{"id":391,"date":"2011-04-22T01:41:57","date_gmt":"2011-04-22T01:41:57","guid":{"rendered":"http:\/\/mikekuphal.azurewebsites.net\/?p=391"},"modified":"2011-04-22T01:41:57","modified_gmt":"2011-04-22T01:41:57","slug":"my-notes-the-new-age-of-cloud-computing-eliminating-the-need-to-write-security-code","status":"publish","type":"post","link":"https:\/\/mikekuphal.com\/?p=391","title":{"rendered":"My Notes: The New Age of Cloud Computing Eliminating the Need to Write Security Code"},"content":{"rendered":"

Speaker: Doron Grinstein<\/a> (BiTKOO<\/a>)\u00a0\u00a0\u00a0<\/span>(Involved with development of\u00a0FastPass at Disney)<\/p>\n

Cloud computing is not a server with a longer extension cord (co-location of our hardware).<\/p>\n

Cloud computing definition (in his mind): Ability of 3rd party to store, process, search, compute, without being able to look at my data even with a court order.\u00a0 <\/span>Algorithms\u00a0 <\/span>should support this mechanism instead of just ‘trust’<\/p>\n

Think: “Google for private data” <\/span>Don’t have to know the background technologies.. Just ask for data and you get it back. <\/span>This is what cloud computing is to him.<\/p>\n

Real world example: why is there e-commerce? \u00a0What enables e-commerce regarding the entry of credit card info?\u00a0 <\/span>When you purchase online, you trust the protocol (SSL), don’t have to trust the\u00a0intermediaries.<\/p>\n

XACML <\/a>helps enable such a situation for application access control.<\/p>\n

Keystone<\/a>\u00a0is their application access control engine. it “provides fine-grained authorization using the XACML standard”.<\/p>\n

Point:\u00a0Security ‘goop’ of an app on average should take about 30% of the\u00a0software development\u00a0effort.\u00a0 That’s a lot and it gets done over an over again as new software application get developed.\u00a0 Why role this type of code into every new app, instead use the Keystone product to do it for you.\u00a0 Just have to setup a metadata db for your elements and security roles\/etc, then hook up a authentication adapter based on your existing authentication process, and the tool will take care of the access control.<\/p>\n

My comment right from notes while watching demo: Wow this tool is amazing.\u00a0 <\/span>In essence allows for a person to setup a data dictionary via the cloud on application security.\u00a0<\/p>\n

By externalizing authentication and authorization, you are no longer reinventing the world.\u00a0\u00a0<\/span>Just using this as a tool for authentication\/authorization.<\/p>\n

Tool\u00a0enables federation without writing code.<\/p>\n

Also showed tool: SecureWithin<\/a>.\u00a0 <\/span>“As secure as your weakest link”<\/p>\n

“Traversing the firewall is a job for a 12 year old.\u00a0 <\/span>Going to bypass the concrete wall, instead I will go through the window.”\u00a0 (Windows = endpoints… weakest link most of the time)<\/p>\n

Endpoints need to be protected (properly from within)\u2026 if your trusting the infrastructure to protect them\u2026 your in trouble.. It’s not a matter of if, but when.<\/p>\n

All functions available in the GUI are available via WCF Calls too.<\/p>\n

Wow.\u00a0 This companies offerings are ground breaking.\u00a0 Challenge the norm thinking.\u00a0 Amazing.<\/span><\/p>\n

Allow for 6 diff ways to get<\/p>\n

1) Installable<\/p>\n

2) Hardware appliance<\/p>\n

3) VM Appliance (VMWare or Hyper-V)<\/p>\n

4) Cloud (EC2, Azure)<\/p>\n

5) Hybrid (1-3) + 4<\/p>\n

6) Source<\/p>\n

Most of the membership enforcement\/etc is done via the ISAPI Filter type setup.\u00a0 <\/span><\/p>\n

Products used by Disney, Time Warner, Department of Defense, many other large companies\/organizations.<\/p>\n

Overall, this one hour session challenged many concepts I thought I understood prior to this session.\u00a0 Authorization\/Authentication via a product like Keystone is amazing, and can become a task for the\u00a0more junior\u00a0developer (to setup the metadata in the db in essence) as opposed to some of the most experience\/important developers on your team, allowing them to focus on other important tasks.<\/p>\n

BiTKOO looks to me to be a company to watch, and one I am wanting to talk to others I work with to start the buy-in process so we can possibly look into using such tools in the near future.<\/p>\n","protected":false},"excerpt":{"rendered":"

Speaker: Doron Grinstein (BiTKOO)\u00a0\u00a0\u00a0(Involved with development of\u00a0FastPass at Disney) Cloud computing is not a server with a longer extension cord (co-location of our hardware). Cloud computing definition (in his mind): Ability of 3rd party to store, process, search, compute, without being able to look at my data even with a court order.\u00a0 Algorithms\u00a0 should support … Continue reading “My Notes: The New Age of Cloud Computing Eliminating the Need to Write Security Code”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-391","post","type-post","status-publish","format-standard","hentry","category-mobileconnections"],"_links":{"self":[{"href":"https:\/\/mikekuphal.com\/index.php?rest_route=\/wp\/v2\/posts\/391","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mikekuphal.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mikekuphal.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mikekuphal.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mikekuphal.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=391"}],"version-history":[{"count":0,"href":"https:\/\/mikekuphal.com\/index.php?rest_route=\/wp\/v2\/posts\/391\/revisions"}],"wp:attachment":[{"href":"https:\/\/mikekuphal.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=391"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mikekuphal.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=391"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mikekuphal.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=391"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}