Welcome!

Cloud Security Authors: Liz McMillan, Pat Romanski, Shelly Palmer, Jim Hansen, Elizabeth White

Related Topics: @CloudExpo, Microservices Expo, Containers Expo Blog, Cloud Security

@CloudExpo: Article

Safeguarding Management and Security in the Cloud

An exclusive Q&A with David Meizlik, Vice President of Marketing at Dome9 Security

"One of the greatest challenges to security in the cloud is management," noted David Meizlik, Vice President of Marketing at Dome9 Security, in this exclusive Q&A with Cloud Expo Conference Chair Jeremy Geelan. "With cloud computing," Meizlik explained, "the infrastructure is owned and maintained by a third party, so you can't just walk down the hall to get to your infrastructure."

Cloud Computing Journal: Cloud computing represents the advent of a global computing utility that transcends national boundaries. Is that what makes clouds a challenge from a security point of view?

David Meizlik: Globalization is more a challenge from a governance and compliance perspective. The greatest challenge to security in the cloud is that traditional security models don't apply. Take, for example, the firewall. Firewalls were designed to protect the perimeter. The cloud, however, is outside any perimeter, and thus a traditional enterprise IT approach to firewalling is simply not practical. Fundamentally, as we re-architect our infrastructure we need to re-architect our security. It's an opportunity and not just a challenge.

Cloud Computing Journal: What about other aspects of vulnerability; what are the other unique problems of cloud computing from a security standpoint?

Meizlik: One of the greatest challenges to security in the cloud is management. With cloud computing, the infrastructure is owned and maintained by a third party, so you can't just walk down the hall to get to your infrastructure. What's more, the infrastructure is extremely portable and elastic. This is a terrific challenge because at the end of the day if you can't scale your security to match your infrastructure, you've got gaps in your coverage.

Cloud Computing Journal: Is it really possible to automate firewall management clouds? For private clouds only or public ones as well?

Meizlik: Absolutely, and it's not just possible, it's critical. Cloud infrastructure (private, public, and hybrid) is highly elastic, and thus your security must be too. Now since the cloud doesn't have a perimeter, you have to deploy and manage firewalling at the cloud server. The only way to scale this efficiently, however, is through automation; specifically, time-based controls that, by default, close administrative ports like SSH and RDP and open them on demand, only when, for whom, and as long as is needed. This ensures your servers are always secure, and because your security is server side, your policies are always coupled with your infrastructure, however large and wherever present.

Cloud Computing Journal: How about companies that want to secure both their cloud and their on-premise assets, does a hybrid approach make security more difficult?

Meizlik: A hybrid approach to security is more complicated for two reasons: 1) 99% of traditional security doesn't extend to cover the cloud, and 2) the process for securing the cloud is different from on-premise infrastructure. The first is probably sufficiently evident to anyone that's read beyond page one of most security vendor's product brochures. The second, however, is more abstract, and sometimes difficult to discern. Let me illustrate by example: in the traditional enterprise, many server admin ports (e.g., SSH, RDP, etc.) are left open because the server sits behind a corporate perimeter where there's less risk and more internal controls. When you move that same server to the cloud, outside of the corporate perimeter, most of those internal controls are absent and the risk is much greater. Thus, a practice of leaving admin ports open now presents a great threat. So following the same process for the same server but in a different infrastructure presents a real problem.

Cloud Computing Journal: Is it really true that there are sysadmins in this day and age who, say, leave ports such as SSH, RDP, and MYSQL open so they can connect to and manage their cloud servers? Wouldn't that be sheer madness?

Meizlik: Yes; Admins do it every day for two simple reasons: 1) old habits die hard - they've done it for years inside their corporate network where they had a firewall perimeter and the risk wasn't as great, and 2) manually opening and closing server ports every time you need to work on a server is a real headache and simply not scalable.... Well, not scalable without automated firewall management. ;-)

Cloud Computing Journal: For an organization looking to deploy to the cloud and capture all the benefits the cloud has to offer, do you think there is anything MORE important than getting the security piece right?

Meizlik: No - security is, bar none, the biggest concern of cloud adopters. Getting it right is absolutely critical to successfully leveraging the benefits of cloud computing.

More Stories By Jeremy Geelan

Jeremy Geelan is Chairman & CEO of the 21st Century Internet Group, Inc. and an Executive Academy Member of the International Academy of Digital Arts & Sciences. Formerly he was President & COO at Cloud Expo, Inc. and Conference Chair of the worldwide Cloud Expo series. He appears regularly at conferences and trade shows, speaking to technology audiences across six continents. You can follow him on twitter: @jg21.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@ThingsExpo Stories
What sort of WebRTC based applications can we expect to see over the next year and beyond? One way to predict development trends is to see what sorts of applications startups are building. In his session at @ThingsExpo, Arin Sime, founder of WebRTC.ventures, will discuss the current and likely future trends in WebRTC application development based on real requests for custom applications from real customers, as well as other public sources of information,
TechTarget storage websites are the best online information resource for news, tips and expert advice for the storage, backup and disaster recovery markets. By creating abundant, high-quality editorial content across more than 140 highly targeted technology-specific websites, TechTarget attracts and nurtures communities of technology buyers researching their companies' information technology needs. By understanding these buyers' content consumption behaviors, TechTarget creates the purchase inte...
DevOps is often described as a combination of technology and culture. Without both, DevOps isn't complete. However, applying the culture to outdated technology is a recipe for disaster; as response times grow and connections between teams are delayed by technology, the culture will die. A Nutanix Enterprise Cloud has many benefits that provide the needed base for a true DevOps paradigm.
With the introduction of IoT and Smart Living in every aspect of our lives, one question has become relevant: What are the security implications? To answer this, first we have to look and explore the security models of the technologies that IoT is founded upon. In his session at @ThingsExpo, Nevi Kaja, a Research Engineer at Ford Motor Company, will discuss some of the security challenges of the IoT infrastructure and relate how these aspects impact Smart Living. The material will be delivered i...
In his session at @ThingsExpo, Eric Lachapelle, CEO of the Professional Evaluation and Certification Board (PECB), will provide an overview of various initiatives to certifiy the security of connected devices and future trends in ensuring public trust of IoT. Eric Lachapelle is the Chief Executive Officer of the Professional Evaluation and Certification Board (PECB), an international certification body. His role is to help companies and individuals to achieve professional, accredited and worldw...
Your homes and cars can be automated and self-serviced. Why can't your storage? From simply asking questions to analyze and troubleshoot your infrastructure, to provisioning storage with snapshots, recovery and replication, your wildest sci-fi dream has come true. In his session at @DevOpsSummit at 20th Cloud Expo, Dan Florea, Director of Product Management at Tintri, will provide a ChatOps demo where you can talk to your storage and manage it from anywhere, through Slack and similar services ...
My team embarked on building a data lake for our sales and marketing data to better understand customer journeys. This required building a hybrid data pipeline to connect our cloud CRM with the new Hadoop Data Lake. One challenge is that IT was not in a position to provide support until we proved value and marketing did not have the experience, so we embarked on the journey ourselves within the product marketing team for our line of business within Progress. In his session at @BigDataExpo, Sum...
SYS-CON Events announced today that SoftLayer, an IBM Company, has been named “Gold Sponsor” of SYS-CON's 18th Cloud Expo, which will take place on June 7-9, 2016, at the Javits Center in New York, New York. SoftLayer, an IBM Company, provides cloud infrastructure as a service from a growing number of data centers and network points of presence around the world. SoftLayer’s customers range from Web startups to global enterprises.
SYS-CON Events announced today that Ocean9will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Ocean9 provides cloud services for Backup, Disaster Recovery (DRaaS) and instant Innovation, and redefines enterprise infrastructure with its cloud native subscription offerings for mission critical SAP workloads.
SYS-CON Events announced today that Linux Academy, the foremost online Linux and cloud training platform and community, will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Linux Academy was founded on the belief that providing high-quality, in-depth training should be available at an affordable price. Industry leaders in quality training, provided services, and student certification passes, its goal is to c...
SYS-CON Events announced today that Telecom Reseller has been named “Media Sponsor” of SYS-CON's 20th International Cloud Expo, which will take place on June 6–8, 2017, at the Javits Center in New York City, NY. Telecom Reseller reports on Unified Communications, UCaaS, BPaaS for enterprise and SMBs. They report extensively on both customer premises based solutions such as IP-PBX as well as cloud based and hosted platforms.
SYS-CON Events announced today that Loom Systems will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Founded in 2015, Loom Systems delivers an advanced AI solution to predict and prevent problems in the digital business. Loom stands alone in the industry as an AI analysis platform requiring no prior math knowledge from operators, leveraging the existing staff to succeed in the digital era. With offices in S...
Keeping pace with advancements in software delivery processes and tooling is taxing even for the most proficient organizations. Point tools, platforms, open source and the increasing adoption of private and public cloud services requires strong engineering rigor - all in the face of developer demands to use the tools of choice. As Agile has settled in as a mainstream practice, now DevOps has emerged as the next wave to improve software delivery speed and output. To make DevOps work, organization...
SYS-CON Events announced today that T-Mobile will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. As America's Un-carrier, T-Mobile US, Inc., is redefining the way consumers and businesses buy wireless services through leading product and service innovation. The Company's advanced nationwide 4G LTE network delivers outstanding wireless experiences to 67.4 million customers who are unwilling to compromise on ...
SYS-CON Events announced today that Cloudistics, an on-premises cloud computing company, has been named “Bronze Sponsor” of SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Cloudistics delivers a complete public cloud experience with composable on-premises infrastructures to medium and large enterprises. Its software-defined technology natively converges network, storage, compute, virtualization, and management into a ...
SYS-CON Events announced today that CA Technologies has been named “Platinum Sponsor” of SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY, and the 21st International Cloud Expo®, which will take place October 31-November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. CA Technologies helps customers succeed in a future where every business – from apparel to energy – is being rewritten by software. From ...
SYS-CON Events announced today that Infranics will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Since 2000, Infranics has developed SysMaster Suite, which is required for the stable and efficient management of ICT infrastructure. The ICT management solution developed and provided by Infranics continues to add intelligence to the ICT infrastructure through the IMC (Infra Management Cycle) based on mathemat...
Now that the world has connected “things,” we need to build these devices as truly intelligent in order to create instantaneous and precise results. This means you have to do as much of the processing at the point of entry as you can: at the edge. The killer use cases for IoT are becoming manifest through AI engines on edge devices. An autonomous car has this dual edge/cloud analytics model, producing precise, real-time results. In his session at @ThingsExpo, John Crupi, Vice President and Eng...
In the enterprise today, connected IoT devices are everywhere – both inside and outside corporate environments. The need to identify, manage, control and secure a quickly growing web of connections and outside devices is making the already challenging task of security even more important, and onerous. In his session at @ThingsExpo, Rich Boyer, CISO and Chief Architect for Security at NTT i3, will discuss new ways of thinking and the approaches needed to address the emerging challenges of securit...
The taxi industry never saw Uber coming. Startups are a threat to incumbents like never before, and a major enabler for startups is that they are instantly “cloud ready.” If innovation moves at the pace of IT, then your company is in trouble. Why? Because your data center will not keep up with frenetic pace AWS, Microsoft and Google are rolling out new capabilities In his session at 20th Cloud Expo, Don Browning, VP of Cloud Architecture at Turner, will posit that disruption is inevitable for c...