Software-Defined Security: The New School of Security Designed for DevOps
Download as PPTX, PDF0 likes214 views
The document discusses the importance of data security in the context of increasing data breaches, highlighting that 95% of breaches involve unencrypted data. It emphasizes the inadequacy of traditional security measures and presents the BOSH platform as a more effective solution for data encryption and protection. Additionally, it notes the significance of compliance and the need for innovative approaches to protect sensitive information in various sectors.
Software-Defined Security: The New School of Security Designed for DevOps
- 1. Zettaset XCrypt Service Encryption October 7–10, 2019 Austin Convention Center Tim Reilly, COO Maksim Yankovskiy, VP Engineering
- 2. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Never has DATA been so IMPORTANT
- 3. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ of the world’s data has been created in the last 2 years 90%
- 4. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ 16 Zettabytes (16x1021)
- 5. The world’s largest taxi company, owns no vehicles. Uber The world’s most popular media owner, creates no content. Alibaba The world’s largest accommodation provider, owns no real estate. Facebook Airbnb The most valuable retailer, has no inventory
- 6. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Source: Visual Capitalist, Q4 2018
- 7. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Digital Disruption 10x 1/10th More Innovation The Cost 100xThe Power
- 8. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ DATARECORDS LOST OR STOLEN SINCE2013 6 million perday onaverage Technology 32% Government 10% Retail 9% Financial 4% Entertainment 3% Healthcare 2% Education 1% Other 39% Every type of organization is exposed Traditional security is no longer sufficient Breaches are growing year-on-year across all sectors Source: Gemalto breachlevelindex, Q1 2018
- 9. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ UNENCRYPTED DATA 95% of breaches involved unencrypted data Source: breachlevelindex, Q1 2018 Main cause of damages
- 10. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Largest component of data breach is lost business2018 Survey • Data breaches will increase in frequency & diminish shareholder value • Pessimistic about ability to protect from cyber threats • Cybersecurity is still not considered a strategic priority • Unsecured IoT devices will likely cause a data breach • More investment to achieve regulatory compliance Data Breaches Are Frequent & Costly
- 11. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ DevOps & Data • Storage platforms – scalable, automated & dynamic • Development data is still data • Dev environment security lags behind production
- 12. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ How Do Systems Get Breached?
- 13. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ The Foundation is Trust in Data
- 14. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Security & Compliance Requirements
- 15. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Why Not Just Use Traditional Data Protection Tools? • Centralized • Scalability issues • Not data service agnostic • Not cloud native • Complicated
- 16. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Better Data Protection Through BOSH • Transparency! • Encrypt at runtime • Data service agnostic: work with any data service • Key management – separate but automated • Scales with Pivotal Platform – set up, tear down • No changes to existing processes
- 17. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ XCrypt BOSH Platform Architecture 1 7 Data Service Instance MySQL, Redis, etc. Virtual Key Manager (KMIP), Soft HSM (PKCS#11) BOSH Release License Server BOSH Release XCrypt Encryption Client for BOSH Add-On persistent storage (encrypted) BOSH Director * deployment key exchange BOSH Agent* * modified CF components, contributed to open-source CF Certificate Authority BOSH Release
- 18. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ A Word About Containers
- 19. Unless otherwise indicated, these slides are © 2013-2019 Pivotal Software, Inc. and licensed under a Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/ Thank you!