Securing Your Journey to the Cloud. Thomas J. Miller Executive Vice President

Transcription

1 Securing Your Journey to the Cloud Thomas J. Miller Executive Vice President February 23, 2011 Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 1

2 Have you ever tried to explain Virtualization to anyone outside the computer business? Can you explain The Cloud to your Mom? Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 2

3 Every day, millions take a Journey to the Cloud with Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 3

4 Virtualization TV Style X Virtualization is using one machine to act like many machines Picture in Picture is one TV acting like many TVs A lot cheaper and faster than buying a bunch of TVs But, There s a Catch: The box that make virtual TVs possible, eventually runs out of resources. No more virtual TVs... Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 4

5 Virtualization Corporate Style VM VM VM VM vshield VM VM VM VM vcenter (Console) Hypervisor software lets one server host multiple virtual machines (VMs) The number of VMs per Host Server determines the ROI for a project More VMs per Host = Higher ROI But There s a Catch: Conventional Security / Anti-Virus solutions put software in each VM reducing the number of VMs per server Trend Micro Deep Security leverages VMware 4.1 vshield to put a Security Appliance into the Hypervisor, allowing you to virtualize with less hardware and less complexity Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 5

6 Tolly Test Report February 2011 Deep Security outperforms McAfee and Symantec Testing evaluated the impact each solution had on a host system (physical server) resources especially as guest machine density increased to up to 100 virtual machines simultaneously running in a VMware ESX 4.1 environment. Lower Numbers Are Better Copyright 2011 Trend Micro Inc.

7 When does it become a Cloud? 3 Key Characteristics 1. On-Demand, Self-Service 2. Utility-like Billed only for what you use Flexible Capacity : It never runs out 3. Widely Available To a closed group: Private Cloud To an open group: Public Cloud Closed Group Private Cloud Open Group Public Clouds Copyright 2011 Trend Micro Inc. Classification 2/24/2011 6

8 Corporate Clouds On Demand / Self Service New services created quickly Backup servers or desktops created with a click Utility-like Capacity added with a mouse click Widely Available Private & Public Clouds But, There s a Catch: Security is much more complicated Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 7

9 Corporate Clouds The Catch: Increased Security Requirements Number of Servers Multiplies All Servers must be Patched Protected from unauthorized access Protected from malware Able to meet compliance audit requirements Dynamic Environment Many servers created & destroyed weekly Some servers are dormant for days or weeks Cost and Control Challenges Multiple, Disparate Solutions (IPS/IDS, patching, file integrity, AV) Multiple Consoles & Policies Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 8

10 Deep Security A Module for Every Catch Patching: Virtual Patching feature in the Deep Packet Inspection Module protects servers without installing patches Customers test patches before installing which can take weeks AV Protection with High VM Density: Agent-less Anti-Virus gives Complete Protection without reducing the number of VMs per host Compliance: Identifies important events buried in logs with Log Inspection Module. (Helps with PCI DSS 10.6) Protect Servers from Network Attacks: Firewall Module provides centrally-managed protection that moves with servers (VMs) Monitor and Protect key OS and Application Files with Integrity Monitoring Module. (Helps with PCI ) Deep Packet Inspect. Anti-Virus Log Inspection Firewall Integrity Monitoring Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 9

11 What about Public Clouds? Another Catch, and it s a Big One The idea of putting my company s sensitive information sales figures, intellectual property, HR data into a public server is reckless and irresponsible. CIO Switching our data center to a public cloud will save us millions. CFO Trend Micro SecureCloud encrypts your data on it s Journey to the Cloud Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 10

12 Customer Successes Copyright 2011 Trend Micro Inc.

13 Retail Customer: Desktop Virtualization Project IT engineers planned on 100 servers 25 VMs per server, supporting 2500 virtual desktops Testing in their lab only gives them 10 VMs per server More VMs per server give very poor performance Virtualization unaware Anti-Malware software on each VM is the culprit Project needs 250 servers 150 more than originally budgeted $3.3 Million dollar cost overrun not counting operating expenses Trend Micro Deep Security protects the VMs and allows 25 high-performing VMs per host server Secure, High-Performing, and Under Budget Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 12

14 Manufacturing Customer: Private Cloud Reduce Costs, Increase Agility The project delivered on the agility promise, but was more expensive than their original architecture Number of Servers grew from 330 to 860 (810 virtual) Each server requires expensive components Security / AV, Patch management, HIPS, File Integrity Monitoring 7 Consoles 4 consoles for virtual servers 3 consoles for legacy physical environment Increased Risks Patching servers takes weeks dormant servers un-patched Business disruption when un-patched servers were infected Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 14

15 Manufacturing Customer: Private Cloud Deep Security Solution 1 Console for Security/AV, HIPS, and File Integrity on virtual and physical servers Patching Risk Eliminated with Virtual Patching Modular Each server set (physical & virtual) gets the modules they require all managed with one console Trend Micro Deep Security IDS / IPS Anti-Virus Integrity Monitoring Log Inspection Firewall Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 15

16 Airline Customer Datacenter vs. Winglets Boardroom dilemma Build a new data center for growing data set or upgrade airplanes with winglets? Winglets reduce drag, allowing airplanes to fly faster and burn less fuel Public Option Use public cloud provider instead of a data center How to ensure data is safe? Trend Micro SecureCloud Encryption guarantees data is only available to authorized users Safe from malicious neighbors and cloud provider employees Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 16

17 Securing Your Journey to the Cloud Classification 2/24/2011 Copyright 2011 Trend Micro Inc. 18