Title:
Crypto for the Public Cloud
Abstract:
The cloud presents a huge opportunity for
modern businesses to reduce cost and complexity -- but doing
so at the cost of reduced security is a non-starter for many
organizations. Those responsible for security oversight within
their organizations lose sleep over the security of critical
data. What if some unforeseen problem with someone else's
applications or controls exposes all of this sensitive
information sitting in the cloud? In traditional security
models, encryption solved most of these data security worries,
but the cloud has introduced new challenges and problems with
this approach. Fortunately, several novel technical approaches
are evolving to alleviate many of these traditional, limited
approaches, and in the long-term, make the cloud a more secure
model for both software and data.
Speaker Bio:
John Viega is Executive Vice President of
Products, Strategy and Engineering at Perimeter E-Security.
John has authored numerous books on security, including the
recent "Myths of Security", "The Secure Programming Cookbook",
"Network Security with OpenSSL" and the seminal "Building
Secure Software", which was the first book on application
security. He is also well-known for being the original author
of the Mailman mailing list manager, and other prominent open
source software packages. John is the editor-in-chief for
IEEE Security and Privacy magazine, and his technical work in
cryptography has been standardized by NIST, the IEEE and IETF.
John holds a MS in Computer Science and a BA from the
University of Virginia.
Presented at the 2012 Hack In The Box Security
Conference, Kuala Lumpur Malaysia, October 9, 2012