Story image

Four tips for better visibility & security in public cloud

29 Aug 2017

Organizations are at their cloud provider’s mercy when it comes to increasing visibility into application and network data, meaning those organizations may have less control than they desire, according to Ixia.

Public cloud brings flexibility and agility, but it also must be highly secure and visible. According to a recent Ixia survey on virtualization, only 37% of organizations monitored their virtual environments at the same level as their physical networks.

According to Ardy Sharifnia, Ixia’s general manager A/NZ, this creates risk around the virtual environment’s performance and it could possibly lead to degraded performance and outages. “Most organisations can’t take that chance; they need to bridge the visibility gap quickly. Visibility will facilitate better control, maintain security no matter where their data goes and, of course, secure reliability of their core business applications,” Sharifnia says.

The survey also found that 76% of respondents were ‘very concerned’ or ‘concerned’ about security in their cloud environment. The number one concern was loss of control of network data (56%), followed by being able to achieve full visibility across their networks (47%).

“It’s necessary to monitor public cloud environments with the same robustness and vigour businesses apply to their on-premises and private cloud environments,” Sharifnia comments. 

“The first step towards getting visibility into public clouds is discovery: IT teams need to know how far their ‘cloud blindness’ extends to establish the potential risk. IT teams also need to determine what they can monitor and test so they can establish performance. Finally, they need to understand the potential risk exposure from being in a multi-tenant environment, as well as what assurances the public cloud provider can give regarding the security of individual tenants’ environments.” 

Ixia says there are four key ways enterprises can boost their security and visibility in cloud environments.

1. Extract and copy traffic from the cloud. Businesses can then subject that traffic to a more detailed inspection through a cloud tap or packet capture agent.  2.  Tunnel cloud data back to the enterprise. Using a network packet broker lets businesses review data in the same way as on-premise traffic.  3.  Identify traffic by application source. This will let businesses to make more intelligent, business-contextualised decisions when monitoring and securing.  4.  Treat each cloud application as an independent entity with its own service level agreement (SLA). Then, when calculating the total SLA, businesses should include the SLAs of each provider. They can then know and actively monitor each cloud SLA separately, building up a holistic view of overall cloud performance. 

“Public cloud is cost effective and lets businesses to scale elastically as the business grows. But to fully realise its benefits securely, it’s vital that the same due diligence that’s currently applied to a physical network is also applied to cloud-based infrastructures,” Sharifnia concludes.

Industrial control component vulnerabilities up 30%
Positive Technologies says exploitation of these vulnerabilities could disturb operations by disrupting command transfer between components.
McAfee announces Google Cloud Platform support
McAfee MVISION Cloud now integrates with GCP Cloud SCC to help security professionals gain visibility and control over their cloud resources.
Why AI and behaviour analytics should be essential to enterprises
Cyber threats continue to increase in number and severity, prompting cybersecurity experts to seek new ways to stop malicious actors.
Scammers targeting more countries in sextortion scam - ESET
The attacker in the email claims they have hacked the intended victim's device, and have recorded the person while watching pornographic content.
Cryptojacking and failure to patch still major threats - Ixia
Compromised enterprise networks from unpatched vulnerabilities and bad security hygiene continued to be fertile ground for hackers in 2018.
Princeton study wants to know if you have a smart home - or a spy home
The IoT research team at Princeton University wants to know how your IoT devices send and receive data not only to each other, but also to any other third parties that may be involved.
Organisations not testing incident response plans – IBM Security
Failure to test can leave organisations less prepared to effectively manage the complex processes and coordination that must take place in the wake of an attack.
65% of manufacturers run outdated operating systems – Trend Micro
The report highlights the unique triple threat facing manufacturing, including the risks associated with IT, OT and IP.