Chris Preimesberger10
Q4: What are some new approaches vendors are using to ensure safe delivery of cloud services and to add value with ancillary features?
Phil Straw
A4 Cloud is now established enough that vendors are now designing for cloud specifically. This helps a lot because retrofitting security is often hard or impossible.
Phil Straw
A4 As cloud, edge and indeed hybrid emerges as the norm a more holistic approach to security is possible for the same reason.
Phil Straw
A4 Cloud is one piece of the puzzle and securing it as as much about all the things that touch it, including enterprise and edge. SoftIron does this with storage products to enable a continuum that is coherent for data assets in all locations.
Larry Lunetta
A4: Organizations are moving to a Zero Trust framework which relies on identity-based access control and much tighter security integration between the end point and the application.
Bruce Kornfeld
A4: Another area is for users to leverage encryption from cloud providers, but not trust them with the keys. BYOK is a movement that is starting to take hold with Cloud.
Nick Brackney
A4 I was a fan of VMware's approach before I ever got to Dell. I think abstraction and building in security is the way to go in simplifying and ensuring safety. But biggest thing is closing the gaps and burden on customers of Shared Responsibility Models.
Chris Preimesberger
Do you think identity control and access is ultimately the most efficient way to secure anything?
Eric Han
A4: vendors are building for and like clouds now. so good question and I think small (in terms of visibility but large in impact) has been continuous release/update (which adds to the security goal). More to where you question might be asking is also providing viz @editingwhiz
Larry Lunetta
A4: To add value, vendors are adding AI-based capabilities to deal with the complexity of a hybrid cloud world. AI is now cutting down the number of trouble tickets reported and reducing the amount of time to resolve them.
Eric Han
A4-cont: and knowing the state of deployments, as to the value-add. @editingwhiz
Tony Cai - Nerdio
A4: Double encryption in transit and at rest as a feature, enforcing MFA as a standard, PaaS hosted connection gateways with built in security managed by the vendor. Microsoft has started to enforce their partners to beef up their security all around.
Nick Brackney
Identity and Access Management is absolutely critical especially Privileged Identities. However it, and networking are battling it out for the most overlooked area needed, based on what I see.
Sean Leach
a4: A big area of R&D is around the safe delivery of applications in multi-tenant environments-maintaining performance/security. Technologies like WebAssembly/WASI are scalable/powerful technologies that provide high performance isolation - as opposed to docker etc.
Sean Leach
a4: More info here - https://bytecodealliance.org
Bruce Kornfeld
end users can now run their own key managers for all their encryption use cases - now extending to cloud.
(edited)
Chris Preimesberger
Can BYOK security become problematic due to presumed complexity, or is that actually an issue?
Eric Han
IdAM is a must and a building block. Otherwise, we don't have a lot to act on. @editingwhiz
Sean Leach
a4: TLS 1.3 is another key technology that improves performance and security at the TLS level
Nick Brackney
agreed @brucekornfeld given the way that governments have treated data sovereignty and gag orders you'd have to be very foolish to hand over the security keys to a vendor. They can be compelled to divulge your info and have to keep it from you.
Larry Lunetta
A4: Identity-based access control is the starting point for a "defense in depth" approach to security. No one technique will be sufficient to achieve something like Zero Trust, but it definitely is a foundational element.
Tony Cai - Nerdio
A4: RBAC - Role based access control as well.
Bruce Kornfeld
Key management CAN be very complex. Each use case can have thousands or millions of keys. Third party key managers are designed to remove that complexity, and now they can also work with cloud app - and cloud providers are supporting it.
Eric Han
@larry_lunetta agreed. Not my article but I liked this read from @stackrox on some on the container space. https://www.stackrox.com/post/2020/08/guide-to-gke... #stackrox
Guide to GKE Runtime Security for GCP Workloads | StackRox: Kubernetes and container security solution
This guide discusses GKE runtime security recommendations and best practices to help harden K8s and protect your cloud-native apps
This guide discusses GKE runtime security recommendations and best practices to help harden K8s and protect your cloud-native apps
Bruce Kornfeld
@NickBrackney Agreed. It kind of amazes me that this is so prevalent today. So many cloud apps out there where the customer just "turns on" encryption and maybe doesn't realize the vendor has the keys as well.
