Upload File

클라우드의환경의지속적변화 - cloudsec · 2019-08-30 · analysis network security...

  • Home
  • Documents
  • 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application
20

Upload: others

Post on 30-Jun-2020

0 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application
Page 2: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

www.cloudsec.com | #cloudsec

하이브리드 클라우드에서 새로운워크로드(Docker + Container) 보안

김석주 | 부장

Trend Micro

Page 3: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

클라우드의 환경의 지속적 변화

Page 4: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

서버 환경의 변화…

Physical servers

Virtual servers

Virtual desktops

Public cloud

Containers Serverless

Page 5: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

애플리케이션, 서비스 환경의 변화…

It’s a Hybrid Cloud World

Data Centers Cloud

Existing Applications = Cash Cow New Applications = Growth

Physical Servers

Virtual Servers

Cloud Instances

Containers Serverless

Page 6: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

애플리케이션, 서비스 환경의 변화…ESG Whitepaper, Leveraging the Agility of DevOps Processes to Secure Hybrid Clouds, 2018

Page 7: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

클라우드 보안 요구사항의 변화

Automation With Pipeline & Workload Security

IT Service Management

AmazonSNS

Environments

Monitoring Tools

AWSConfig

AWSCloudTrail

Pipeline Management & Deployment

AWSOpsWorks

Page 8: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

클라우드 워크로드 보안 적용범위

Build Pipeline Runtime

Intrusion Prevention

Sandbox Analysis

Network Security

FirewallVulnerability

ScanningAnti-

Malware

Malware PreventionSystem Security

Application Control

Integrity Monitoring

Log Inspection Behavioral Analysis

Machine Learning

Vulnerability Scanning

Image Scanning

Malware Detection

Sweeping& Hunting

Page 9: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

클라우드 워크로드(as Cloud-Native) 보안

Page 10: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

기존의 워크로드 보안

개발, 빌드, 검증, 배포등 각단계별 분리된 보안

Physical Virtual Cloud Containers

서버백신으로만

보호

애플리케이션이 아닌서버 보안 관점

Page 11: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

기존의 워크로드 보안

가장 많이 사용된컨테이너들 중 최소한 하나이상의 심각한 취약점 가짐

20%

CI/CD Process에서분산된 서비스 개발

개발 소스 신뢰

Page 12: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

새로운 접근의 워크로드 보안

SINGLE STRATEGY FOR MULTIPLE PLATFORMS

위협 방어 연계 네트워크, 플랫폼 그리고 애플리케이션을

넘어 위협 정보를 공유하고대응하는 체계

자동화 Dev & Ops에사용되는 SDKs와 APIs를통한 자동화 및 간소화

개발 프로세스 과정보안 범위 확대

Page 13: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

새로운 접근의 워크로드 보안- Build Pipeline

SHIFT-LEFT APPROACH

DEVELOPMENT PIPELINE

취약점 스캔

안티멀웨어 스캔

BUILD PUSH DEPLOY RUNCOMMIT

Pre-registry 검사

Container Registry 검사

컴플라이언스 검증

빌드 이미지 검증

Page 14: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

방법론 시나리오

BuildCommit

Scan

Alert

DeployPush

Sign/Promote

ExamineRemediate

새로운 접근의 워크로드 보안- Build Pipeline

Page 15: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

파이프라인 스캔 태스크생성

스캔 결과에 따른이미지 허가/불가 판정

“안전한” 이미지만 후속파이프라인 수행

보완을 위해 개발자에게“안전하지 않은"이미지스캔 세부 결과 전송

완전 자동화 된 파이프 라인 스캐닝

새로운 접근의 워크로드 보안- Build Pipeline

Page 16: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

“DevOps” & “개발팀” 을 위한 이미지 문제점 상세정보 제공 상세 패치 정보

새로운 접근의 워크로드 보안- Build Pipeline

Page 17: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

SECURE FULL CONTAINER STACK

BUILD PUSH DEPLOY RUNCOMMIT

보호 영역:

• 컨테이너

• 플랫폼

• 호스트

새로운 접근의 워크로드 보안- Runtime

Page 18: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

Application Container

Docker Engine

Operating System

Cloud-Native Security Solution

Kubernetes

Cloud-native Container based

Security

Application Container

호스트 OS 보호

도커 보호

컨테이너 보호

쿠버네티스 보호

컨테이너 기반애플리케이션 보호

호스트

Full Stack Protection

새로운 접근의 워크로드 보안- Runtime

Page 19: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

#cloudsec

Development

Build

Developers

Commit

Git Jenkins

Container Registry

Runtime: Drupal VPC

Drupal Databases

Drupal Staging

Drupal Master

Private SubnetPublic Subnet

Security

Deep Security

Manager

SOC

Deep

Security

Smart Check

Push Pull

<Drupal Demo>

Page 20: 클라우드의환경의지속적변화 - CLOUDSEC · 2019-08-30 · Analysis Network Security Firewall Vulnerability Scanning Anti-Malware System Security Malware Prevention Application

www.cloudsec.com | #cloudsec

THANK YOU

김석주 | 부장

Trend Micro


La primera será malwarebytes anti-malware. Un vez ... · Malwarebytes Anti-Malware Malware ANTI-MALWARE Registros Lista de ignorados Configuración Más herramientas Escáner Protección

Azure Security Center - CLOUDSEC › kr › pdf › t1-5_microsoft.pdfNotification Hubs Hybrid Cloud Backup StorSimple Azure Site Recovery ... Hubs Data Lake Analytics Service IoT

Malware, Malware y más Malware ¿Cómo me puedo proteger? “Dijo el cliente web”

Arge AINF Hum · • Mobile Device Management (MDM) • Sicherheitsmaßnahmen (IT-Security, Firewall, Schutz vor Malware, Backup) • Mobile digitale Lernbegleiter • Um einen Einsatz

Malware-multzokatze Teknikak (Malware Clustering ...joxeankoret.com/download/hack_beers_malware_multzokatzea.pdf · Malware Eboluzioa: 2000an 2000. urtean, astean behin ikusten zen

美國拉斯維加斯受訓 SANS · Security 2018 FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques 與 SEC573: Automating Information Security with Python，學習惡意程式逆向

A9 Mobile Security - · PDF file– Malware-Analyse – Forensics ... “Examining the recent Android malware”, ... “A Look at a Modern Mobile Security Model:

GESCHÜTZT VERNETZT: KASPERSKY LAB LIEFERT …Axel Springer professionell vor Malware und sonstigen unerwünschten Eindringlingen zu schützen, stellt das Unternehmen seine IT-Security

Security Bootcamp 2013 - Automated malware analysis - Nguyễn Chấn Việt

Checkmate to crypto malware. Scacco matto ai crypto malware

최후의보안 –“패스워드 관리방안 - CLOUDSEC · –네트워크장비에대한패스워드관리미흡 –다양한안장비에 대한패스워드변경필요: 외산및산장비의

SECURITY SALES GUIDE So positionieren Sie IBM Resilient ... · malware investigation und remediation Benutzer können kompromittierte Konten deaktivieren, Quarantäne-Prozesse automatisieren

Zajištění bezpečnosti privilegovaných účtů · 17 IBM Security ENDPOINT BigFix NETWORK QRadar Incident Forensics QRadar Network Insights X-Force Exchange | Malware Analysis

Kaspersky Endpoint Security for Business Introduction · anti-malware Die Basis der Plattform bildet die preisgekrönte Anti-Malware-Technologie von Kaspersky Lab. Diese Technologie

클라우드환경에서능동적다중벡터공격대응 - CLOUDSEC · 2018-03-19 · #CLOUDSEC Multi-vector Attack “Attack vectors are or used to get into computer systems, usually

Internet Security - produktinfo.conrad.de · Avira Premium Security Suite ist ein umfassendes und flexibles Werkzeug, um Ihren Computer zu-verlässig vor Viren, Malware, unerwünschten

KAIST Internet Security Lab. CS710 Behavioral Detection of Malware on Mobile Handsets MobiSys 2008, Abhijit Bose et al. 2008.12.11. 이 승 민

CloudSEC 2015 Keynote 失衡的數位軍火發展

망연계솔루션을이용한클라우드 내부망보안강화#cloudsec 1 4년연속망연계솔루션조달판매1위i-oneNet 보안사고사례(1) 인터파크개인정보천만건유출(2016년7월)

Cybersecurity Assurance at CloudSec 2015 Kuala Lumpur

AUTOMATED ENDPOINT SECURITY · „ad US“ -Angriffe Teil II –Wie mit wenig Aufwand unerwünschte „Datenstaubsauger“ in Ihrem Unternehmensnetzwerk entstehen Malware der „Hidden

Network Security: Malwareedocs.ilkom.unsri.ac.id/1194/1/FEPILIANA_09011181320024...- Malware sering dikembangkan agar dapat menularkan dirinya ke tempat-tempat lain, dengan cara kerja

Mar - pitci.com · 2016 . Android Malware Detection Test 2016 Mar ... Zemana Zemana Mobile Security 1.0.6 Zoner Zoner AntiVirus Free 1.11.1 . Android Malware Detection Test 2016 Mar

Malware Nilgün Kablan. Malware …………………………………….…….……………………………………………… Geschichte der Malware ……………….…………………………………………………

全球重大APT攻擊事件剖析 - Trend Micro › micro › cloudsec › event › slides › C1.pdf · •Android malware were found in Luckycat servers •The malicious apps had

EUROPEAN COMPUTER DRIVING LICENCE: IT SECURITY … PARTE 1_2.pdf · EUROPEAN COMPUTER DRIVING LICENCE: IT SECURITY SPECIALISED LEVEL Altri tipi di malware 86 Gli Adware sono software

Smartphone Security Malware und Sicherheit für Android 1

Guía Práctica de Seguridad · Limpia todo rastro de malware en los equipos afectados. Para limpiar completamente los vestigios del malware, Panda Security recomienda Cloud Cleaner,

G DATA.GI-Dortmund.malware-trends2009.print.ppt ... · Geschützt. Geschützter. G DATA. Malware-Trends 2009 Ralf Benzmüller G DATA Security Labs Agenda !!Kurzvorstellung G DATA

Guía Práctica de Seguridad - DirectorTIC · Limpia todo rastro de malware en los equipos afectados. Para limpiar completamente los vestigios del malware, Panda Security recomienda

1 Automated malware audit service Automatischer Malware Audit

Malware Detector

사례로살펴보는클라우드 - CLOUDSEC · 2019-08-30 · Oracle 기본네트워크암호화(NNE) 설정 Oracle SSL 설정 Oracle APEX Listener 설정 옵션정책 RDS. #cloudsec

Security Bootcamp 2013 - Difficulties of malware analysis - Nguyễn Chấn Việt

하이브리드클라우드완벽한자동화지원 ... #cloudsec Deep Security Smart Check CI/CD Pipeline 통 Commit Build Scan Alert Push Sign/Promote Deploy Examine 이미지스캔및점검