Welcome!

Agile Computing Authors: Yeshim Deniz, Elizabeth White, Zakia Bouachraoui, Pat Romanski, Liz McMillan

Related Topics: @CloudExpo, Cloud Security, @DXWorldExpo, @DevOpsSummit

@CloudExpo: Article

Cloud Security Innovation in 2016 | @CloudExpo #Cloud #IoT #BigData

In 2016, watch for more solutions providers to launch additional features and capabilities to enhance cloud security

What Are the Four Biggest Drivers of Cloud Security Innovation in 2016?

The rise of cloud-based infrastructure was one of the biggest developments in IT during the past few years, and now we are seeing extensive innovations in cloud security as well. More companies are moving their business-critical data away from onsite data centers and into cloud-based infrastructure. With that in mind, 2016 is going to be another dynamic year for cloud security, as more users and IT teams will be looking for ways to enhance their cloud security while achieving heightened visibility of their cloud-based IT assets. The migration of business workloads to the cloud brings many benefits, but one potential challenge is that the "old ways" of managing IT security don't work as well in the cloud environment.

In 2016, we're going to see some significant changes to cloud security. The reason: cloud infrastructure has certain vulnerabilities that require new security solutions designed specifically for the new realities of the cloud. Attacks on cloud-based infrastructure will continue to grow in sophistication and scale, especially as a greater volume of high-value data gets stored in the cloud. With these risks and opportunities becoming more urgent than ever for IT managers and security teams, we can expect to see four major drivers of cloud security innovation in 2016.

Rise of serverless frameworks
Amazon Web Services (AWS) Lambda is a prominent example of the new wave of serverless frameworks and code-PaaS (code-based Platform-as-a-Service). With serverless frameworks, IT teams on the user side are no longer expected to manage their own operating system, container (Docker, LXC, etc.) or virtual machine. This is a massive change from a security standpoint, because it is going to require IT teams to protect APIs against attacks - and this is a new type of attack vector that the IT teams might not have seen before.

"Fire-hose" streams on the control plane
In a cloud environment, the control plane is vulnerable to automated attacks - unless IT organizations prepare by implementing real-time alerts and develop capacity for immediate incident response.

One of the most promising trends in this area, which we will see more of in 2016, is that more host and network-based security measures are migrating to the cloud's control plane, making it possible to deliver serverless-process events, host events, and network events via APIs. Security teams will benefit from seeing real-time "fire-hose" streams on the control plane, instead of having to rely on the slower discovery methods available from traditional in-line network or data center security tools.

Integrating security into the CI/CD pipeline
Security is increasingly no longer being thought of as a "separate" entity from developing and deploying apps and workloads in the cloud. This is another of the most important innovations in cloud security, this change of mindset. Cloud security is becoming more native to, and integrated with, the continuous integration and continuous deployment (CI/CD) pipeline. This means that in 2016, we will see more IT organizations achieve more agile security operations that are better aligned with the philosophy and practices of DevOps.

Bringing security into the CI/CD process makes it possible for popular tools like Jenkins to offer automated security validation as well as new code verification. Instead of being an afterthought or a separate step, cloud security is becoming integrated into the overall quality-assurance process within the continuous deployment pipeline.

More innovation - or acquisitions - by big security providers
The big companies in IT security are going to start to see increasing pressure to deliver next generation cloud security solutions - or else they're going to lose market share to smaller companies that are fully up to speed on the new realities of the cloud. In 2016, watch for two big emerging trends among the big incumbent security providers:

First, look for the big companies to start announcing new product innovations in cloud security - or they will start acquiring more small vendors that own innovative solutions. Second, Amazon Web Services and Microsoft's Azure will be competing like never before to use security as a competitive advantage - each of these cloud services giants will be offering new and expanded cloud security capabilities in order to retain (and gain) market share. One of the areas of focus for new cloud security features will be the shared security model, as cloud services providers seek to give customers more visibility into what's happening in their cloud infrastructure.

The past few years have seen great innovation in cloud services - now in 2016, watch for more solutions providers to launch additional features and capabilities to enhance cloud security. The same security practices that worked in the past are not good enough for the new realities and opportunities of the cloud - cloud security demands a new cloud-focused mindset. Fortunately there are many innovations on the horizon to deliver the flexibility and real-time awareness that organizations need to secure their cloud-based assets.

More Stories By Tim Prendergast

Tim Prendergast is founder and CEO of Evident.io. With well over two decades of pushing the limits of technology, he created Evident.io as the first security company focused solely on programmatic infrastructures (cloud). His prior experience includes leading technology teams at Adobe, Ingenuity, Ticketmaster and McAfee. He holds over 15 years’ security experience, including eight in AWS security experience and three years in the Adobe AWS infrastructure from inception to production. Follow Tim on LinkedIn and Twitter.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


IoT & Smart Cities Stories
When talking IoT we often focus on the devices, the sensors, the hardware itself. The new smart appliances, the new smart or self-driving cars (which are amalgamations of many ‘things'). When we are looking at the world of IoT, we should take a step back, look at the big picture. What value are these devices providing. IoT is not about the devices, its about the data consumed and generated. The devices are tools, mechanisms, conduits. This paper discusses the considerations when dealing with the...
Charles Araujo is an industry analyst, internationally recognized authority on the Digital Enterprise and author of The Quantum Age of IT: Why Everything You Know About IT is About to Change. As Principal Analyst with Intellyx, he writes, speaks and advises organizations on how to navigate through this time of disruption. He is also the founder of The Institute for Digital Transformation and a sought after keynote speaker. He has been a regular contributor to both InformationWeek and CIO Insight...
CloudEXPO New York 2018, colocated with DXWorldEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.
Bill Schmarzo, Tech Chair of "Big Data | Analytics" of upcoming CloudEXPO | DXWorldEXPO New York (November 12-13, 2018, New York City) today announced the outline and schedule of the track. "The track has been designed in experience/degree order," said Schmarzo. "So, that folks who attend the entire track can leave the conference with some of the skills necessary to get their work done when they get back to their offices. It actually ties back to some work that I'm doing at the University of San...
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settlement products to hedge funds and investment banks. After, he co-founded a revenue cycle management company where he learned about Bitcoin and eventually Ethereal. Andrew's role at ConsenSys Enterprise is a mul...
IoT is rapidly becoming mainstream as more and more investments are made into the platforms and technology. As this movement continues to expand and gain momentum it creates a massive wall of noise that can be difficult to sift through. Unfortunately, this inevitably makes IoT less approachable for people to get started with and can hamper efforts to integrate this key technology into your own portfolio. There are so many connected products already in place today with many hundreds more on the h...
DXWorldEXPO | CloudEXPO are the world's most influential, independent events where Cloud Computing was coined and where technology buyers and vendors meet to experience and discuss the big picture of Digital Transformation and all of the strategies, tactics, and tools they need to realize their goals. Sponsors of DXWorldEXPO | CloudEXPO benefit from unmatched branding, profile building and lead generation opportunities.
DXWorldEXPO LLC announced today that Telecom Reseller has been named "Media Sponsor" of CloudEXPO | DXWorldEXPO 2018 New York, which will take place on November 11-13, 2018 in New York City, NY. Telecom Reseller reports on Unified Communications, UCaaS, BPaaS for enterprise and SMBs. They report extensively on both customer premises based solutions such as IP-PBX as well as cloud based and hosted platforms.
In his keynote at 19th Cloud Expo, Sheng Liang, co-founder and CEO of Rancher Labs, discussed the technological advances and new business opportunities created by the rapid adoption of containers. With the success of Amazon Web Services (AWS) and various open source technologies used to build private clouds, cloud computing has become an essential component of IT strategy. However, users continue to face challenges in implementing clouds, as older technologies evolve and newer ones like Docker c...
The best way to leverage your Cloud Expo presence as a sponsor and exhibitor is to plan your news announcements around our events. The press covering Cloud Expo and @ThingsExpo will have access to these releases and will amplify your news announcements. More than two dozen Cloud companies either set deals at our shows or have announced their mergers and acquisitions at Cloud Expo. Product announcements during our show provide your company with the most reach through our targeted audiences.