Tips and Tricks: Protecting Cloud Infrastructure
summary
Covers concrete threats to Linux-based cloud stacks and concrete mitigations: ransomware examples like the Colonial Pipeline and REvil re-emergence, risks from unpatched kernels and mixed open-source components, and the need for air-gapped, immutable backups. Explains snapshot vs backup tradeoffs, synchronous vs asynchronous replication, and continuous data protection, plus checksums, encryption, MFA and two-person concurrence for backups. Recommends regular DR testing and measuring RPO/RTO to match cost and recovery needs.
AI-written summary · about
chapters (14)
- 0:00Intro
- 0:13Today's Speaker
- 0:57Information Management Expertise
- 1:53Why is Linux Popular in Cloud Environments?
- 4:31Risks and Benefits - Open Source Systems
- 9:21Why Data Protection?
- 14:11HA versus DR
- 18:20Data Protection Requirements
- 24:33Compliance Considerations
- 28:44Data Protection Best Practices
- 38:20Other Best Practices
- 39:53Compliance Best Practices
- 41:13What to look for in a data protection solution
- 45:15Consideration Questions
related talks
18mSecuring cloud innovation: Lessons learned
45mUsing Linux Securely in the Cloud
57mCloud security, data responsibility, and recovery: 10 key strategies
39mPerils of the cloud
51mHow to secure your data and applications against ransomware
35mDefeating Ransomware Attacks
38mRansomware and Backups: A Multi-Layered Defense Strategy
50mRansomware Readiness: Backup and Recovery in the Cloud