Anúncio
Security Implications of the Cloud - CSS Dallas Azure
Security Implications of the Cloud - CSS Dallas Azure
Security Implications of the Cloud - CSS Dallas Azure
Security Implications of the Cloud - CSS Dallas Azure
Security Implications of the Cloud - CSS Dallas Azure
Security Implications of the Cloud - CSS Dallas Azure
Security Implications of the Cloud - CSS Dallas Azure
Security Implications of the Cloud - CSS Dallas Azure
Security Implications of the Cloud - CSS Dallas Azure
Security Implications of the Cloud - CSS Dallas Azure
Security Implications of the Cloud - CSS Dallas Azure
Security Implications of the Cloud - CSS Dallas Azure

Check these out next

Reality Check: Security in the Cloud
Reality Check: Security in the Cloud
Alert Logic
Security Implications of the Cloud
Security Implications of the Cloud
Alert Logic
Stories from the Security Operations Center (S.O.C.)
Stories from the Security Operations Center (S.O.C.)
Alert Logic
The Intersection of Security & DevOps
The Intersection of Security & DevOps
Alert Logic
Web App Security Presentation by Ryan Holland - 05-31-2017
Web App Security Presentation by Ryan Holland - 05-31-2017
TriNimbus
CSS 17: NYC - Stories from the SOC
CSS 17: NYC - Stories from the SOC
Alert Logic
Advanced Threat Defense Intel Security
Advanced Threat Defense Intel Security
xband
#ALSummit: Live Cyber Hack Demonstration
#ALSummit: Live Cyber Hack Demonstration
Alert Logic
1 de 12

Security Implications of the Cloud - CSS Dallas Azure

7 de Nov de 2017••
Baixar para ler offline
Tecnologia

Security Implications of the Cloud - CSS Dallas Azure

Alert Logic
Anúncio
Anúncio
Anúncio

Recomendados

Realities of Security in the CloudRealities of Security in the Cloud
Realities of Security in the CloudAlert Logic 296 visualizações•20 slides
Security Implications of the CloudSecurity Implications of the Cloud
Security Implications of the CloudAlert Logic 127 visualizações•11 slides
Realities of Security in the CloudRealities of Security in the Cloud
Realities of Security in the CloudAlert Logic 96 visualizações•20 slides
Stories from the Security Operations CenterStories from the Security Operations Center
Stories from the Security Operations CenterAlert Logic 295 visualizações•23 slides
Security Implications of the Cloud - CSS ATX 2017Security Implications of the Cloud - CSS ATX 2017
Security Implications of the Cloud - CSS ATX 2017Alert Logic 310 visualizações•8 slides
Protecting Against Web AttacksProtecting Against Web Attacks
Protecting Against Web AttacksAlert Logic 230 visualizações•29 slides

Mais conteúdo relacionado

Apresentações para você(20)

Reality Check: Security in the CloudReality Check: Security in the Cloud
Reality Check: Security in the Cloud
Alert Logic •318 visualizações
Security Implications of the CloudSecurity Implications of the Cloud
Security Implications of the Cloud
Alert Logic •463 visualizações
Stories from the Security Operations Center (S.O.C.)Stories from the Security Operations Center (S.O.C.)
Stories from the Security Operations Center (S.O.C.)
Alert Logic •269 visualizações
The Intersection of Security & DevOpsThe Intersection of Security & DevOps
The Intersection of Security & DevOps
Alert Logic •270 visualizações
Web App Security Presentation by Ryan Holland - 05-31-2017Web App Security Presentation by Ryan Holland - 05-31-2017
Web App Security Presentation by Ryan Holland - 05-31-2017
TriNimbus•2.5K visualizações
CSS 17: NYC - Stories from the SOCCSS 17: NYC - Stories from the SOC
CSS 17: NYC - Stories from the SOC
Alert Logic •202 visualizações
Advanced Threat Defense Intel SecurityAdvanced Threat Defense Intel Security
Advanced Threat Defense Intel Security
xband•1.7K visualizações
#ALSummit: Live Cyber Hack Demonstration#ALSummit: Live Cyber Hack Demonstration
#ALSummit: Live Cyber Hack Demonstration
Alert Logic •707 visualizações
Thinking Differently About Security Protection and PreventionThinking Differently About Security Protection and Prevention
Thinking Differently About Security Protection and Prevention
David Perkins•430 visualizações
Cerdant Security State of the UnionCerdant Security State of the Union
Cerdant Security State of the Union
David Perkins•454 visualizações
Make Every Spin Count: Putting the Security Odds in Your FavorMake Every Spin Count: Putting the Security Odds in Your Favor
Make Every Spin Count: Putting the Security Odds in Your Favor
David Perkins•439 visualizações
A new web application vulnerability assessment frameworkA new web application vulnerability assessment framework
A new web application vulnerability assessment framework
Mark Jayson Fuentes•2.3K visualizações
Reducing Your Attack Surface & Your Role in Cloud Workload ProtectionReducing Your Attack Surface & Your Role in Cloud Workload Protection
Reducing Your Attack Surface & Your Role in Cloud Workload Protection
Alert Logic •237 visualizações
Advanced Threat ProtectionAdvanced Threat Protection
Advanced Threat Protection
Lan & Wan Solutions•674 visualizações
The Intersection of Security & DevOpsThe Intersection of Security & DevOps
The Intersection of Security & DevOps
Alert Logic •326 visualizações
Css sf azure_8-9-17-stories_from_the_soc_paul fletcher_alCss sf azure_8-9-17-stories_from_the_soc_paul fletcher_al
Css sf azure_8-9-17-stories_from_the_soc_paul fletcher_al
Alert Logic •167 visualizações
CSS 17: NYC - Realities of Security in the CloudCSS 17: NYC - Realities of Security in the Cloud
CSS 17: NYC - Realities of Security in the Cloud
Alert Logic •238 visualizações
Cyber ResiliencyCyber Resiliency
Cyber Resiliency
Alert Logic •285 visualizações
Identify Zero-Day Breaches with Cognitive Threat Analytics on Cisco Web Secur...Identify Zero-Day Breaches with Cognitive Threat Analytics on Cisco Web Secur...
Identify Zero-Day Breaches with Cognitive Threat Analytics on Cisco Web Secur...
Cisco Security•4.2K visualizações
Web Application Security 101Web Application Security 101
Web Application Security 101
Cybersecurity Education and Research Centre•9K visualizações

Similar a Security Implications of the Cloud - CSS Dallas Azure(20)

Security Implications of the CloudSecurity Implications of the Cloud
Security Implications of the Cloud
Alert Logic •53 visualizações
Security Implications of the CloudSecurity Implications of the Cloud
Security Implications of the Cloud
Alert Logic •109 visualizações
Reducing Your Attack Surface and Yuor Role in Cloud Workload ProtectionReducing Your Attack Surface and Yuor Role in Cloud Workload Protection
Reducing Your Attack Surface and Yuor Role in Cloud Workload Protection
Alert Logic •300 visualizações
Reducing Your Attack Surface & Your Role in Cloud Workload ProtectionReducing Your Attack Surface & Your Role in Cloud Workload Protection
Reducing Your Attack Surface & Your Role in Cloud Workload Protection
Alert Logic •107 visualizações
Time based security for cloud computingTime based security for cloud computing
Time based security for cloud computing
Jorge Sebastiao•1.3K visualizações
Cisco Connect 2018 Malaysia - Risk less, achieve more with proactive securityCisco Connect 2018 Malaysia - Risk less, achieve more with proactive security
Cisco Connect 2018 Malaysia - Risk less, achieve more with proactive security
NetworkCollaborators•65 visualizações
Four Network Security Challenges for the Cloud GenerationFour Network Security Challenges for the Cloud Generation
Four Network Security Challenges for the Cloud Generation
AboutSSL•402 visualizações
Should we fear the cloud?Should we fear the cloud?
Should we fear the cloud?
Gabe Akisanmi•524 visualizações
2 factor authentication beyond password : enforce advanced security with au...2 factor authentication beyond password : enforce advanced security with au...
2 factor authentication beyond password : enforce advanced security with au...
NetwayClub•816 visualizações
Strengthening security posture for modern-age SaaS providersStrengthening security posture for modern-age SaaS providers
Strengthening security posture for modern-age SaaS providers
Cloudflare•461 visualizações
Leveraging Vulnerability Management Beyond DPR (Discovery - Prioritization - ...Leveraging Vulnerability Management Beyond DPR (Discovery - Prioritization - ...
Leveraging Vulnerability Management Beyond DPR (Discovery - Prioritization - ...
DevOps Indonesia•358 visualizações
White Paper: Defense In BreadthWhite Paper: Defense In Breadth
White Paper: Defense In Breadth
Courtland Smith•743 visualizações
Network security chapter 1,2Network security chapter 1,2
Network security chapter 1,2
Education•1.8K visualizações
Everything You Need to Know About BlueKeepEverything You Need to Know About BlueKeep
Everything You Need to Know About BlueKeep
Ivanti•1.7K visualizações
1 - HKT Reporting.pdf1 - HKT Reporting.pdf
1 - HKT Reporting.pdf
eLearning Consortium 電子學習聯盟•69 visualizações
Application security testing an integrated approachApplication security testing an integrated approach
Application security testing an integrated approach
Idexcel Technologies•1K visualizações
Edgescan vulnerability stats report 2019 - h-isac-2-2-2019Edgescan vulnerability stats report 2019 - h-isac-2-2-2019
Edgescan vulnerability stats report 2019 - h-isac-2-2-2019
Eoin Keary•180 visualizações
Paul Henry’s 2011 Malware TrendsPaul Henry’s 2011 Malware Trends
Paul Henry’s 2011 Malware Trends
Lumension•428 visualizações
Cloud activ8 state of ransomware report_2021-decCloud activ8 state of ransomware report_2021-dec
Cloud activ8 state of ransomware report_2021-dec
gusbarrett•1K visualizações
EndpointSecurityConcerns2014EndpointSecurityConcerns2014
EndpointSecurityConcerns2014
Peggy Lawless•130 visualizações
Anúncio

Mais de Alert Logic (20)

Managed Threat Detection & Response for AWS ApplicationsManaged Threat Detection & Response for AWS Applications
Managed Threat Detection & Response for AWS Applications
Alert Logic •2K visualizações
Extending Amazon GuardDuty with Cloud Insight Essentials Extending Amazon GuardDuty with Cloud Insight Essentials
Extending Amazon GuardDuty with Cloud Insight Essentials
Alert Logic •399 visualizações
Managed Threat Detection and ResponseManaged Threat Detection and Response
Managed Threat Detection and Response
Alert Logic •538 visualizações
Extending Amazon GuardDuty with Cloud Insight Essentials Extending Amazon GuardDuty with Cloud Insight Essentials
Extending Amazon GuardDuty with Cloud Insight Essentials
Alert Logic •293 visualizações
The AWS Shared Responsibility Model in PracticeThe AWS Shared Responsibility Model in Practice
The AWS Shared Responsibility Model in Practice
Alert Logic •218 visualizações
Security Spotlight: PresidioSecurity Spotlight: Presidio
Security Spotlight: Presidio
Alert Logic •360 visualizações
The AWS Shared Responsibility Model in PracticeThe AWS Shared Responsibility Model in Practice
The AWS Shared Responsibility Model in Practice
Alert Logic •332 visualizações
Security Spotlight: Rent-A-CenterSecurity Spotlight: Rent-A-Center
Security Spotlight: Rent-A-Center
Alert Logic •127 visualizações
Realities of Security in the CloudRealities of Security in the Cloud
Realities of Security in the Cloud
Alert Logic •172 visualizações
The Intersection of Security & DevOpsThe Intersection of Security & DevOps
The Intersection of Security & DevOps
Alert Logic •159 visualizações
Security Spotlight: PresidioSecurity Spotlight: Presidio
Security Spotlight: Presidio
Alert Logic •146 visualizações
Realities of Security in the CloudRealities of Security in the Cloud
Realities of Security in the Cloud
Alert Logic •92 visualizações
CSS 2018 TriviaCSS 2018 Trivia
CSS 2018 Trivia
Alert Logic •123 visualizações
The AWS Shared Responsibility Model in PracticeThe AWS Shared Responsibility Model in Practice
The AWS Shared Responsibility Model in Practice
Alert Logic •136 visualizações
Realities of Security in the CloudRealities of Security in the Cloud
Realities of Security in the Cloud
Alert Logic •116 visualizações
The Intersection of Security and DevOpsThe Intersection of Security and DevOps
The Intersection of Security and DevOps
Alert Logic •116 visualizações
Security Spotlight: The Coca Cola CompanySecurity Spotlight: The Coca Cola Company
Security Spotlight: The Coca Cola Company
Alert Logic •124 visualizações
The AWS Shared Responsibility Model in PracticeThe AWS Shared Responsibility Model in Practice
The AWS Shared Responsibility Model in Practice
Alert Logic •160 visualizações
Microsoft Azure Security Overview - Microsoft - CSS Dallas AzureMicrosoft Azure Security Overview - Microsoft - CSS Dallas Azure
Microsoft Azure Security Overview - Microsoft - CSS Dallas Azure
Alert Logic •1.5K visualizações
10 Step Guide to Cloud Security - 10th Magnitude - CSS Dallas Azure10 Step Guide to Cloud Security - 10th Magnitude - CSS Dallas Azure
10 Step Guide to Cloud Security - 10th Magnitude - CSS Dallas Azure
Alert Logic •300 visualizações

Último(20)

Respberry Pi 3 Model B ubiquity ROS image.docxRespberry Pi 3 Model B ubiquity ROS image.docx
Respberry Pi 3 Model B ubiquity ROS image.docx
IIEE - NEDUET•0 visão
#9 Calicut MuleSoft Meetup - Munits in Mule 4.pptx#9 Calicut MuleSoft Meetup - Munits in Mule 4.pptx
#9 Calicut MuleSoft Meetup - Munits in Mule 4.pptx
AnoopRamachandran13•0 visão
NS-CUK Joint Jouarl Club: JHLee, Review on "GraphMAE: Self-Supervised Masked... NS-CUK Joint Jouarl Club: JHLee, Review on "GraphMAE: Self-Supervised Masked...
NS-CUK Joint Jouarl Club: JHLee, Review on "GraphMAE: Self-Supervised Masked...
ssuser4b1f48•4 visualizações
Transverse-and-Longitudinal-Waves.pdfTransverse-and-Longitudinal-Waves.pdf
Transverse-and-Longitudinal-Waves.pdf
AbdulRehman35508•0 visão
Class I_OSI Network Layer by CISCO.pptClass I_OSI Network Layer by CISCO.ppt
Class I_OSI Network Layer by CISCO.ppt
NukriTskvitaia•0 visão
【本科生、研究生】美国迈阿密大学牛津分校毕业证文凭购买指南【本科生、研究生】美国迈阿密大学牛津分校毕业证文凭购买指南
【本科生、研究生】美国迈阿密大学牛津分校毕业证文凭购买指南
akuufux•2 visualizações
ChIP-Sequencing ChIP-Sequencing
ChIP-Sequencing
Hajra Qayyum•2 visualizações
presentation.pdfpresentation.pdf
presentation.pdf
Mahdi_Fahmideh•4 visualizações
Bosch BSG8_8100 Service Manual.pdfBosch BSG8_8100 Service Manual.pdf
Bosch BSG8_8100 Service Manual.pdf
ssuser78bec11•3 visualizações
Structure.pptxStructure.pptx
Structure.pptx
MohammedOmer401579•0 visão
OODBMSvsORDBMSppt.pptxOODBMSvsORDBMSppt.pptx
OODBMSvsORDBMSppt.pptx
MEHMOODNadeem•0 visão
GSM FRAME STRUCTURE.pptxGSM FRAME STRUCTURE.pptx
GSM FRAME STRUCTURE.pptx
Rasufsd•0 visão
Office 365Office 365
Office 365
Princy Nadar•0 visão
8 PROCESS FLOW CHART.pptx8 PROCESS FLOW CHART.pptx
8 PROCESS FLOW CHART.pptx
julitolosbanos•0 visão
Summer 23 LWC Updates + Slack Apps.pptxSummer 23 LWC Updates + Slack Apps.pptx
Summer 23 LWC Updates + Slack Apps.pptx
Kishore B T•0 visão
stock.pptstock.ppt
stock.ppt
ruber731•1 visão
【本科生、研究生】英国卡迪夫大学毕业证文凭购买指南【本科生、研究生】英国卡迪夫大学毕业证文凭购买指南
【本科生、研究生】英国卡迪夫大学毕业证文凭购买指南
sutseu•5 visualizações
Vernacular Architecture - 1.pptVernacular Architecture - 1.ppt
Vernacular Architecture - 1.ppt
RekhaVKumar•0 visão
Hackolade Tutorial - part 1 - What is a data modelHackolade Tutorial - part 1 - What is a data model
Hackolade Tutorial - part 1 - What is a data model
PascalDesmarets1•0 visão
【本科生、研究生】英国埃克塞特大学毕业证文凭购买指南【本科生、研究生】英国埃克塞特大学毕业证文凭购买指南
【本科生、研究生】英国埃克塞特大学毕业证文凭购买指南
akuufux•0 visão
Anúncio

Security Implications of the Cloud - CSS Dallas Azure

  1. Thank you.
  2. SECURITY IMPLICATIONS OF THE CLOUD. Sean Rohde Director of Sales, Alert Logic
  3. AGENDA
  4. 5 47 74 89 184 289 277 222 207 571 Denial of Service Crimeware Physical Theft / Loss Payment Card Skimmers Everything Else Cyber-espionage Privilege Misuse Miscellaneous Errors POS Intrusions Web App Attacks Security risk is shifting to unprotected web applications Web app attacks are now the #1 source of data breaches But less than 5% of data center security budgets are spent on app security Source: Verizon DBIR 2017 n= 1,935 UP 300% SINCE 2014 $23 to $1 Percentage of Breaches 10% 20% 30% Source: Gartner Web App Attacks
  5. Vulnerabilities + Change + Shortage Complexity of defending web applications and workloads Risks are moving up the stack 1. Wide range of attacks at every layer of the stack 2. Rapidly changing codebase can introduces unknown vulnerabilities 3. Long tail of exposures inherited from 3rd party development tools 4. Extreme shortage of cloud and application security expertise Web App Attacks OWASP Top 10 Platform / Library Attacks System / Network Attacks Perimeter & end-point security tools fail to protect cloud attack surface Web Apps Server-side Apps App Frameworks Dev Platforms Server OS Hypervisor Databases Networking Cloud Management
  6. Tame the Beast Industry Challenge: The Good, the Bad and the Ugly Known Good Known Bad Suspicious Allow Identify | Tune | Permit Block Drop | Reconfigure Application Stack Web Apps Server-side Apps App Frameworks Dev Platforms Databases Server OS Hypervisor Hardware Classification Action HUMAN EXPERT REQUIRED
  7. CASE ILLUSTRATION
  8. Customer X – Data Exfiltration Company Profile Retail – Ecommerce $250M Annual Revenue 1500+ Employees 4 Primary Offices (NA) 200 Retail Locations IT Dedicated Headcount – 14 Security Dedicated Headcount – 2 Hybrid Data Center (AWS & CoLo)
  9. Customer X – Data Exfiltration Attack Progression Stalked company on LinkedIn and Google Gained entry through PHP (KNOWN) flaws Replaced PHP login to capture credentials Leveraged credentials to access critical system Stole Financial, Design data & Roadmap Undetected for 4 months – FBI Notification Cost of Breech - $1.8M Company Profile Retail – Ecommerce $250M Annual Revenue 1500+ Employees 4 Primary Offices (NA) 200 Retail Locations IT Dedicated Headcount – 14 Security Dedicated Headcount – 2 Hybrid Data Center (AWS & CoLo)
  10. AGENDA
  11. Thank you. #CSS2017
  12. Thank You.
Anúncio