Automating Event Driven Security in the AWS Cloud - AWS Summit SG 2017pdf
You are quickly building and deploying exciting services on top on the AWS Cloud. As your deployment matures, you start to understand how each of these services has it's own unique challenges when it comes to operations and security. Making sure that the diversity available in AWS services doesn't increase the operational burden on your teams is a significant challenge. If you don't use the right strategy, you risk implementing a unique security approach for each service. In this talk we'll look at an overall security strategy for your deployment pulled from the real-world experiences of some of the top companies around the world. This strategy along with services like AWS Lambda can provide a unified view of your deployment and automatically respond to incidents… regardless of scale.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Automating Event Driven Security in the AWS Cloud - AWS Summit SG 2017pdf
Similar to Automating Event Driven Security in the AWS Cloud - AWS Summit SG 2017pdf (20)
More from Amazon Web Services
More from Amazon Web Services (20)
Recently uploaded
Recently uploaded (20)
Automating Event Driven Security in the AWS Cloud - AWS Summit SG 2017pdf
- 1. © 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Automating Event Driven Security in the AWS Cloud Paul Hidalgo Security Solutions Architect, Trend Micro, APAC
- 2. The cloud has changed how we look at security
- 3. Automation is the main key driver to cloud adoption
- 4. Microservices are becoming a norm Docker and Serverless are spurning this movement
- 5. How do you design security Serverless 101 010 Physical Cloud Containers & PaaS Virtual
- 6. If we have access to those powerful tools How about the bad guys?
- 7. 500,000 new malware per day
- 8. 60% of malicious domains are alive by one hour
- 9. 95% connects to Command and Control Networks
- 10. 80% of companies had security attacks or exploits
- 11. What can you do? What are the techniques
- 12. Track every move Enable Cloudtrail
- 13. Action on Specific API Calls Cloudwatch Events
- 14. Keep Consistency across the Infrastructure Use Config Rules
- 15. Protect your Account Learn IAM
- 16. How do you effectively mitigate threats
- 17. Automate Automated Security needs Automated Response
- 18. Security Products Built for AWS
- 19. Host-Based is still the best approach Source: SANS The State of Dynamic Data Center and Cloud Security in the Modern Enterprise October 2015
- 21. Brenda the Developer Benny the Cloud Architect Barry the Security Guy Houdini the Hacker
- 25. Security Incident Response Source: NIST
- 26. Benny the Cloud Architect Demo SSH Control
- 31. What Happened
- 32. Demo Uploading Suspicious Objects to ContainersHoudini the Hacker
- 33. What Happened
- 35. What Happened
- 37. How does it work
- 39. Tools used Amazon Lambda AWS CloudTrail CloudWatch AWS Config Amazon SNSDeep Security
- 40. Coding is Required Amazon Lambda AWS CloudTrail CloudWatch AWS Config Amazon SNSDeep Security or ask your friend to
- 41. Last Year we talked about Superheroes and powers This year we have new superpowers
- 42. Trend Micro Deep Security 10
- 43. Cross-generational blend of threat defense techniques Powered by global threat intelligence Intelligently applies the right technique at the right timeGen TM
- 44. Deep Security 10 Behavior Monitoring Detect suspicious movement
- 45. Deep Security 10 Container Protection
- 46. Deep Security 10 Application Control Run applications you trust
- 47. Still on Top Magic Quadrant for Endpoint Protection Platforms 30 January 2017
- 48. Annual Reserved Licensing Options Hourly On-Demand Traditional Cloud Service Providers Pay via Marketplace AWS Billing