ibm smartcloud: security

IBM SMARTCLOUD SECURITYPRAVIN DSILVA

Roll number:1109MCA

GOA UNIVERSITY

INTRODUCTION

PRIVATE CLOUD

IBM SMARTCLOUD: Rethink IT. Reinvent Business

SaaSPaaS

IaaSConsulting &

implementation

IBM SMARTCLOUD : SECURITY

IBM SMARTCLOUD BENEFITS•Competitively Priced•Security–rich •Reliable •Flexible•Extensible


CLOUD COMPUTING: Vulnerabilities and threats

•Abuse and evil Use of Cloud • Insecure interfaces and APIs•Data protection and portability• Insecure cryptography•Virtual machine escape•Data loss or leakage•Malicious insider


No “one size fits all” for security


• Organizations have different security requirements • Determined by the unique characteristics of the business workload they intend to migrate to the cloud

IBM SECURITY FRAMEWORK


PEOPLE AND IDENTITY

DATA AND INFORMATION

APPLICATION AND PROCESS

NETWORK , SERVER & ENDPOINT

PHYSICAL INFRASTRUCTURE

SECURITY GOVERNANCE, RISK MANAGEMENT AND COMPLIANCE

IBM CLOUD SECURITY OFFERINGS• Identifying and blocking the latest threats•To securing cloud resources including

applications and databases.•Keeping all endpoints protected and in

compliance with organizational policies.


IBM solutions: private or hybrid cloud• Identity and access management•Web application security•Virtualization security•Network security•Endpoint security•Security intelligence and compliance

analytics• IBM Security zSecure suite•Data security


IDENTITY AND ACCESS MANAGEMENT

• Automated and policy-based user management.

• Centralized authorization for web and other applications.

• Identity and access support for social network applications and cloud-based applications and identities.

• Integration with stronger forms of authentication (smart cards, tokens, one-time passwords, and so forth).


WEB APPLICATION SECURITY


AppScan Enterprise

AppScan Source

AppScan Standard

Virtual Forge CodeProfiler for IBM Security AppScan Source

VIRTUALIZATION SECURITY


•Increases virtual server uptime and availability with agent less root kit detection•Provides multilayered intrusion prevention and firewall•Helps to minimize VM sprawl and security risk, while maximizing VM density•Helps reduce cost and complexity.

VM ROOTKIT DETECTION

INFRASTRUCTURE AUDITING

HYPERVISOR INTEGRATION

NETWORK SECURITY

• Deliver Advanced Threat Detection and Prevention.

• Integrated Data Loss Prevention (DLP) monitors data security risks throughout your network

• Support flexible network deployments.


DATA SECURITY

Holistic approach for securing and protecting sensitive data and ensuring regulations compliance.

All products - Data protection• IBM Security Key Lifecycle Manager for z/OS• InfoSphere Guardium▫Activity Monitor▫Data Encryption for DB2 and IMS Databases▫Vulnerability Assessment


SECURITY MEASURES TO REMEMBER

• Implement and maintain a security program.

• Build and maintain a secure cloud infrastructure.

• Ensure confidential data protection.

• Implement strong access and identity management.

• Establish application and environment provisioning.

• Implement a governance and audit management program.

• Implement a vulnerability and intrusion management program.

• Maintain environment testing and validation.


References

• http://ijaest.iserp.org/archieves/15-Jul-15-31-11/Vol-No.9-Issue-No.1/16.IJAEST-Vol-No-9-Issue-No-1-Seven-Deadly-Threats-and-Vulnerabilities-in-Cloud-Computing-087-090.pdf

• http://www.ibm.com/cloud-computing/us/en/security.html• http://www.ibm.com/cloud-computing/social/us/en/benefits/


http://ijaest.iserp.org/archieves/15-Jul-15-31-11/Vol-No.9-Issue-No.1/16.IJAEST-Vol-No-9-Issue-No-1-Seven-Deadly-Threats-and-Vulnerabilities-in-Cloud-Computing-087-090.pdf



http://www.ibm.com/cloud-computing/us/en/security.html

THANK YOU

ibm smartcloud: security

Education