Designing a Cloud Security Program
As enterprises move towards cloud adoption, security practitioners will face an increasingly difficult challenge: building a security program equally effective in the cloud and corporate data center. This session will demonstrate the most common architecture patterns found in public and private cloud networks, define the scope of options for network introspection across leading cloud providers today, and identify avenues by which security teams can deploy products that rely on network introspection abilities. The session will include an assessment of which components of a cloud security program are best embedded into the cloud fabric by the provider and which components enterprises must build themselves. The presenter will also discuss components that are already offered by specific cloud providers and what components providers may offer in the near future. The speaker will present a grid of what security components are being offered by various cloud providers, discuss how attendees can still incorporate components that they build or install themselves, and provide samples of such components. The session will conclude with a case study of a cloud-ready enterprise. Throughout the session, attendees will receive a set of practical steps security admin can take today to get ready for the future and will leave the session knowing what they need to install themselves and why some security components are best not offered by cloud providers.
- by Misha Govshteyn
Vice President of Emerging Products of Alert Logic
Author`s Bio:
Misha Govshteyn founded Alert Logic in 2002. Misha is responsible for emerging product strategy and cloud architecture at Alert Logic. Prior to founding Alert Logic, Govshteyn served as a Director of Managed Services for Reliant Energy Communications. In this role, he developed and successfully launched five major product lines including Managed Intrusion Detection Services and managed enterprise firewall/VPN products. Under Govshteyn's direction, Managed Services became the fastest growing group at Reliant Energy Communications and reached profitability in less than a year. Prior to Reliant Energy Communications, he held the position of Director of Advanced Technical Services at Insync Internet Services.