Updating Security Operations For The Cloud
36
-
Upload
mark-nunnikhoven -
Category
Internet
-
view
1.842 -
download
0
Transcript of Updating Security Operations For The Cloud
@marknca
Strategy
Tactics
Traditional Responsibility Model
You
AWS You
Shared Responsibility Model
AWS
Facilities Physical Network Virtualization Layer
You
Shared Responsibility Model
Monitoring Forensics
4 pillars of practice
SANS incident response process
SANS incident response process
Business point of view
Incident response before
Server
Analyze Repair Improve
Replacement
Incident response after
Instance
Analyze Repair Improve
Replacement
Advantages
In action…
Optimized response
Optimized response
Instance
Script
Analyze
Improve
API
Replacement
Business point of view
Creating an audit trail before
Servers
Change Record Storage Logs
Firewall / IPS
Creating an audit trail before
Instances
Change Record
Central Management
Logs
AWS Services
In action…
Please give us your feedback on this presentation
#reinvent
