cloud security presentation v4

CLOUD AND SECURITYJasmeet Chhabra

Agenda• What is cloud computing?• Cloud Service delivery models• Cloud deployment models• Security concerns on the cloud• How to help your customers

Essential characteristics of cloud computing

On demand Self Services

Broad network access

Resource pooling

Rapid Elasticity

Measured Service

Source: ISACA : http://snipurl.com/25nliur

Cloud Service delivery model

IaaS

PaaS

SaaS

Cloud Deployment models

Public Cloud

Enterprise

Private Cloud

Hybrid Cloud

How big is the market?

IDC Forecasts Public IT Cloud Services Spending Will Approach $100 Billion in 2016, Generating 41% of Growth

Forrester forecasts that the global market for cloud computing will grow from $40.7 billion in 2011 to more than $241 billion in 2020

Security concerns on the cloud

VM

Virtual Machine Separation

VMM

VM

How good is this firewall?

VM

Interfaces and APIs

VMM

VM

How secure are these APIs ?

App 2

Separation between apps : Paas

App 1

How good is this firewall?

Who owns the data ?

Dropbox

All data visible here

Should encryption happen here

Service hijacking

How to help your customers ?

The BasicsSSL

Security Fail

Post as much security info as possible

What do you do with data?How do you protect it? Can you run in private cloud?

If you want to sell to Enterprise

Allow Data Export

Post Regulatory and Compliance info

Be serious about securityLook at OWSAP Top 10

Test for security

Code for security

Make it part of your development process

Don’t be this

Enterprise worries

How is my data protected?

Regulatory /compliance info

Can I run an appliance in my own cloud?

Questions?