Real Security in a Virtual environment by Mattias Geniar (Nudeus)

33
Real Security in a Virtual Environment By Mattias Geniar System Engineer @Nucleus

description

Seminar Real Security in a Virtual environment by Mattias Geniar (Nudeus) during Infosecurity.be 2011

Transcript of Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Page 1: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Real Security in a Virtual Environment By Mattias Geniar System Engineer @Nucleus

Page 2: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Mattias Geniar

576 𝑦𝑒𝑎𝑟𝑠 𝑜𝑙𝑑 System Engineer at Nucleus (Cloud) Hosting provider http://mattiasgeniar.be @mattiasgeniar

So ... Who am I?

Page 3: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

root@mattias:~#

My comfort zone.

Page 4: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Not this.

Page 5: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Now what’s this about?

Page 6: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Prevention.

Page 7: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

It’s about layers. Many layers.

Page 8: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

A secure location.

Page 9: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

With sufficient power.

Page 10: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

And cooling.

Page 11: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

That is secure.

Page 12: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

But that’s just the bottom layer.

Page 13: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Don’t forget this.

Page 14: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

How virtual is ‘virtual’?

Page 15: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

The heart: storage.

Page 16: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Seperate network.

Page 17: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

But in a good way.

Page 18: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Should it be encrypted?

Page 19: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Redundant storage. Good x 2.

Page 20: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Have backups. Lots of them.

Page 21: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

The kidneys: connectivity.

Page 22: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Walls of fire.

Page 23: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Secure connections.

Page 24: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Know what goes on.

Page 25: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Find intruders.

Page 26: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

IDS & IPS

Page 27: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Even when the cloud ‘moves’.

Page 28: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Developers that care.

Page 29: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

And management.

Page 30: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

No no. Real management.

Page 31: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

So. Layers you said?

Page 32: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

Q & A

Page 33: Real Security in a Virtual environment by Mattias Geniar (Nudeus)

root@mattias:~# logout

Thank you.