BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Is Public Cloud Security As Mysterious As Crop Circles?

Posted August 18, 2011    Peter McCalister

There are many of you out there who have seen pictures of crop circles and believe that they are truly a mystery that no one will ever get to the bottom of. For those of us in the information security field, I think we are starting to believe that the key to security in public clouds may be as elusive as the secret to crop circles.

Case in point, Amazon continues to deliver new, enterprise grade capabilities in its AWS cloud offering. Their recent release of federation capabilities is quite impressive. Coupled with their earlier release of policy based IAM capabilities. it gives their security and compliance sensitive customers a number of powerful tools to work with. Enterprises can now create temporary security credentials for AWS to allow existing identities (from, for example, a LDAP server) to make use of IAM’s fine-grained access controls.

Others like IBM with their Smart Cloud Enterprise and Enterprise+ offerings are also stepping up to meet the security and reliability standards of their most demanding customers.

But talking to a former Peregrine Systems colleague who is spending a lot of time with cloud vendors, highlighted that one big remaining issue is the mystery of what goes on at the hypervisor level in public clouds. As I highlighted in an earlier post the recent report by the Ponemon Institute on the Security of Cloud Computing Providers shows that cloud providers are “least confident in their ability to restrict privileged user access to sensitive data”.

We are helping our customers extend their existing insider security infrastructure, policies and compliance reporting to their private, public and hybrid clouds (more on that next week) but we can’t yet help control and monitor what the cloud provider’s many insiders are doing. But I will say this, if the cloud providers want to remove the mystery, we are happy to help provide the tools to do it.

Leave a Reply

Additional articles

ovum-research

New Analyst SWOT Assessment Identifies Key Strengths of PowerBroker

Posted November 24, 2014    Scott Lang

Following on the heels of the Gartner PAM market guide and Frost & Sullivan review of Password Safe comes a new analyst review of our BeyondInsight and PowerBroker platforms, a SWOT assessment of BeyondTrust written by Ovum. Ovum’s honest and thorough review of BeyondTrust indicates that we are delivering, “…an integrated, one-stop approach to PAM….

Tags:
, , ,

Patented Windows privilege management brings you unmatched benefits

Posted November 24, 2014    Scott Lang

We are pleased to announce that BeyondTrust has been granted a new U.S. Patent (No. 8,850,549) for privilege management, validating our approach to helping our customers achieve least privilege in Windows environments. The methods and systems that we employ for controlling access to resources and privileges per process are unique to BeyondTrust PowerBroker for Windows….

Tags:
6

A Quick Look at MS14-068

Posted November 20, 2014    BeyondTrust Research Team

Microsoft recently released an out of band patch for Kerberos.  Taking a look at the Microsoft security bulletin, it seems like there is some kind of issue with Kerberos signatures related to tickets. Further information is available in the Microsoft SRD Blogpost So it looks like there is an issue with PAC signatures.  But what…

Tags:
, , , ,