Trend Cloud Security Blog – Cloud Computing Experts

My Trend Micro Keynote from CloudSec 2011 Singapore (video)

Below is a talk I gave in Singapore a couple weeks ago at CloudSec 2011. Watching it on YouTube, I’m shocked I was this coherent. I was supposed to arrive the night before I gave the keynote, but my flight was delayed for 7 hours in Hong Kong. I ended up getting to the hotel at 5am and starting 12 hours of meetings at 7am. It’s times like that when I’m glad I’m a biohacker too. Share/Bookmark read more

Cloud Security Alliance Congress Panel: Building Secure Cloud Security Services (video)

Check out this really good panel from the recent Cloud Security Alliance Congress 2011 conference in Orlando, Fl. Cloud Security Alliance Panel: Building a Secure Cloud Security Service from Dave Asprey on Vimeo. It was moderated by Mike Rothman and included representatives from Trend Micro (me!) and Intel and Arbor Networks. This was one of the most frank discussions I’ve ever had with an audience about what cloud providers really do and about what customers should think about. In the audience, we had a large number of cloud service providers including large players and startups, and more... read more

Blog Series Part 5 of 5: 10 Reasons Not to Virtualize

Part 5 of a 5-part series based on my more than a decade of virtualization experience with large enterprises and service providers, and my time running strategic planning for one of the largest 2 virtualization vendors, this blog series covers 10 types of situations when you should consider not virtualizing some of your applications. Reason 9: When you want to save money on all desktops by virtualizing them Servers cost more than cheap desktops. You still have to buy a PC or tablet or thin client – and manage and secure it too. Virtual desktops are great for security and compliance, but they... read more

The Cheapest Way to Use the Cloud to Crack MD5 Using Google Instead of AWS

I love it. News keeps coming out about how to use the cloud to break security, or even to offer hacking as a pay per use cloud service using “Exploit-as-a-Service” models. The almost limitless availability of compute power in the cloud makes us rethink some core security techniques like hashing. Today, however, a researcher announced he can use the cloud to crack MD-5 hashes, which are a relatively difficult hash to crack, using Google, and with almost zero compute cycles. It sounds impossible, but it’s elegant in its simplicity. Very out of the box way to think like a hacker. We’ve... read more