Shubho's Blog

With the entry of Cloud with a promise of reducing infrastructure cost, enhancing security by leveraging shared infrastructure, etc, organizations are slowly moving to Cloud to get the advantages of it. With multi-fold advantages, one big concern stays as-is - “Security”. Security in on-prem world is of multiple layers - Network Security, Infrastructure Security, and Application Security. However, in Cloud the security is of multiple layers but with multiple dynamic moving parts. Also, because of the nature of Cloud the regulatory bodies are strict on ensuring regulatory compliances and bringing in additional regulatory requirements.  There are multiple challenges in the cloud -  Slowly the penetration and the attack surface is changing, particularly in cloud environment. The various workloads have different needs - some are public facing in a public subnet and remaining are in private subnet with a strict firewall for inter subnet communication.  Ear...

In today's world, "information" is the key. With IT enabled world, we collect large amount of data from various sources but how effectively we can use such large amount of data is always a challenge. Different domains such as Financial, Sales, Security, Retail, Energy, etc. initiate and collect large amount of data from various source for their day-to-day IT operations and management. For e.g. in our day-to-day operation of using e-services, we perform various activities and transactions and one such example is e-banking. Do we ever realize when we do an online transaction how much data is collected to ensure safety of the transaction? Now, when each and every  online activity is monitored, extracting meaning out of billions of activities is a big challenge in IT enabled domains. When billions of transactions are happening per day, how do we find out which one of those is a suspicious activity. With the world becoming more and more IT enabled, IT security becomes extreme...