Scribd Logo
Upload

Welcome to Scribd!

  • SafeMedia Cloud Security

    Uploaded by

    Jonathan Spindel
    120 views12 pages
    As a continuation of the Cloud Security Project, we have been able to secure multiple public cloud instances. Just wanted to share our excitement We were able to secure multiple instances in Amazon EC2, and a BeanStalk Instance of Tomcat, as internal inventory. When instances were created we encapsulated those virtual instantiations and protected them. When instantiating the devices we opened all ports, for testing, running firewall rule TCP apply all/0.0.0.0/0, as well as UDP... In our virtual VPC we installed bit torrents on the Windows 2008 R2, as well as Suse, and RHEL. After which we ran infiltration tests internally to detect outbound traffic, externally, to detect inbound traffic, and between virtual devices for the detection of internal traffic between devices. We were able to capture and interrogate all packets, down to the forensic level... A little background on SafeMedia's HaloNS HALO NS Total Network and Application Layer Security encapsulates Cloud environments, whether physical, virtual, or Hybrid/Public Clouds, allowing for dual vector protection from the 'outside in', and 'inside out'. This differs from the typical "agent" based solutions, which carry a larger footprint exhausting its' hosts resources. Agents based solutions, are dedicated to their host and only protect from the inside out, while not providing a cohesive central point of observance from which to diagnose and remediate infiltrations. HALO NS encapsulates all physical, virtual, and cloud devices through a distributed model, allowing for a single pane of glass management methodology.

    Copyright

    © © All Rights Reserved

    Available Formats

    PPTX, PDF or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    As a continuation of the Cloud Security Project, we have been able to secure multiple public cloud instances. Just wanted to share our excitement We were able to secure multiple instances in Amazon EC2, and a BeanStalk Instance of Tomcat, as internal inventory. When instances were created we encapsulated those virtual instantiations and protected them. When instantiating the devices we opened all ports, for testing, running firewall rule TCP apply all/0.0.0.0/0, as well as UDP... In our virtual VPC we installed bit torrents on the Windows 2008 R2, as well as Suse, and RHEL. After which we ran infiltration tests internally to detect outbound traffic, externally, to detect inbound traffic, and between virtual devices for the detection of internal traffic between devices. We were able to capture and interrogate all packets, down to the forensic level... A little background on SafeMedia's HaloNS HALO NS Total Network and Application Layer Security encapsulates Cloud environments, whether physical, virtual, or Hybrid/Public Clouds, allowing for dual vector protection from the 'outside in', and 'inside out'. This differs from the typical "agent" based solutions, which carry a larger footprint exhausting its' hosts resources. Agents based solutions, are dedicated to their host and only protect from the inside out, while not providing a cohesive central point of observance from which to diagnose and remediate infiltrations. HALO NS encapsulates all physical, virtual, and cloud devices through a distributed model, allowing for a single pane of glass management methodology.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF or read online from Scribd
    Flag for inappropriate content
    120 views12 pages

    SafeMedia Cloud Security

    Uploaded by

    Jonathan Spindel
    As a continuation of the Cloud Security Project, we have been able to secure multiple public cloud instances. Just wanted to share our excitement We were able to secure multiple instances in Amazon EC2, and a BeanStalk Instance of Tomcat, as internal inventory. When instances were created we encapsulated those virtual instantiations and protected them. When instantiating the devices we opened all ports, for testing, running firewall rule TCP apply all/0.0.0.0/0, as well as UDP... In our virtual VPC we installed bit torrents on the Windows 2008 R2, as well as Suse, and RHEL. After which we ran infiltration tests internally to detect outbound traffic, externally, to detect inbound traffic, and between virtual devices for the detection of internal traffic between devices. We were able to capture and interrogate all packets, down to the forensic level... A little background on SafeMedia's HaloNS HALO NS Total Network and Application Layer Security encapsulates Cloud environments, whether physical, virtual, or Hybrid/Public Clouds, allowing for dual vector protection from the 'outside in', and 'inside out'. This differs from the typical "agent" based solutions, which carry a larger footprint exhausting its' hosts resources. Agents based solutions, are dedicated to their host and only protect from the inside out, while not providing a cohesive central point of observance from which to diagnose and remediate infiltrations. HALO NS encapsulates all physical, virtual, and cloud devices through a distributed model, allowing for a single pane of glass management methodology.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF or read online from Scribd
    Flag for inappropriate content
    of 12

    SafeMedia HaloNS Network and Application Layer Security for Cloud SafeMedia

    Agentless Cloud Security


    Locking down the Cloud

    Hybrid/Public Cloud Security


    Cloud Service revenue is presently at $127B annually and rapidly growing Medium, large corporations, and governmental agencies still dominate the Cloud scene Cloud Computing is still considered a No-Mans land Security concerns are mentioned at every Cloud and Virtualization conference Cloud Security has yet to be assessed, standards are lax, and best practices have yet to be solidified Application communication has dominated Cloud traffic Malicious threats are focusing on attacking applications and not infrastructure in the Cloud SafeMedia fills this gap, and offers Systems Wide infrastructure and application security coverage in Virtual Private, Hybrid and Public Clouds

    HaloNS Next Generation Cloud Security Single Point of Communication


    Does not reside on each individual Host Manages Security without having to pull and push information opening up security risks
    Agents must communicate with central console for a single pane of glass management methodology

    Manages 45,000 Rule Sets in Intelligent Libraries without burdening a Host


    Agents in most scenarios manage 600-800 rule sets

    No additional firewall ports to open, HaloNS uses the existing L2 VPN connectivity Hardened Non IP-Centric design exponentially decreases attacks to the system

    Competitors Cloud Security


    Virtual Instances Agent Based Systems

    Oracle
    Security Agent

    Relies on Hosts resources Network wide updates needed on each agent Typically protects from only Inside out Resources limits number of rules Reliant on their hosts Pushes data which increases chances of intrusion, or data corruption

    Azure
    Security Agent

    IBM
    Security Agent

    AWS
    Security Agent

    Public Cloud Virtual Machines

    Hybrid Cloud

    HaloNS Next Generation Network/Cloud Security


    Non IP-Centric Design
    The system is not visible to the users, therefore is resistant to attacks

    Internally redundant as well as the hardware it resides on Dual Kernels manage incoming and out-going traffic Dual Vector technology Populated with 45,000 rules covering multiple attack scenarios Protects Cloud infrastructure through existing connectivity
    No need to open up more firewall ports

    HaloNS Next Generation Network/Cloud Security

    CLOUD

    HaloNS Network & Application Layer Security Coverage

    Application Layer (7) Presentation Layer (6) HaloNS Network and Application Layer Security Session Layer (5) Transport Layer (4) Network Layer (3) Data-Link Layer (2) Physical Layer (1) Network Layer Security Competitive Protection

    Cloud Security
     Non IP-Centric Design  Internal and External Redundancy  Instantaneous Coverage of local network or Cloud resources  Deep Packet Inspection to the forensic Layer  Can report to multiple sources  Behavior and Pattern Recognition  Mitigates Risk Management  Protects from outside in and inside out  Officiates Compliancy  Protects Cloud resources as internal infrastructure

    Cloud Local Network HaloNS

    Encapsulation Mesh Security


    Virtual Instances Encapsulation

    Oracle Azure IBM

     No drain on resources  No Software to Install  Instantaneous Coverage  Forensic packet interrogation  Reporting to multiple Data Bases  Hardware and Software Redundancy  Mitigates Risk Management  Protects from outside in and inside out  Operates at wire speed

    AWS

    HaloNS Public Cloud Virtual Machines

    HaloNS Next Generation Cloud Security Patented Hardened non IP-Centric Design Dual Engine/Dual Vector 45,000 Rules Updated every 3 hours Like Pattern & Signature Recognition Enable/Disable/Alert/Drop Functionality Single Pane of Glass Management Widget based User Interface Interface definition to Cloud Locations and/or Containers

    For Proof of Concept Documentation Please Contact Jonathan Spindel SafeMedia Executive Vice President of Engineering jonathan.spindel@safemedia.com Direct: (561) 288-1142 http://www.SafeMedia.com

    You might also like