Dynamic Security for the Hybrid Cloud

Transcription

1 Dynamic Security for the Hybrid Cloud Marc van Zadelhoff, VP Strategy, Marketing and Product Management, IBM Security Nataraj Nagaratnam, Distinguished Engineer and CTO Security Solutions, IBM Security IBM Corporation

2 Take Aways 1 Cloud is an opportunity to radically transform security practices 2 Enterprises must take a structured approach to manage access, protect data and gain visibility across hybrid Clouds 3 IBM Dynamic Cloud Security portfolio help enterprise customers adopt hybrid cloud with confidence 2

3 Cloud presents the opportunity to radically transform security practices Traditional Security Manual, static, and reactive Dynamic Security for Cloud Standardized, automated, agile, and elastic Cloud security is not only achievable, it is an opportunity to drive the business, improve defenses and reduce risk 3 3

4 Clients focus on three imperatives for improving security How can I understand who is accessing the cloud from anywhere, at anytime? How can I fix vulnerabilities and defend against attacks before they re exploited? How can I obtain a comprehensive view of cloud and traditional environments? Govern the usage of cloud Protect data and workloads in the cloud Detect threats with visibility across clouds Going to the cloud gives me a single choke point for all user access it provides much more control. Cloud gives me security APIs and preconfigured policies to help protect my data and workloads I can take advantage of centralized cloud logging and auditing interfaces to hunt for attacks. 4 4

5 Introducing the world s most comprehensive portfolio of cloud security products and services IBM Cloud Security Portfolio IaaS PaaS SaaS IBM Cloud Security Manage Access Protect Data Gain Visibility Optimize Security Operations 5 IBM Confidential - NDA until Nov 2014

6 Help securely connect people, devices, and applications to the cloud Federate identities to SaaS applications Cloud Federated Identity Management Allow employees to access SaaS applications through identity federation Safeguard access to cloud applications Govern privileged user access Authentication and Sign On API Allow developers to quickly introduce single sign on to web and mobile apps via APIs with OpenID, OAuth 2.0 support Cloud Access Management Defend cloud applications with pattern-based protection, multi-factor authentication, and context-based access control Cloud Privileged Identity Management Audit privileged IaaS accounts and track app-to-app credentials Manage Access Protect Data Gain Visibility Optimize Security Operations 6 IBM Confidential

7 Protect data and identify vulnerabilities targeting sensitive data Discover vulnerabilities before putting apps into production Web and Mobile Application analyzers Scan web and mobile applications prior to putting them into production Monitor data activities in cloud repositories Cloud Data Activity Monitoring Monitor sensitive data access in cloud repositories and create centralized auditing for data sources deployed on cloud virtual images Protect enterprise data in cloud Cloud Data Encryption Encrypt files, objects and storage in your cloud instances Encrypt data in Cloud Data services (in PaaS) Manage Access Protect Data Gain Visibility Optimize Security Operations 7 IBM Confidential

8 Continuous monitoring for security breaches and compliance violations Dynamically analyze security posture of users, apps, networks, and other assets across the enterprise and in the cloud Cloud Security Intelligence Complete visibility across on-prem and cloud environments Visibility across virtualized stacks, IaaS clouds and PaaS clouds Visibility of usage and risk to SaaS usage Secure connectivity and data security of information in the logs Manage Access Protect Data Gain Visibility Optimize Security Operations 8 IBM Confidential

9 IBM Cloud Security portfolio for the Hybrid Cloud IaaS PaaS SaaS Manage Access Safeguard people, applications, and devices connecting to the cloud Cloud Identity Services Cloud Sign On Service Cloud Access Manager Protect Data Identify vulnerabilities and help prevent attacks targeting sensitive data Cloud Data Activity Monitoring Cloud Mobile App Analyzer Service Cloud Web App Analyzer Service Gain Visibility Monitor the cloud for security breaches and compliance violations Cloud Security Intelligence Optimize Security Operations Deliver a consolidated view of your security operations at unprecedented speed and agility Security Intelligence and Operations Consulting Services Cloud Security Managed Services 9 IBM Confidential

10 Take Aways 1 Cloud is an opportunity to radically transform security practices 2 Enterprises must take a structured approach to manage access, protect data and gain visibility across hybrid Clouds 3 IBM Dynamic Cloud Security portfolio help enterprise customers adopt hybrid cloud with confidence 10