

Physical security

Page 9: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

Infrastructure security

9

Systems management & monitoring

Threat defense

Physical & logical security

Page 10: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

I have heard that cloud is not secure. Is it?

Page 11: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

Cloud service availability

Page 12: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

Cloud service security

Page 13: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

Additional security layers

VIDEO DEMO Azure 2 factor authenticaiton.

https://www.youtube.com/watch?v=__ytuEiY-Aw

Page 14: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

CONCLUSIONCloud security

Evaluate and Monitor

DO Risk Assessment

Choose the RIGHT

solution

Page 15: Didzis Balodis, CISSP, Head of IT Security and Infrastructure at SQUALIO Using the Cloud - practical security implications

Thank you!


Evolución Fortinet Security Fabric · Network Security Network Security Cloud & Apps Security Multi-Cloud Security Open API Fabric Connectors Infrastructure Security Endpoint Protection

CYBER SECURITY ADVISORY & CONSULTING …...TELECOM SECURITY – Wireless Security – Signaling Security - SCTP and SS7 – 3G Mobile Network Security – LTE Security Architecture

Hardware Security Attacks Security Architecture Hardware Security

Mobile Services Security: Mobile Platform Security AF Security

Physical & Personnel Security Physical Security Personnel Security

Didzis Balodis - Web application security – war stories from real penetration testing engagements

Ardith & Clifford Hatch • Art Burge Enterprises Ltd Dale Semple … · 2019. 8. 14. · Ardith & Clifford Hatch • Art Burge Enterprises Ltd Aubrey Emery Trucking • Balodis Inc

Buy the security standards you need shop.bsigroup.com/security Standards Brochure.pdf · Security standards shop.bsigroup.com/security BSI’s Security standards Welcome to our security

+ Security Concerns Chapter 10.1. + Security types Physical security Access security Database security

MC Steve Hornett, KWS VC...Martha Mier F. Balodis Traditional M. Schoenmehl Traditional Faber Anne Crosby N. Faber Faber M. Schoenmehl Andrea Dow Door Prize Draw Angelfish Tarantella,

Worst case analysis of non-local games Andris Ambainis, Artūrs Bačkurs, Kaspars Balodis, Agnis Škuškovniks, Juris Smotrovs, Madars Virza “COMPUTER SCIENCE

THEME Name Surname, Company Twitter handle (17).pdf · Cyber Security Information Security IT Security Physical Security IoT Security OT Security Smart Grid Security Network Perimeter

Prepared by: Linda Balodis, Account Manager 27 th March 2007 Because People Matter West Sussex County Council 2006 General User Satisfaction Survey Presentation

LATVIJAS BANKAS BIBLIOTĒKAS GRĀMATU RĀDĪTĀJS · Economy / Daniel Alpert. New York : Portfolio Penquin, 2013, 280 p. ISBN 9780241003794. 5. Balodis, Kārlis. ... Michael Woodford

VENEZUELA Real Property Security Security Interests in ... Property Security, Security... · VENEZUELA Real Property Security Security Interests in Immovables and Related Property

Security #MiSSConceptsmiss.in.th/MiSSConf(SP2)/slides/Security-MiSSConcept.pdfSenior Security Engineer (AGODA) Penetration Tester Security Consultant. Security #MiSSConcepts. Security

Because People Matter Surveys of parents, young people and schoolchildren in Luton Written report Linda Balodis, Account Manager Because People Matter

maritime security regulations - UNOLS · Maritime Security Regulations ... ship security – List primary ... Security Plan Port Security Plan Area Maritime Security Transportation

PHYSICAL SECURITY & ENVIRONMENTAL SECURITY · Physical Security & Environmental Security Policy and Procedures Title [company name] Physical Security & Environmental Security Policy

Modular RWD implementation (by Didzis Gruznovs)

Random non-local games Andris Ambainis, Artūrs Bačkurs, Kaspars Balodis, Dmitry Kravchenko, Juris Smotrovs, Madars Virza University of Latvia

HyHy---Security Security Security Gate Operators Gate ... · HyHy---Security Security Security Gate Operators Gate Operators ... and performance of this expertly engineered machine

SECURITY Security

Security - 1 Security Peter O’Grady. Security - 2 Network Security Problem n Data Flow - transmission security n Network Security - server security n

Getting Started - Web Security, Email Security, Data Security

Food Security EconomicsFood Security Food Security in India

MORAL PANIC - Darebin Arts · 2018. 11. 2. · MORAL PANIC . By Rachel Perks and Bridget Balodis . Relaxed Performance Guide . Prepared by Darebin Arts and A_tistic . Image by Sarah

Remote Filtering - Web Security, Email Security, Data Security

security products - Titus HVAC catalog/security products_2013... · Redefine your comfort zone. ™ | prevents corrosion minimum security medium security maximum security security

SECURITY INFRASTRUCTURE SECURITY

Cyber Security Specialist Information Security • Cyber ... · Cyber Security • Security Analyst • Cyber Security Specialist Information Security • Cyber Operations Manager

COEN 351 Internet Security. Network Layer Security Application Layer Security System Security

Network Security - Norbert Pohlmann · Security Infrastructure Mobile/Desktop Security Network Security E-Commerce Enabler Internet Security Network Security Secure Communication

PowerDock Progress Report #2 Mike MacGillivray Trevor Hennigar Devon Balodis Eric Giacomin Ian Spindler

S U M M A R E S T A P I S C H E M A ? V 0 .4summa-project.eu/wp-content/uploads/2019/01/platform... · 2019-01-30 · SUMMA Platform Renars Liepins, Didzis Gosko and Guntis Barzdins