Security Intelligence in the Cloud

Security Intelligence: seeing through the cloud

Whenever data and applications are moved into the cloud, user access becomes an issue. Organizations must implement access controls for corporate resources both in the cloud and within the confines of the data center. The mass adoption of Cloud Computing in recent years has blurred the boundaries of the traditional network security perimeter. Implementing and managing secure and consistent access policies throughout distributed corporate resources requires security intelligence.

Security Intelligence Challenges

  • Multi-tenancy

Cloud providers share hardware resources among tenants according to standards found in their Service Level Agreements. It’s the responsibility of providers to properly isolate computing, networking, and storage resources.

  • Divided responsibility

Tenants are responsible for their assets. The precise division of responsibility will depend on the provider’s model, but ignorance is no excuse.

  • Moving targets

The cloud is constantly growing, as are a particular company’s resources. Security policies have to anticipate and manage this constant change.

Successfully facing these challenges requires both an effective strategy and a high level of transparency into system-wide operations. For example, multi-tenancy must not lead to data breaches, but tightened security cannot interrupt data availability.

Confidentiality and data integrity cannot be compromised by dividing responsibilities inefficiently. Security policies should not be broken because of unannounced policy changes in service deployment.

You’ll need security intelligence to keep on top of everything.

Secure access control to your data in the cloud

Access control is usually made up of two parts:

  1. Authentication: positive identification of a user through a password or MFA. Additionally, you can limit access by user context, allowing only access requests that originate in appropriate locations or devices.
  2. Authorization: establishing the resources a properly identified user may access.

The first step for security in the cloud is to know who is accessing what. The activities of everyone working inside your organization must be subject to significant scrutiny. And, of course, your team must be appropriately trained so they’ll know what’s expected of them.

Gaining better cloud visibility with security intelligence

Web-facing organizations are targets of more coordinated and targeted attacks against critical organizational assets – including customer databases, intellectual property, and even physical assets that are driven by information systems – than at any time in the past.

As more and more workloads move to cloud and virtual data centers, the need to track activities increases. Both effective audits and threat deterrence require security intelligence.

Security administrators typically worry about W’s: what happened, and when and where did it happen. For example, a security administrator might want to review all authentication attempts – both failed and successful – across an environment. Or he might need to know if there’s been a change to the rate of occurrence of a specific kind of event (such as the creation or deletion of virtual machines).

More specifically, cloud-based organizations are looking for better ways to:

  • Protect and track user activities across their deployments.
  • Meet audit and compliance needs for virtual resources.
  • Obtain system-wide operational intelligence.

Providing this kind of intelligence requires pulling together and analyzing data from various sources hosted in different locations.
Security intelligence, monitoring, correlating, detecting, and prioritizing
Security intelligence is a comprehensive, automated, and proactive way to identify, track, and address persistent threats. Intelligence systems collect and analyze logs from the full range of sources in real time.

For monitoring cloud activities, you would also need to collect events from the hypervisors and cloud management platforms, besides those from the traditional data center infrastructure, databases, applications, and devices.

Security Intelligence: Conclusion

Security devices that can feed an audit trail are needed for monitoring compliance and forensic investigation. The basic goal is to quickly spot essential and meaningful signals suggesting a possible attack or security risk from the great ocean of data points.

Adding a security intelligence layer with its advanced analytics can help draw of your security data together. This will allow you real-time visibility into both the data center and your cloud infrastructure. Implementing these practices will not only protect your users from cyber threats but will also provide needed transparency to reduce risks.

Avatar

Written by

Sudhi Seshachala

Sudhi is part of Cloud Technology Partners & is a trusted advisor and strategic consultant to many C level executives and IT Directors. He brings 18+ years diverse experience covering software, IT operations, cloud technologies, and management. Have led several global teams in HP, Sun/Oracle, SeeBeyond and few startups to deliver scalable and highly available business/technology products and solutions. He has expertise in systems management, monitoring and integrated SaaS and on-premise applications addressing a wide range of business problems.


Related Posts

Bea Potter
Bea Potter
— June 10, 2020

6 Ways to Prevent a Data Breach

The cloud is a new territory for the digital world. But with all of its benefits, there also comes risks and dangers. If your business depends on the cloud to store data, you’re probably facing a number of problems about how to best secure your data. According to studies, as many as 95 ...

Read more
  • data breach
  • Security
Alisha Reyes
Alisha Reyes
— June 2, 2020

Blog Digest: 5 Reasons to Get AWS Certified, OWASP Top 10, Getting Started with VPCs, Top 10 Soft Skills, and More

Thank you for being a valued member of our community! We recently sent out a short survey to understand what type of content you would like us to add to Cloud Academy, and we want to thank everyone who gave us their input. If you would like to complete the survey, it's not too late. It ...

Read more
  • AWS
  • Azure
  • blog digest
  • Certifications
  • Cloud Academy
  • OWASP
  • OWASP Top 10
  • Security
  • VPCs
Vijayakumar Athithan
Vijayakumar Athithan
— May 8, 2020

OWASP Top 10 Vulnerabilities

Over the last few years, more than 10,000 Open Web Application Security Project (OWASP) vulnerabilities have been reported into the Common Vulnerabilities and Exposures (CVE®) database each year. This is a list of common identifiers for publicly known cybersecurity vulnerabilities. Curr...

Read more
  • Machine Learning
  • OWASP
  • OWASP Top 10
  • Security
Alisha Reyes
Alisha Reyes
— April 30, 2020

Blog Digest: AWS Breaking News, Azure DevOps, AWS Study Guide, 8 Ways to Prevent a Ransomware Attack, and More

  New articles by topicAWS Azure Data Science Google Cloud  Cloud Adoption Platform Updates & New Content Security Women in TechAWSBreaking News: All AWS Certification Exams Now Available Online As an Advanced AWS Technology Partner, C...

Read more
  • AWS
  • Azure
  • blog digest
  • Certifications
  • Cloud Academy
  • programming
  • Security
Daniel William
Daniel William
— April 15, 2020

8 Ways to Protect Your Data From a Ransomware Attack

Ransomware attacks have continued to grow both in scope and audacity over the past several years.This type of malware has become one of the biggest cybersecurity threats for enterprises, and experts predict the situation is only going to get worse. The WannaCry ransomware incident o...

Read more
  • attacks
  • data
  • ransomware
  • Security
Alisha Reyes
Alisha Reyes
— March 17, 2020

Cloud Academy’s Blog Digest: How Do AWS Certifications Increase Your Employability, How to Become a Microsoft Certified Azure Data Engineer, and more

With everything going on right now, it's likely that the only thing you've been reading lately is related to the coronavirus pandemic. It's important to stay informed during these times, but it's also good to jump into something that can take your mind off of the current situation for j...

Read more
  • AWS
  • Azure
  • blog digest
  • Certifications
  • Cloud Academy
  • programming
  • Security
Orion Withrow
Orion Withrow
— December 17, 2019

Azure Security: Best Practices You Need to Know

When it comes to Azure Security best practices, where do you begin? In a lot of ways, Azure is very similar to any other data center. But with that said, Azure can also be very different. Securing Azure can pose many unique challenges. The security of resources hosted in Azure is of the...

Read more
  • Azure
  • azure best practices
  • azure security center
  • Security
Chester Avey
Chester Avey
— November 7, 2019

Cloud Computing Solutions: 7 Trends for the Future

The world of cloud computing is in a state of flux. Not long ago, the cloud was considered an emerging technology, known only to IT specialists. Today it is a part of everyday life – 96% of businesses use the cloud in one form or another, and this number only looks set to grow. Whether ...

Read more
  • Cloud Computing
  • internet of everything
  • multi-cloud
  • Security
  • SEO
Avatar
Stuart Scott
— September 27, 2019

AWS Security Groups: Instance Level Security

Instance security requires that you fully understand AWS security groups, along with patching responsibility, key pairs, and various tenancy options. As a precursor to this post, you should have a thorough understanding of the AWS Shared Responsibility Model before moving onto discussi...

Read more
  • AWS
  • instance security
  • Security
  • security groups
Chester Avey
Chester Avey
— September 10, 2019

7 Key Cybersecurity Threats to Cloud Computing

When businesses consider cloud computing, one of the major advantages often cited is the fact that it can make your business more secure. In fact, in recent years many businesses have chosen to migrate to the cloud specifically for its security benefits. So, it might surprise you to lea...

Read more
  • Cybersecurity
  • Security
Avatar
Adam Hawkins
— August 9, 2019

DevSecOps: How to Secure DevOps Environments

Security has been a friction point when discussing DevOps. This stems from the assumption that DevOps teams move too fast to handle security concerns. This makes sense if Information Security (InfoSec) is separate from the DevOps value stream, or if development velocity exceeds the band...

Read more
  • AWS
  • cloud security
  • DevOps
  • DevSecOps
  • Security
Avatar
Paola Di Pietro
— July 19, 2019

Top 10 Things Cybersecurity Professionals Need to Know

There has been an increase in data breaches over the recent years. With almost 143 million Americans who have had their data compromised in data breaches. These breaches include all sorts of sensitive data, including financial information, election controversies, social security, just t...

Read more
  • Azure
  • cyber security
  • Security