Информационная безопасность и защита персональных данных (ПДн) в виртуальных средах

  • Published on
    11-Nov-2014

  • View
    2.186

  • Download
    4

Embed Size (px)

DESCRIPTION

4CIO 22-03-2011

Transcript

<ul><li> 1. Sator Arepo Tenet Opera Rotas () () http://devbusiness.ru/mkozloff</li></ul> <p> 2. Sator Arepo Tenet Opera Rotas - (ROI)20 VDEL, Trend Micro, VMware, Microsoft, V6, CARANA,Cognitive Technologies 3. Sator Arepo Tenet Opera Rotas () ( )/ / (. VM) (Storage) (SAN)3 4. Sator Arepo Tenet Opera Rotas ? , 4 5. Sator Arepo Tenet Opera Rotas . -The Economist, March 5, 2010 5 6. Sator Arepo Tenet Opera Rotas - : Gartner, 20106 7. Sator Arepo Tenet Opera Rotas2010, 2011 VDI ?: http://www.enterprisemanagement.com/ 8. Sator Arepo Tenet Opera Rotas 285 2008 . (Verizon Business RISK Team) 2008 $202, $152 (Ponemon Institute)True Cost of Compliance Report, Ponemon Institute LLC, January 20118 9. Sator Arepo Tenet Opera Rotas 9 10. Sator Arepo Tenet Opera Rotas The Value Of Corporate SecretsHow Compliance And Collaboration Affect Enterprise Perceptions Of Risk March 2010, Forrester 10 11. Sator Arepo Tenet Opera Rotas ? 11 12. Sator Arepo Tenet Opera Rotas 12 13. Sator Arepo Tenet Opera Rotas 13 14. Sator Arepo Tenet Opera Rotas =: () Virtualization Security PCI DSS CIS Hardening 14 15. Sator Arepo Tenet Opera Rotas Firewall, VPN .. DLP IDS/IPS 010110100101000101010110100101000101 010110 100101 000101 16. Sator Arepo Tenet Opera Rotas Console OS Blue Pill &amp; RedPill , 17. Sator Arepo Tenet Opera Rotas Red Pill Blue Pill , 17 18. Sator Arepo Tenet Opera Rotas blue pill : 18 19. Sator Arepo Tenet Opera Rotas (kernel) VMwareESX VMware VMsafe API : ( Hyper-V ) : App AppApp IDS / IPS OSOSOS ESX ServerVMsafe APIs 19 20. Sator Arepo Tenet Opera Rotas : vShield Endpoint / 21. Sator Arepo Tenet Opera Rotas vSphere 5 VI 3 vSphere 4 (Linux based) VMware Security Hardening Guide vGate 21 22. Sator Arepo Tenet Opera RotasVMware Linux Clients Advisory vSphere vCenter (SSL+) Linux , vSphere man-in-the-middle VMware Linux 23. Sator Arepo Tenet Opera Rotas VMware .vmx VMX 24. Sator Arepo Tenet Opera Rotas DoS : vGate 25. Sator Arepo Tenet Opera Rotas 1 25 26. Sator Arepo Tenet Opera RotasVMware vShield: , ,VPN, Load balancerFirewallVPNvShieldVirtualEtc Appliance VPN : 26 27. Sator Arepo Tenet Opera Rotas vMotion , : / (LAN,RAM, HDD) Man in The Middle 27 28. Sator Arepo Tenet Opera Rotas CAPTCHA MAN IN THE MIDDLE 28 29. Sator Arepo Tenet Opera RotasKoobface , MitM 29 30. Sator Arepo Tenet Opera RotasCAPTCHA 30 31. Sator Arepo Tenet Opera Rotas Man in the Middle SSL Man in TheMiddle 3- 32. Sator Arepo Tenet Opera Rotas () , OFF 32 33. Sator Arepo Tenet Opera Rotas . 33 34. Sator Arepo Tenet Opera Rotas App OS 35. Sator Arepo Tenet Opera Rotas (Out of Band) OOB OOB (, VPN, IPS, ...) NAC VPN , / 36. Sator Arepo Tenet Opera Rotas , ( NFS) (iSCSI, NFS) (production) CHAP iSCSI SAN Zoning LUN Masking 37. Sator Arepo Tenet Opera Rotas PCI DSS 2.0CIS VMware ESX Server BenchmarksVMware Security Hardening Best PracticesHyper-V Security Guide 100 37 38. Sator Arepo Tenet Opera Rotas 100 38 39. Sator Arepo Tenet Opera RotasHypervisor Rootkit DetectionHookSafe (Microsoft NC State)Hypersight Rootkit DetectorIntel Trusted Boot 40. Sator Arepo Tenet Opera Rotas VMware Hyper-V vGate for VMware: ? Hyper-V Best Practices Analyzer for Windows Server 2008 R2 40 41. Sator Arepo Tenet Opera Rotas VMware VMware VMware vCenter Server EMC Ionix for Virtualization, VMware vSphere Host Profiles NetIQ Secure Configuration Manager, VMware vCenter ConfigControl Tripwire Enterprise for VMware(future) vGate for VMware ( )VMware vCenter OrchestratorVMware vCenter LifecycleManagerVMware Update Manager Shavlik NetChk Protect VMware vShield Zones Cisco vNetwork Distributed Switch Checkpoint Reflex Trend Micro vGate for VMware ( ) 42. Sator Arepo Tenet Opera Rotas VMwarehttp://www.networkworld.com/reviews/2011/030711-virtualization-security-test.html 42 43. Sator Arepo Tenet Opera Rotas Microsoft Hyper-V R2 Windows 2008 Server OS 2 API () API MAC (, IPS) rootkits Hyper-V security Guide 44. Sator Arepo Tenet Opera Rotas 5nine Virtual Firewall 2.0 for Hyper-V : , VMware vShield:, Firewall, VMware, vShield , API , , VMware 45. Sator Arepo Tenet Opera Rotas: 45 46. Sator Arepo Tenet Opera Rotas VMware vShield - vShield 46 47. Sator Arepo Tenet Opera RotasTrend Micro Deep Security for VMwarevNIC vNIC vNIC vNICvSwitch VM , VM FW, IDS/IPS 47 48. Sator Arepo Tenet Opera Rotas 48 49. Sator Arepo Tenet Opera Rotas CapEx OpEx 50. Sator Arepo Tenet Opera Rotas ID ! 51. Sator Arepo Tenet Opera RotasCloud Security Alliance 51http://www.cloudsecurityalliance.org/ 52. Sator Arepo Tenet Opera Rotas = .http://www.cloudsecurityalliance.org/csaguide.pdf 52 53. Sator Arepo Tenet Opera Rotas v1.0 #1: #2: APIs #3: #4: #5: #6: #7: Top Threats to Cloud Computing 53 54. Sator Arepo Tenet Opera RotasHardware Root of Trust Intel, RSA, RSA Archer Tech VMware 55. Sator Arepo Tenet Opera RotasIntel TXT Trusted Execution Technology (TXT) - Intel TXT , BIOS firmware Intel VirtualizationTechnology (VT), 56. Sator Arepo Tenet Opera RotasTrusted Platform Module (TPM) 57. Sator Arepo Tenet Opera Rotas 57 58. Sator Arepo Tenet Opera Rotas PCI DSS 152 : 58 59. Sator Arepo Tenet Opera Rotas 3 2 1- 1000 1000 100 000 100 000 () 4 444, 3 332, 2, 321 , 1, , , , 1 111, , 60. Sator Arepo Tenet Opera Rotas 61. Sator Arepo Tenet Opera Rotas152 VMware ? 1 2011 .VMware vSphere 4.1 vSphere 4. + vGate: ESX 4.0 Update 1 VMware vCenter Server 4.0 Update 1 1 2 62. Sator Arepo Tenet Opera Rotas vGate for VMware Infrastructure vGate 2 vGate 1.0 2( ) 5 4 2 1 1 1 1 62 63. Sator Arepo Tenet Opera Rotas vGate VMware - vs. SNMP --WMI - TM, VMW TM, VMW 63 64. Sator Arepo Tenet Opera Rotas152 Hyper-V ? 1 Microsoft Windows Server 2008 R2 , Standard, Enterprise Datacenter 5 1 2 http://www.fstec.ru/_doc/reestr_sszi/_reestr_sszi.xls 65. Sator Arepo Tenet Opera Rotas Windows Server 1 TrustAccess: (): Security Studio Endpoint Protection SecretNet (): : Trust Access + Security Studio Suite 66. Sator Arepo Tenet Opera RotasPCI-DSS: $500,000 66 67. Sator Arepo Tenet Opera Rotas PCI DSS 2.0vSphereHyper-V vGate for VMware 67 68. Sator Arepo Tenet Opera RotasPCI DSS 2.0: vSwitch vSwitch VLANs 802.1Q, (. 2.2.1). vSwitch 68 69. Sator Arepo Tenet Opera RotasvGate PCI DSSvGate VMware PCI DSS 69 70. Sator Arepo Tenet Opera Rotaswww.sanctummovie.com 71. Sator Arepo Tenet Opera Rotas vGate: http://www.securitycode.ru/products/sn_vmware/ vGate Compliance Checker for VMware (free) http://www.securitycode.ru/products/sn_vmware/vgtate_checker/ Hyper-V Security Guide http://bit.ly/dsrnXc Security Best Practices for Hyper-V and Server Virtualization http://bit.ly/hq6chE Virtualization Security Overview by Cisco http://isaca-ut.org/documents/speakers/2010/Virtualization Security Overview.pptx 71 72. Sator Arepo Tenet Opera Rotas 1 vSphere HyperV , 1 72 73. Sator Arepo Tenet Opera Rotas !? </p>

Recommended

View more >