Cisco Blogs


Cisco Blog > Security

Ask the Data Center Security Expert Series: Your invitation to participate!

I am pleased to be kicking off this Ask the Data Center Security Expert series at Cisco. This series is aimed at security professionals, partners, data center teams, and IT business decision makers and will address key security issues around virtualization, cloud and anticipated issues associated with trends such as the Software Defined Data Center. The series will take the form of blogs, videos, NetSec chats, and webinar panels. I have an array of expertise lined up ranging from key reseller and technology ecosystem partners, industry leaders and luminaries and internal Cisco experts. Stay tuned for the first in this series coming to you next week out of Singapore.

To get started, a little about me -- I was very excited to commence a data center and security solutions marketing role at Cisco 3 weeks ago.  I have over 12 years experience developing holistic security solutions and have been focused on data center and cloud for the last 3 years.  I currently chair the Cloud Security Alliance Cloud Controls (CCM), an industry effort dedicated to harmonizing regulatory controls for decreased compliance complexity and also have been bridging efforts with other industry associations such as the Open Data Center Alliance. Read More »

Tags: , , , , , , ,

Bring Your Own Margarita (I Mean Device) – Architectures, Design, and Operation

November 1, 2012 at 10:51 am PST

Mobility allows the expansion of Information Technology (IT) resources and application availability at anytime, anywhere, and in any possible way. Historically, many thought that “the movement” of bring your own device (BYOD) was simply a marketing tactic. However, BYOD is definitely a reality that has become crucial when trying to improve efficiency in the workplace.

Every single day a new mobile gadget is released to the market (for example, tablets, mobile phones, and many other mobile systems) and we all live in a connected world 24 hours a day 7 days a week. All these devices and social applications are introducing many security risks for enterprises and public sector organizations. These risks include threats of data theft, not only with very sophisticated attacks, but also with incidents as simple as just stealing mobile devices. Many of these devices can contain private and corporate information.

The question now is, how can we provide the benefits of  improving user productivity and flexibility without compromising network security? The Cisco AnyConnect Secure Mobility client and the Cisco ASA 5500 Adaptive Security Appliances allow users to connect to their corporate network from any device based on comprehensive secure access policies. The Cisco AnyConnect Secure Mobility Client can work in conjunction with the Cisco IronPort Web security appliances and provides integration with ScanSafe.

Read More »

Tags: , , , , , ,

National Cyber Security Awareness Month: Closing Thoughts (All Treats, No Tricks)

BGP = big, ghoulish pumpkinHere we are, 31 October, and ready to bang on doors and ask for candy with the playful question of ‘Trick or Treat?’  How fitting to sum up a month of thought-provoking posts regarding National Cyber Security Awareness Month (NSCAM) whereby our ‘interconnectedness’ requires each of us to be more vigilant than ever. Every time we knock on one of the Internet’s doors, what we receive in return may not be what we’re expecting. Goblins and other nefarious creatures continue to lurk in dark spaces as well as the bright light of day.

Read More »

Tags: , , , , , , , , ,

Data Security Challenges in the All Too Public and Not So Private Sectors

What an incredible time to be in Information Technology! Look at what has been transforming right before our very eyes in just the past two years. Exciting? Yes! Humbling? Yes! Scary? Absolutely…

While we are engrossed in watching these new technologies slowly become part of our everyday environment, we are constantly reminded that there is a dark side to all of this that, at times, we often brush aside as we intone, “It can’t happen here, not to us!”

Read More »

Tags: ,

Cisco Security and the Layered Defense Approach

Over the past month, many of the Cisco Security Blog contributors have provided their view on Cybersecurity and its implications for customer network designs, architectures, protections, and services. These, in aggregate, stress what we all know: security is best achieved using a layered defense that includes securing endpoints, hosts, and network and services infrastructures. Cisco adds some unique layers to this defense, which stems from our experience developing capabilities and solutions that meet the needs of critical infrastructure and government networks. We are applying these lessons, capabilities, and our layered defensive approach to critical business infrastructures, as well.

Cisco takes a “build-in security” approach to provide device, system, infrastructure, and services security, and is the basis of the development approach that we use called the Cisco Secure Development Lifecycle (CSDL). Our development processes leverage product security baseline requirements, threat modeling in design or static analysis and fuzzing in validation, and registration of third-party software to better address vulnerabilities when they are disclosed. In the innermost layer of our products, security is built-in to devices in both silicon and software. The use of runtime assurance and protection capabilities such as Address Space Layout Randomization (ASLR), Object Size Checking, and execution space protections coupled with secure boot, image signing, and common crypto modules are leading to even more resilient products in an increasingly threatening environment.

Read More »

Tags: , , ,