Security Monitoring and Enforcement for the Cloud Model Aryan - PowerPoint PPT Presentation

Infrastructure Architecture for a Cloud IaaS Provider Software Defined Networking and Network Virtualization Network Monitoring Security Enforcement Inter-Domain Routing for Virtualized Networks Security Monitoring and Enforcement for the Cloud Model Aryan TaheriMonfared aryan.taherimonfared@uis.no June 21, 2013 Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider Software Defined Networking and Network Virtualization Network Monitoring Security Enforcement Inter-Domain Routing for Virtualized Networks Agenda Infrastructure Architecture for a Cloud IaaS Provider 1 10000 Foot View 1000 Foot View Networking inside a Rack Tenant Network Logical View Challenges Software Defined Networking and Network Virtualization 2 Definition Rationality Use Cases Network Monitoring 3 Challenges Data-intensive framework for network monitoring NV-aware Framework for Cloud Model Security Enforcement 4 Inter-Domain Routing for Virtualized Networks 5 Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Outline Infrastructure Architecture for a Cloud IaaS Provider 1 10000 Foot View 1000 Foot View Networking inside a Rack Tenant Network Logical View Challenges Software Defined Networking and Network Virtualization 2 Network Monitoring 3 Security Enforcement 4 Inter-Domain Routing for Virtualized Networks 5 Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Multiple Cells Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Single Cell Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Inside a Rack Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Inside a Compute Node Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Network Logical View Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Any Networking Challenges? Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Any Networking Challenges? Yes, lots of them :) Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Any Networking Challenges? Deployment complexity Maintenance cost Tenant’s network isolation and end-to-end connectivity Tenant’s traffic monitoring Security enforcement Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Deployment complexity and Maintenance cost Increased number of networking devices by the factor of cluster size Virtualized networking devices Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Tenant’s traffic isolation and end-to-end connectivity VLAN tagging GRE tunnels, EoIP tunnels Namespaces in Linux networking stack Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Tenant’s network monitoring How to distinguish between tenants’ traffic? Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Tenant’s network monitoring How to distinguish between tenants’ traffic? VLAN IDs? GRE addresses? Namespaces? Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Tenant’s network monitoring How to get the information in real-time? Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Tenant’s network monitoring How to get the information in real-time? Querying: network management service? platform controller? each compute node? Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Infrastructure Architecture for a Cloud IaaS Provider 10000 Foot View Software Defined Networking and Network Virtualization 1000 Foot View Network Monitoring Networking inside a Rack Security Enforcement Tenant Network Logical View Inter-Domain Routing for Virtualized Networks Challenges Security enforcement Where to put security middle boxes? How to control and federate them with the rest of platform’s components? Aryan TaheriMonfared aryan.taherimonfared@uis.no Security Monitoring and Enforcement for the Cloud Model

Security Monitoring and Enforcement for the Cloud Model Aryan - PowerPoint PPT Presentation

Infrastructure Architecture for a Cloud IaaS Provider Software Defined Networking and Network Virtualization Network Monitoring Security Enforcement Inter-Domain Routing for Virtualized Networks Security Monitoring and Enforcement for the

Including Security Monitoring in Cloud Service Level Agreement (SLA) Amir Teshome Supervisors

KAFKA STREAMS CLOUD MONITORING AWS CLOUD MONITORING AWS APP CLOUD MONITORING AWS HTTP APP

All Your Cluster-Grids Are Belong to Us: Monitoring the (in)Security of Infrastructure Monitoring

A Blockchain based Witness Model for Trustworthy Cloud Service Level Agreement Enforcement Huan

CloudWatcher: Network Security Monitoring Using OpenFlow in Dynamic Cloud Networks (or: How to

Chapter 9 Cloud Security Contents Security in an interconnected world, cloud security

Security, IAM AWS sh shared red res espon ponsib sibility ility mo model el Portland

Security in Cloud Computing A survey of the unique challenges and risks inherent to the Cloud

Cloud Security Today Presenter: Jason Sheffield Topics What are the issues today? What is the

An Adaptive Technique to Model Virtual Machine Behavior for Scalable Cloud Monitoring C. Canali

Institute for Cyber Security A Formal Model for Isolation Management in Cloud

in Hungary Enforcement procedure Procedure after Ordering enforcement enforcement order

Monitoring Security Policies Felix Klaedtke NEC Labs Europe Story so far . . . Which

Y O U R D A T A . O U R T E C H N O L O G Y . Data Monitoring in The Cloud Connect all of your

Outline Get Off of My Cloud 8271 discussion of cloud computing security (combined)

1 1.2. Guidelines for Information Security of Cloud Computing Category Main contents of measure

Can You Trust Your Encrypted Cloud? An Assessment of SpiderOakONEs Security Anders Dalskov

Cloud Security Guidance Tania Martin Smals Research January 2015 www.smalsresearch.be Overview

Cloud Security Guidance Tania Martin Smals Research February 2015 www.smalsresearch.be Overview

Security and Privacy for Cloud Computing Refik Molva Cloud Computing Outsourcing

Compliance Monitoring and Enforcement Program Annual Report Ed Kichline, Senior Counsel and

Security Summer 2016 Cornell University 1 Today Security policies Enforcement

The Cloud-y Future of Security Technologies Adam J. ODonnell, Ph.D. Director, Cloud

Large-scale performance monitoring framework for cloud monitoring Run-Time Latency Detection in