安全既服务–WindowsAzureAD身份云的架构和设计探索.pptxVIP

安全既服务案例分析 – Windows Azure AD 身份云的架构和设计 摘要 1）传统IT安全软件的问题和不足 ? 2）安全既服务的产生和要解决的问题 3）Windows Azure AD 身份云的架构和设计 4）开发人员使用场景 5）打造身份云吸取的经验教训 传统IT安全软件的问题和不足 不适应多租户的云服务 用户扩展性的局限 无法跟上快速开发部署的步伐 Security Software Examples: Ad-Aware Free Antivirus + Protect your personal computer against virus and spyware attacks. Comodo Internet Security Protect PC from viruses, Trojans, worms, buffer overflows, zero-day attacks, spyware and hackers. Comodo Firewall Guard your Windows PC from malware and Internet based attacks. SuperAntiSpyware Free Edition Detect and remove spyware, malware, rootkits, trojans, hijackers, and other malicious threats. Comodo Antivirus Detect and destroy malware and viruses. USB Disk Security Provide protection against any malicious programs trying to attack via USB drive. HitmanPro 3 (32-bit) Rescue your computer from viruses and malware. Trend Micro HijackThis Scan your Registry and hard drive for spyware. Microsoft Security Essentials (64-bit) Protect your computer with Microsofts latest security software. Super Ad Blocker Block all forms of advertising, including pop-ups, Flash ads, and banner ads. 安全既服务的产生和要解决的问题 云计算的安全问题 安全既服务带来的机会 云安全联盟的十大SECaaS 身份云要解决的问题描述 云计算的安全问题 Data Breaches Data Loss Account Hijacking Insecure APIs Denial of Service Malicious Insiders Abuse of Cloud Services Insufficient Due Diligence Shared Technology Issues 安全既服务带来的机会 盾牌式战略思维：把注意力放在使用旧安全工具来保护云中数据和系统 利剑式战略思维：为什么不能用云的力量创造出新一代安全工具 这就是安全既服务（Security as a Service or SECaaS)： Provisioning elastic, scalable security solutions and services to both cloud based and traditional on premises systems in pure cloud or hybrid models. 云安全联盟的十大SECaaS分类 Identity and Access Management (IAM) – 身份云 Data Loss Prevention (DLP) Web Security Email Security Security Assessments Intrusion Management, Detection, and Prevention (IDS/IDP) Security Information and Event Management (SIEM) Encryption Business Continuity and Disaster Recovery (BCDR) Network Security 身份云要解决的问题 云用户账号身份生命周期的管理 支持所以云应用的登录 统