View
510
Download
0
Category
Preview:
DESCRIPTION
By Pravin Dsilva, Goa University
Citation preview
IBM SMARTCLOUD SECURITYPRAVIN DSILVA
Roll number:1109MCA
GOA UNIVERSITY
INTRODUCTION
PRIVATE CLOUD
IBM SMARTCLOUD: Rethink IT. Reinvent Business
SaaSPaaS
IaaSConsulting &
implementation
IBM SMARTCLOUD : SECURITY
IBM SMARTCLOUD BENEFITS•Competitively Priced•Security–rich •Reliable •Flexible•Extensible
IBM SMARTCLOUD : SECURITY
CLOUD COMPUTING: Vulnerabilities and threats
•Abuse and evil Use of Cloud • Insecure interfaces and APIs•Data protection and portability• Insecure cryptography•Virtual machine escape•Data loss or leakage•Malicious insider
IBM SMARTCLOUD : SECURITY
No “one size fits all” for security
IBM SMARTCLOUD : SECURITY
• Organizations have different security requirements • Determined by the unique characteristics of the business workload they intend to migrate to the cloud
IBM SECURITY FRAMEWORK
IBM SMARTCLOUD : SECURITY
PEOPLE AND IDENTITY
DATA AND INFORMATION
APPLICATION AND PROCESS
NETWORK , SERVER & ENDPOINT
PHYSICAL INFRASTRUCTURE
SECURITY GOVERNANCE, RISK MANAGEMENT AND COMPLIANCE
IBM CLOUD SECURITY OFFERINGS• Identifying and blocking the latest threats•To securing cloud resources including
applications and databases.•Keeping all endpoints protected and in
compliance with organizational policies.
IBM SMARTCLOUD : SECURITY
IBM solutions: private or hybrid cloud• Identity and access management•Web application security•Virtualization security•Network security•Endpoint security•Security intelligence and compliance
analytics• IBM Security zSecure suite•Data security
IBM SMARTCLOUD : SECURITY
IDENTITY AND ACCESS MANAGEMENT
• Automated and policy-based user management.
• Centralized authorization for web and other applications.
• Identity and access support for social network applications and cloud-based applications and identities.
• Integration with stronger forms of authentication (smart cards, tokens, one-time passwords, and so forth).
IBM SMARTCLOUD : SECURITY
WEB APPLICATION SECURITY
IBM SMARTCLOUD : SECURITY
AppScan Enterprise
AppScan Source
AppScan Standard
Virtual Forge CodeProfiler for IBM Security AppScan Source
VIRTUALIZATION SECURITY
IBM SMARTCLOUD : SECURITY
•Increases virtual server uptime and availability with agent less root kit detection•Provides multilayered intrusion prevention and firewall•Helps to minimize VM sprawl and security risk, while maximizing VM density•Helps reduce cost and complexity.
VM ROOTKIT DETECTION
INFRASTRUCTURE AUDITING
HYPERVISOR INTEGRATION
NETWORK SECURITY
• Deliver Advanced Threat Detection and Prevention.
• Integrated Data Loss Prevention (DLP) monitors data security risks throughout your network
• Support flexible network deployments.
IBM SMARTCLOUD : SECURITY
DATA SECURITY
Holistic approach for securing and protecting sensitive data and ensuring regulations compliance.
All products - Data protection• IBM Security Key Lifecycle Manager for z/OS• InfoSphere Guardium▫Activity Monitor▫Data Encryption for DB2 and IMS Databases▫Vulnerability Assessment
IBM SMARTCLOUD : SECURITY
SECURITY MEASURES TO REMEMBER
• Implement and maintain a security program.
• Build and maintain a secure cloud infrastructure.
• Ensure confidential data protection.
• Implement strong access and identity management.
• Establish application and environment provisioning.
• Implement a governance and audit management program.
• Implement a vulnerability and intrusion management program.
• Maintain environment testing and validation.
IBM SMARTCLOUD : SECURITY
References
• http://ijaest.iserp.org/archieves/15-Jul-15-31-11/Vol-No.9-Issue-No.1/16.IJAEST-Vol-No-9-Issue-No-1-Seven-Deadly-Threats-and-Vulnerabilities-in-Cloud-Computing-087-090.pdf
• http://www.ibm.com/cloud-computing/us/en/security.html• http://www.ibm.com/cloud-computing/social/us/en/benefits/
IBM SMARTCLOUD : SECURITY
THANK YOU
Recommended