Security Compliance for Cloud Assets
Visa, Cloud Raxak, HPE, Intel
at OpenStack Summit
Austin, Texas, April 25-29
Visa, Cloud Raxak, HPE, Intel, OpenStack Summit Cloud Security Compliance Panel Session
Visa®, Cloud Raxak™, Hewlett Packard Enterprise® and Intel® hosted a presentation and panel discussion on Hardware Assured Security Compliance at the OpenStack Summit in Austin, Texas, on Tues, April 26, 2016. The session discussed the challenges facing the financial services industry in moving workloads to the cloud, and how to leverage Hardware Assured Security Compliance™ to achieve continuous compliance with the Payment Card Industry Data Security Standard (PCI-DSS).
Visa, Cloud Raxak, HPE, Intel, OpenStack Summit Cloud Security Compliance Panel Session
Joy Dorairaj
Joy Dorairaj is a Security Product Manager for Helion OpenStack at Hewlett Packard Enterprise (HPE). She specialises in OpenStack Security and Compliance, driving the product strategy & roadmap, prioritizing requirements and working with her engineering team to ensure that HPE is delivering a secure OpenStack distribution for customers.
Fred Lima
Fred Lima leads Security Architecture for Visa’s networks, infrastructure, virtualization, and private cloud. He has also worked in enterprise architecture and network engineering roles for several years. Fred holds a Bachelor Degree in Computer Science from Universidade Catolica de Pernambuco, and a MBA from California State University, East Bay.
Rashmi Krishnan
Rashmi Krishnan is currently a Security Architect with Visa, where she focuses mostly on network and cloud security initiatives. With past experience in OpenStack Barbican, Rashmi has also worked in software engineering as well as with wireless network security. Rashmi has a bachelor degree in Computer Engineering, and most recently graduated from Carnegie Mellon University with a Master of Science.
Raghuram Yeluri
Raghu Yeluri is a Principal Engineer and lead Security Solutions Architect in the Data Center & Cloud Products Group at Intel Corporation with focus on virtualization and cloud security usages, solution architectures and technology initiatives. In this role, he drives security solution Pathfinding and development to deliver hardware-assisted security solutions that enable deep visibility , orchestration.
Prasanna Mulgaonkar
Dr Prasanna Mulgaonkar, the CEO and cofounder of Cloud Raxak, is an expert in computer security and compliance. He has spent the last decade working on security mechanisms that leverage the hardware root of trust provided by modern computing architectures. At Intel, Prasanna created the technology and led the team that developed and delivered Deep Defender–industry’s first endpoint anti-rootkit product.
Continuous and Automated Security Compliance and Enforcement of Location-Based Policies in an OpenStack Cloud featured at OpenStack Summit
Cloud Workloads and Hardware-based Platform Trust
Study after study shows that security is still the biggest barrier to cloud adoption, with compliance and data protection being two of the top concerns for the Chief Information Security Officer (CISO). Enterprises often have a need to enforce policies (based on data sovereignty requirements) that a virtual workloads can only be placed or migrated to specific geography location.
Enterprises need to show the location of the server that the workload is running on, to satisfy the requirements of government and industry regulators. Some others want to launch VMs/Apps/Containers on Servers with Boot Integrity – Platform Trust, while some have a need to extend the chain of trust from platform to workload (VM/Container).
VISA Case Study for Payment Card Industry Cloud Workloads and Compliance
The session featured a customer case study from Visa with technologies from Cloud Raxak (RaxakProtect Security Compliance Platform), Hewlett Packard Enterprise (Helion OpenStack Private Cloud, Proliant Gen 9 servers) , and Intel (CIT, TXT and TPM). The companies demonstrated how Hardware Assured Security Compliance can enable regulated business in financial services, the payment card industry, and retail to achieve continuous compliance with Payment Card Industry-Data Security Standard (PCI-DSS).
Session Agenda
- Advancing Trust in the Cloud
- HP Helion OpenStack Assured Security and Compliance
- Continuous Compliance Monitoring and Remediation: Managing Drift
- Demo: Automating and Simplifying PCI-DSS Compliance
- Panel Discussion
- Question and Answer
