SANS Community Nights are a great way to stay in touch with your local InfoSec community and to hear the latest in technical wizardry, industry intelligence, and thought leadership from our amazing instructors.
Join us at the Corinthian Plaza Building for our next Community Event in Manila Philippines!
View the agenda below:
11th January, Wednesday
6:00pm – 6:30pm
Registration
6:30pm - 7:30pm
Presentation
Multiple Clouds Require Multiple Solutions: AWS, Azure, & Google Cloud Security
Brandon Evans, SANS Certified Instructor
Thank you for your interest in our community nights. This event is at capacity – please send an email to asiapacific@sans.org to confirm if spots are available. Alternatively, you can go on our waitlist.
Abstract:
Organizations in every sector are increasingly adopting cloud offerings to build their online presence. However, although cloud providers are responsible for the security of the cloud, their customers are responsible for what they do in the cloud. Unfortunately, the providers have made the customer's job difficult by offering many services that are insecure by default. Worse yet, with each provider offering hundreds of different services and with many organizations opting to use multiple providers, security teams need a deep understanding of the underlying details of the different services in order to lock them down. As the landscape rapidly evolves and development teams eagerly adopt the next big thing, security is constantly playing catch-up in order to avert disaster.
The Big 3 cloud providers alone provide more services than any one company can consume. As security professionals, it can be tempting to limit what the developers use to the tried-and-true solutions of yesteryear. Unfortunately, this approach will inevitably fail as the product development organization sidelines a security entity that is unwilling to change. Functionality drives adoption, not security, and if a team discovers a service offering that can help get its product to market quicker than the competition, it can and should use it.
Join Brandon Evans as he discusses the inner workings of the Big 3 cloud providers in-depth. This talk will feature content from SANS SEC510, in which students will learn industry-renowned standards and methodologies, such as the MITRE ATT&CK Cloud Matrix and CIS Cloud Benchmarks, then apply that knowledge in hands-on exercises to assess a modern web application that leverages the cloud-native offerings of each provider. Through this process, students will learn the philosophies that undergird each provider and how these have influenced their services.
Location:
Corinthian Plaza Building, Second Floor, AmCham Philippines - Robert Sears Hall, 121 Paseo de Roxas, Makati City 1229, Metro Manila
