The Next Generation of Cloud Security. Joe Chan Vice Chairman Programs & Research Cloud Security Alliance Hong Kong & Macau Chapter

Transcription

1

2 The Next Generation of Cloud Security Joe Chan Vice Chairman Programs & Research Cloud Security Alliance Hong Kong & Macau Chapter

3 About the Cloud Security Alliance Global, not-for-profit organization Building security best practices for next generation IT Research and Educational Programs Cloud Provider Certification CSA STAR User Certification - CCSK The globally authoritative source for Trust in the Cloud To promote the use of best practices for providing security assurance within Cloud Computing, and provide education on the uses of Cloud Computing to help secure all other forms of computing.

4 Today s Cloud Security Pain Points Too many regulations & standards Integrated tenant/provider security architecture Visibility/transparency between provider & tenant Lack understanding of cloud disruption of security & educated staff CSA is focused on the solutions

5 IaaS/PaaS Current State Phenomenal Growth Amazon AWS 55% YoY, $11B+ business Public Cloud 44% YoY (Cisco) Private Cloud 17% YoY (Cisco) Most heavily used IaaS services: virtual machine computing & storage Major IaaS players tend to be PaaS leaders Enterprise Cloud First policy common

6 Cloud s upside down pyramid SaaS PaaS IaaS

7 Key IaaS/PaaS Trends Public cloud surpassing private cloud Serverless computing radically changing Containers Microservices Microsegmentation, Software-defined Architecture DevOps & DevSecOps changing how security implemented Born in the cloud security companies High growth expected to continue

8

9 The Man/Machine Divide Thousands of computers per human We are in here currently World Population Internet connected devices

10 Information Technology of the Future Cloud computing is the back end Internet of Things is the endpoint Compute is Everywhere You won t know where Anything is Applications, topologies, security configurations in constant state of change

11 Technology to create Information Security Scalability Self Driving Information Security People Soon Now People Other stuff Automation AI/Machine learning Continuous Analytics Software defined everything Standards Trust marks Inherited security Blockchain Quantum etc plus the technology we already depend on

12 Emerging Trends We Are Evaluating Blockchain Containers, micro services Internet of Things DevSecOps: DevOps applied to security Analytics Autonomous computing Artificial Intelligence Quantum-Safe Computing

13 hat about Blockchain? Distributed ledgers of digitally signed transactions Huge focus in financial services Infosec implications Audit, control assertions IoT Web of Trust CPE credits Many more

14 Quantum Safe Computing NASA demonstrates quantum computer in December How long will our commercial cryptosystems be safe? CSA Quantum Safe Security:

15 Autonomic Computing Sensing, Adaptive, Self-Optimizing Monitor-Analyze-Plan-Execute architecture Moving humans to the periphery when they can t keep up

16 Artificial Intelligence

17 How do we evolve Information Security? Understand threats and issues of Cloud & IoT Next generation research Self Driving Information Security Automated, Smart, Transparent, Pervasive

18

19 Contact Join us to solve tomorrow s problems today info@cloudsecurityalliance.org

20 THANK YOU Joe Chan Vice Chairman Programs & Research Cloud Security Alliance Hong Kong & Macau Chapter