Welcome!

Containers Expo Blog Authors: Elizabeth White, Pat Romanski, Liz McMillan, Yeshim Deniz, Zakia Bouachraoui

Blog Feed Post

Automating Security in Cloud Computing: August’s Cloud Security Tip of the Month

tip of the month Security in cloud computing data security in the cloud  security in cloud computing Automating Security in Cloud Computing: August’s Cloud Security Tip of the MonthAchieving the best data security in the cloud has multiple steps. In our tip of the month series, we have been addressing many of them and have received extensive feedback from you that these tips are helping you secure your data, achieve compliance, and attain peace of mind knowing that there is a way to benefit from cloud computing without sacrificing data security in the cloud.

We have covered basics like cloud encryption and cloud key management and we have delved deep into technical topics like key rotation and spanning security from public to private infrastructures. We have addressed complementary needs like training employees and preparing for disaster. This August, we are exploring the importance of automating your security in the cloud.

Automating Security in Cloud Computing

Of the cloud’s many benefits is its ability to automate deployments. In the security context this can be extremely useful for ensuring that processes are secured as designed. An automated deployment will follow the recipe baked into its automation approach.

Automating secure processes removes some of the human error out of systems, which can strongly enhance security.

Automation can be done through proper configuration and also through automation scripts. The list of security processes that can be automated in the cloud should be familiar. The leading cloud infrastructure vendors will enable monitoring, logging, issuing alerts, allocating access rights, defining roles, and more.

Another aspect is what you choose to bake into your cloud images. Deployment of updated, properly patched images can and should be automated and this allows regular security updates of your environment.

Of course, you will also wish to use appropriate security products to safeguard your cloud environment. Products exist for a variety of areas, from IPS/IDS systems to encryption and key management.

Data Security in the Cloud: The importance of APIs

Whatever you are trying to automate in your secure cloud environment, the importance of APIs cannot be stressed too much. For many, a cloud is not really a cloud without proper ability to control all its aspects through an API. RESTful APIs have become a de facto standard for automating cloud functionality.

Interestingly, this point has not been taken up by all vendors of security products. Perhaps it is due to carrying over products from the old data center days, but security products that properly offer a RESTful API for all of their functionality are actually not yet the norm. This is a place where the leading offerings differentiate.

When an API is available, all the capabilities can be triggered and set up through automated calls, which gives you the ability to combine configuration and scripting to achieve a properly automated, secure environment.

 

The post Automating Security in Cloud Computing: August’s Cloud Security Tip of the Month appeared first on Porticor Cloud Security.

Read the original blog entry...

More Stories By Gilad Parann-Nissany

Gilad Parann-Nissany, Founder and CEO at Porticor is a pioneer of Cloud Computing. He has built SaaS Clouds for medium and small enterprises at SAP (CTO Small Business); contributing to several SAP products and reaching more than 8 million users. Recently he has created a consumer Cloud at G.ho.st - a cloud operating system that delighted hundreds of thousands of users while providing browser-based and mobile access to data, people and a variety of cloud-based applications. He is now CEO of Porticor, a leader in Virtual Privacy and Cloud Security.

IoT & Smart Cities Stories
Apps and devices shouldn't stop working when there's limited or no network connectivity. Learn how to bring data stored in a cloud database to the edge of the network (and back again) whenever an Internet connection is available. In his session at 17th Cloud Expo, Ben Perlmutter, a Sales Engineer with IBM Cloudant, demonstrated techniques for replicating cloud databases with devices in order to build offline-first mobile or Internet of Things (IoT) apps that can provide a better, faster user e...
In his keynote at 19th Cloud Expo, Sheng Liang, co-founder and CEO of Rancher Labs, discussed the technological advances and new business opportunities created by the rapid adoption of containers. With the success of Amazon Web Services (AWS) and various open source technologies used to build private clouds, cloud computing has become an essential component of IT strategy. However, users continue to face challenges in implementing clouds, as older technologies evolve and newer ones like Docker c...
The Founder of NostaLab and a member of the Google Health Advisory Board, John is a unique combination of strategic thinker, marketer and entrepreneur. His career was built on the "science of advertising" combining strategy, creativity and marketing for industry-leading results. Combined with his ability to communicate complicated scientific concepts in a way that consumers and scientists alike can appreciate, John is a sought-after speaker for conferences on the forefront of healthcare science,...
Disruption, Innovation, Artificial Intelligence and Machine Learning, Leadership and Management hear these words all day every day... lofty goals but how do we make it real? Add to that, that simply put, people don't like change. But what if we could implement and utilize these enterprise tools in a fast and "Non-Disruptive" way, enabling us to glean insights about our business, identify and reduce exposure, risk and liability, and secure business continuity?
To Really Work for Enterprises, MultiCloud Adoption Requires Far Better and Inclusive Cloud Monitoring and Cost Management … But How? Overwhelmingly, even as enterprises have adopted cloud computing and are expanding to multi-cloud computing, IT leaders remain concerned about how to monitor, manage and control costs across hybrid and multi-cloud deployments. It’s clear that traditional IT monitoring and management approaches, designed after all for on-premises data centers, are falling short in ...
"The Striim platform is a full end-to-end streaming integration and analytics platform that is middleware that covers a lot of different use cases," explained Steve Wilkes, Founder and CTO at Striim, in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
"MobiDev is a Ukraine-based software development company. We do mobile development, and we're specialists in that. But we do full stack software development for entrepreneurs, for emerging companies, and for enterprise ventures," explained Alan Winters, U.S. Head of Business Development at MobiDev, in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
The deluge of IoT sensor data collected from connected devices and the powerful AI required to make that data actionable are giving rise to a hybrid ecosystem in which cloud, on-prem and edge processes become interweaved. Attendees will learn how emerging composable infrastructure solutions deliver the adaptive architecture needed to manage this new data reality. Machine learning algorithms can better anticipate data storms and automate resources to support surges, including fully scalable GPU-c...
As IoT continues to increase momentum, so does the associated risk. Secure Device Lifecycle Management (DLM) is ranked as one of the most important technology areas of IoT. Driving this trend is the realization that secure support for IoT devices provides companies the ability to deliver high-quality, reliable, secure offerings faster, create new revenue streams, and reduce support costs, all while building a competitive advantage in their markets. In this session, we will use customer use cases...
Machine learning has taken residence at our cities' cores and now we can finally have "smart cities." Cities are a collection of buildings made to provide the structure and safety necessary for people to function, create and survive. Buildings are a pool of ever-changing performance data from large automated systems such as heating and cooling to the people that live and work within them. Through machine learning, buildings can optimize performance, reduce costs, and improve occupant comfort by ...