Security Policy Automation for Cloud Applications

You have to plan ahead in terms of security when moving parts of your organization’s IT into the Cloud. Compromises and mistakes done early on when things are small and less critical will come back and haunt you later. The financial ROI of cloud security and compliance is judged by decision makers in end-user organizations by the same measures as is done for cloud computing in general; however, manually translating security policy into technical implementation is difficult, expensive, and error-prone (esp. for the application layer). In order to reduce security related manual maintenance cost at the end-user organization, security tools need to become more automated.

This session explains how automated tools can be used to translate security policy into technical security implementation for cloud applications (using an approach known as “model-driven security”), so that security practitioners can better support financial rationale behind cloud computing, and also influence cloud providers to provide better security tools. The session will also cover how this approach helps achieve regulatory compliance for cloud.

SPEAKER: Dr. Ulrich Lang is the co-founder and CEO of ObjectSecurity®, “The Security Policy Automation Company™”. Ulrich is a renowned thought leader, author and speaker on model-driven security, security policy, Cloud/SOA/middleware/

application security, and has over 15 years of experience in information security.