Welcome!

SDN Journal Authors: Pat Romanski, Patrick Hubbard, Elizabeth White, Sven Olav Lund, Liz McMillan

Related Topics: @CloudExpo, Microservices Expo, Cloud Security, @BigDataExpo, SDN Journal

@CloudExpo: Blog Post

The Extended Enterprise Perimeter By @E_deSouza | @CloudExpo [#Cloud]

The explosive growth of cloud traffic has fundamentally changed the means by which today’s contemporary businesses operate

Redefining the Extended Enterprise Cloud Perimeter with Network-Centric Security

Cloud has become an extension of today's enterprise and the traditional perimeter has long disappeared. Increasing business requirements for agility and flexibility make the cloud-extended enterprise ideal for a workforce that works anywhere, anytime and any place. This is especially true as organizations are increasingly made up of third-party resources, partners and suppliers compared to just employees.

However, traditional security models are not equipped to deal with the fluid nature of data and network flows that extend from the enterprise into a mix of multiple clouds. This not only creates concerns about network resiliency and availability, it puts key business transactions, assets and access to critical work streams at business risk. As organizations continue to embrace cloud models, IT and InfoSec teams need to find a way to reinvent security so that they have seamless visibility across their enterprise and into the different cloud models their businesses are using. This is where adopting a data and network-centric approach is pivotal.

Don't miss Cisco webcast titled 'Is Your Data Center Ready for the Application Economy?', focuses on the latest data center networking technologies, including SDN or ACI, and how customers are using SDN and ACI in their organizations to achieve business agility. The Cisco webcast takes place January 13, 2015, at 9:00 a.m. PST. Register ▸ Here

The explosive growth of cloud traffic has fundamentally changed the means by which today's contemporary businesses operate. In 2013, cloud accounted for 54% of total data center traffic, and, by 2018, cloud will account for 76% of total data center traffic[1]. It has left many IT and Information Security teams struggling to address the risk vectors presented by the cloud as in most cases cloud has been driven by business user demands. Therefore, IT and InfoSec typically have only started to address the cloud-extended enterprise as cloud consumption has reached critical mass.

IT and InfoSec must adapt and consider an alternative means to maintain the confidentiality, integrity and availability of their business services, data and users. Doing so becomes so much more important in a climate where data breaches are targeting both business and personal information and hacktivisim is on the rise[2]. It's clear that traditional perimeter-based security has failed to keep up with the demands of modern enterprises and the techniques and technologies used by attackers have far outpaced traditional security.

Cloud is effectively distributed computing without hierarchical, organizational or geographic constraint. For the ‘extended cloud enterprise' to operate effectively, network policies must extend from the enterprise into the cloud, and contextual access control becomes pivotal as does a data-centric approach in which security policies are tightly aligned to the type of data that is being exchanged.

While there isn't any one formula that will work for all organizations, the following are some key considerations for organizations in the throes of having to re-invent their security to address the needs of the cloud-extended enterprise.

Start first with a data classification model as it will enable security policies to be based on key attributes of the data - whether it is subject to regulation or contains PII, whether it is subject to a industry standards such as PCI or contains intellectual IP or whether it has a near publicly accessible profile. An example of a baseline data classification scheme for the cloud-extended enterprise can be found at Cloud Data Protection Cert[3]. A major component of implementing a data protection scheme is educating business users on why protecting data matters and getting them to map their assets, preferably by digitally tagging, to your organization's scheme.

Many organizations today have not used network diagrams to map data flows, and as a result they lack visibility to where their key information is traversing. Use firewalls that provide multi-tenant edge security that integrates with firewall policies in an Infrastructure as a Service (IaaS) cloud environment. This enables your organization to extend the same network policies into a public cloud environment and have an additional level of control and visibility across the cloud-extended enterprise.

In a SaaS environment, using a cloud web gateway can instill a higher degree of confidence by enforcing consistent threat management across web streams, and more easily identifying and addressing key activities for data loss prevention on data leaving your organization per the classification scheme outlined above.

Data protection measures such as encryption and tokenization are critical protection measures and they should be implemented before migrating data to public cloud environments. Protection measures should be linked to the data attributes of your organization's data classification scheme and when applying encryption, apply in transit and at rest.

Managing user identities becomes more complex in the cloud-extended enterprise, which now needs to factor in the provider's computing resources and personnel. Think of ‘who' (in terms of user context) and ‘what' (in terms of digital assets) with ‘whom' (the CSP) as fundamentals in your cloud extended enterprise security framework. Leverage a centralized identity management framework together with contextual access and compensating controls. Correlate identities with continuous logging and network monitoring for data infiltration, exfiltration and anomalies and other intrusion or extrusion attempts across the enterprise.

Register for Cisco Webcast ▸ Here

Finally, as your organization further extends into the cloud in 2015, consider implementing a cloud security metrics analysis platform for more accurate security decisioning and metrics that can be shared with your executive board on the cloud-extended enterprise. As security teams embrace the cloud-extended enterprise, they have the opportunity to design security that provides greater levels of visibility and trust while accelerating an agile business and the needs of today's business users.

Resources:

  1. Cisco Global Cloud Index: Forecast and Methodology, 2013-201
  2. Worst Security Breaches of the Year 2014
  3. http://clouddataprotection.org/cert/

More Stories By Evelyn de Souza

Recognized as one of the top ten women in cloud (CloudNOW), Evelyn De Souza, chair of the Cloud Security Alliance Data Governance Working Group and a leader at Cisco, is a pioneer in the cloud security space and deals with these issues on a daily basis. According to Evelyn, the network becomes pivotal in redefining cloud security and providing new levels of trust, visibility and resilience.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@CloudExpo Stories
The dynamic nature of the cloud means that change is a constant when it comes to modern cloud-based infrastructure. Delivering modern applications to end users, therefore, is a constantly shifting challenge. Delivery automation helps IT Ops teams ensure that apps are providing an optimal end user experience over hybrid-cloud and multi-cloud environments, no matter what the current state of the infrastructure is. To employ a delivery automation strategy that reflects your business rules, making r...
Most technology leaders, contemporary and from the hardware era, are reshaping their businesses to do software. They hope to capture value from emerging technologies such as IoT, SDN, and AI. Ultimately, irrespective of the vertical, it is about deriving value from independent software applications participating in an ecosystem as one comprehensive solution. In his session at @ThingsExpo, Kausik Sridhar, founder and CTO of Pulzze Systems, will discuss how given the magnitude of today's applicati...
Smart cities have the potential to change our lives at so many levels for citizens: less pollution, reduced parking obstacles, better health, education and more energy savings. Real-time data streaming and the Internet of Things (IoT) possess the power to turn this vision into a reality. However, most organizations today are building their data infrastructure to focus solely on addressing immediate business needs vs. a platform capable of quickly adapting emerging technologies to address future ...
Amazon is pursuing new markets and disrupting industries at an incredible pace. Almost every industry seems to be in its crosshairs. Companies and industries that once thought they were safe are now worried about being “Amazoned.”. The new watch word should be “Be afraid. Be very afraid.” In his session 21st Cloud Expo, Chris Kocher, a co-founder of Grey Heron, will address questions such as: What new areas is Amazon disrupting? How are they doing this? Where are they likely to go? What are th...
SYS-CON Events announced today that NetApp has been named “Bronze Sponsor” of SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. NetApp is the data authority for hybrid cloud. NetApp provides a full range of hybrid cloud data services that simplify management of applications and data across cloud and on-premises environments to accelerate digital transformation. Together with their partners, NetApp emp...
SYS-CON Events announced today that SkyScale will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. SkyScale is a world-class provider of cloud-based, ultra-fast multi-GPU hardware platforms for lease to customers desiring the fastest performance available as a service anywhere in the world. SkyScale builds, configures, and manages dedicated systems strategically located in maximum-security...
Join IBM November 1 at 21st Cloud Expo at the Santa Clara Convention Center in Santa Clara, CA, and learn how IBM Watson can bring cognitive services and AI to intelligent, unmanned systems. Cognitive analysis impacts today’s systems with unparalleled ability that were previously available only to manned, back-end operations. Thanks to cloud processing, IBM Watson can bring cognitive services and AI to intelligent, unmanned systems. Imagine a robot vacuum that becomes your personal assistant th...
In his general session at 21st Cloud Expo, Greg Dumas, Calligo’s Vice President and G.M. of US operations, will go over the new Global Data Protection Regulation and how Calligo can help business stay compliant in digitally globalized world. Greg Dumas is Calligo's Vice President and G.M. of US operations. Calligo is an established service provider that provides an innovative platform for trusted cloud solutions. Calligo’s customers are typically most concerned about GDPR compliance, applicatio...
Enterprises are adopting Kubernetes to accelerate the development and the delivery of cloud-native applications. However, sharing a Kubernetes cluster between members of the same team can be challenging. And, sharing clusters across multiple teams is even harder. Kubernetes offers several constructs to help implement segmentation and isolation. However, these primitives can be complex to understand and apply. As a result, it’s becoming common for enterprises to end up with several clusters. Thi...
Microsoft Azure Container Services can be used for container deployment in a variety of ways including support for Orchestrators like Kubernetes, Docker Swarm and Mesos. However, the abstraction for app development that support application self-healing, scaling and so on may not be at the right level. Helm and Draft makes this a lot easier. In this primarily demo-driven session at @DevOpsSummit at 21st Cloud Expo, Raghavan "Rags" Srinivas, a Cloud Solutions Architect/Evangelist at Microsoft, wi...
Containers are rapidly finding their way into enterprise data centers, but change is difficult. How do enterprises transform their architecture with technologies like containers without losing the reliable components of their current solutions? In his session at @DevOpsSummit at 21st Cloud Expo, Tony Campbell, Director, Educational Services at CoreOS, will explore the challenges organizations are facing today as they move to containers and go over how Kubernetes applications can deploy with lega...
SYS-CON Events announced today that Avere Systems, a leading provider of hybrid cloud enablement solutions, will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Avere Systems was created by file systems experts determined to reinvent storage by changing the way enterprises thought about and bought storage resources. With decades of experience behind the company’s founders, Avere got its ...
SYS-CON Events announced today that Taica will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. ANSeeN are the measurement electronics maker for X-ray and Gamma-ray and Neutron measurement equipment such as spectrometers, pulse shape analyzer, and CdTe-FPD. For more information, visit http://anseen.com/.
Today most companies are adopting or evaluating container technology - Docker in particular - to speed up application deployment, drive down cost, ease management and make application delivery more flexible overall. As with most new architectures, this dream takes significant work to become a reality. Even when you do get your application componentized enough and packaged properly, there are still challenges for DevOps teams to making the shift to continuous delivery and achieving that reducti...
As you move to the cloud, your network should be efficient, secure, and easy to manage. An enterprise adopting a hybrid or public cloud needs systems and tools that provide: Agility: ability to deliver applications and services faster, even in complex hybrid environments Easier manageability: enable reliable connectivity with complete oversight as the data center network evolves Greater efficiency: eliminate wasted effort while reducing errors and optimize asset utilization Security: imple...
High-velocity engineering teams are applying not only continuous delivery processes, but also lessons in experimentation from established leaders like Amazon, Netflix, and Facebook. These companies have made experimentation a foundation for their release processes, allowing them to try out major feature releases and redesigns within smaller groups before making them broadly available. In his session at 21st Cloud Expo, Brian Lucas, Senior Staff Engineer at Optimizely, will discuss how by using...
In this strange new world where more and more power is drawn from business technology, companies are effectively straddling two paths on the road to innovation and transformation into digital enterprises. The first path is the heritage trail – with “legacy” technology forming the background. Here, extant technologies are transformed by core IT teams to provide more API-driven approaches. Legacy systems can restrict companies that are transitioning into digital enterprises. To truly become a lead...
SYS-CON Events announced today that Yuasa System will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Yuasa System is introducing a multi-purpose endurance testing system for flexible displays, OLED devices, flexible substrates, flat cables, and films in smartphones, wearables, automobiles, and healthcare.
With major technology companies and startups seriously embracing Cloud strategies, now is the perfect time to attend 21st Cloud Expo October 31 - November 2, 2017, at the Santa Clara Convention Center, CA, and June 12-14, 2018, at the Javits Center in New York City, NY, and learn what is going on, contribute to the discussions, and ensure that your enterprise is on the right path to Digital Transformation.
SYS-CON Events announced today that CAST Software will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 - Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. CAST was founded more than 25 years ago to make the invisible visible. Built around the idea that even the best analytics on the market still leave blind spots for technical teams looking to deliver better software and prevent outages, CAST provides the software intelligence that matter ...