The Top 3 Trends

The Top 3 Trends

Cloud security faces its own security issues

Cloud environments give companies a cost-effective, easy-to-use data store solution. In fact, analysts predict that cloud spending will cross a $200 billion tipping point in 2016. But, there’s a catch. The rapid growth of cloud adoption has left many organizations playing catch up, struggling to outline proper and complete cloud security strategy to protect these new data environments. Consequently, organizations may proceed with cloud migration and adoption, in order to take advantage of all the very real cost-saving and efficiency outcomes, but many are left with unprotected sections of their application stack. Due to the increased threat diversity in the cloud, it’s important for companies to seek out cloud-native security solutions that are custom-made and purpose-built for the cloud.

PURPOSE-BUILT CLOUD SECURITY

With today’s constantly changing threat landscape and the increasing adoption of cloud, security should be top of mind for organizations of all sizes. In fact, a 451 Research and TheInfoPro survey highlights that more than 92 percent of respondents put security capabilities at the top of their list when selecting a cloud security provider. Even though incident frequency is still generally greater in on-premises environments, attacks against cloud infrastructures are growing at a faster rate, according to Alert Logic’s 2015 Cloud Security Report.

Legacy security solutions that were originally designed for on-premises infrastructures do not and cannot adequately protect cloud applications. A simple forklift move of applications from a data center to the cloud without proper analysis and appropriate security measures may leave attack vectors, paths through which a hacker can gain access to an environment, exposed.

Instead, companies must consider the correct plan of attack for both on-premises and cloud hosting provider (CHP) environments. Consider the appropriate security measures to accompany application migration. Because legacy security products are primarily geared toward protection of on-premises attack vectors, like malware, these products will not defend cloud deployments against CHP-specific vectors like web application attacks.

Organizations need to take responsibility for the continuous process of evaluating and analyzing procedures and tools in order to optimize solutions for their environments and safeguard against the growing threat persistence and landscape. With the recent news surrounding retailer and financial institution information breaches, it is not surprising that companies are looking to cloud and security providers for solutions. For effective cloud security to operate and scale properly while providing the right level of detection and protection, tight integration with the underlying cloud platform is required.

CLOUD SECURITY TRENDS IN 2016 AND BEYOND

Brute force attacks and vulnerability scans occur at similar rates in both cloud and on-premises environments. The ease of attack execution has led to this convergence, along with the movement of traditional enterprise workloads to the cloud, including more “theft-worthy” data. We are now in the throes of cloud adoption and cloud security innovation. Top security offerings for purpose-built cloud security include infrastructure and web application security, end-to-end encryption and use of a managed security service for threat detection and log monitoring.

Here are three trends that will continue to shape the industry and drive cloud security expansion in the next few years.

Security designed for the cloud. The industry needs to lead with the message that cloud environments can and should be safer than on-premises data centers. Applications are moving to the cloud because of the benefit of improved operations through a DevOps model, which emphasizes collaboration between software developers and IT operations to optimize deployment of products and services.

With this, organizations can automate continuous delivery, from code to quality assurance to full production pushes, using tools that address confirmation management, test system, application deployment and monitoring. When moving applications to the cloud, companies can also wrap specific controls and tailored policies around that application stack. In doing this, areas that are available to attackers become smaller. Organizations can then achieve a higher level of functionality in the cloud than in an enterprise data center. In the future, expect security solutions that are specifically designed for the cloud, programmable and highly automated, and able to deploy and auto-scale with minimal effort.

Big data security analytics. In cloud deployments, the vast majority of what is needed to analyze and identify security incidents is not being seen by most legacy security products. Traditionally, security has been focused on security logs, but these logs offer a limited vantage point when working to comprehend activity across an entire application stack. For this reason, machine data and analytics are compulsory for a strong security posture.

Machine data includes information from system logs, database transactions, application logs, configuration statistics and network telemetry. The ability to view all of these entities reveals up to 80 percent more attack indications, enabled by grid processing, machine learning and big data analytics techniques. In this data, many of the logs are custom, and security teams may not know what to do with them. With today’s cloud security solutions, companies can pull in logs and couple them with machine data for thorough intelligence that offers a better “big data” security vantage point.

Cloud threat intelligence. Threat intelligence, one of the most active fields of research in security today, includes context, indicators of compromise and actionable data about malicious actors. It helps to further identify threats with the highest fidelity and augments security analytics for both pre- and post-compromise activity.

Threat intelligence provides insight into quantitative data such as malicious IPs, domains and URLs, as well as qualitative information around new attack methods including campaigns, tools, and techniques. By leveraging threat intelligence and identifying threats before, during and after an attack, cloud providers are able to deliver higher levels of security for their customer base.

Threat intelligence partnerships can only yield more comprehensive security programs. For instance, a provider may send malicious code to a threat intelligence lab to be analyzed and then compiled into intelligence feeds.

All in all, as an effect of automation and cloud computing, we are seeing a dramatic change in the security industry with regard to how security is designed, delivered and what constitutes the “right” security strategy. In the next two to three years, there will be more specialization—some companies will focus strictly on on-premises environments, while others will hone in on the cloud. In terms of specific initiatives to make the cloud more secure than traditional data centers, we are just scratching the surface. Organizations that partner with cloud providers for cloud-specific security solutions are few and far between, but we can expect this to change as cloud adoption becomes more widespread in the years to come.

This article originally appeared in the September 2016 issue of Security Today.

Featured

  • 12 Commercial Crime Sites to Do Your Research

    12 Commercial Crime Sites to Do Your Research

    Understanding crime statistics in your industry and area is crucial for making important decisions about your security budget. With so much information out there, how can you know which statistics to trust? Read Now

  • Boosting Safety and Efficiency

    Boosting Safety and Efficiency

    In alignment with the state of Mississippi’s mission of “Empowering Mississippi citizens to stay connected and engaged with their government,” Salient's CompleteView VMS is being installed throughout more than 150 state boards, commissions and agencies in order to ensure safety for thousands of constituents who access state services daily. Read Now

  • Live From GSX: Post-Show Review

    Live From GSX: Post-Show Review

    This year’s Live From GSX program was a rousing success! Again, we’d like to thank our partners, and IPVideo, for working with us and letting us broadcast their solutions to the industry. You can follow our Live From GSX 2023 page to keep up with post-show developments and announcements. And if you’re interested in working with us in 2024, please don’t hesitate to ask about our Live From programs for ISC West in March or next year’s GSX. Read Now

    • Industry Events
    • GSX
  • People Say the Funniest Things

    People Say the Funniest Things

    By all accounts, GSX version 2023 was completely successful. Apparently, there were plenty of mix-ups with the airlines and getting aircraft from the East Coast into Big D. I am all ears when I am in a gathering of people. You never know when a nugget of information might flip out. Read Now

    • Industry Events
    • GSX

Featured Cybersecurity

Webinars

New Products

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area. 3

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings. 3

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file. 3