Organizations are now beset with cloud security challenges which evolved from complex landscape that needs to be secured be it on-premise, on single or multiple cloud. In response, Oracle announced it is expanding the built-in security services and capabilities of Oracle Cloud Infrastructure (OCI) to make security simple to set up and manage, prescriptive and integrated to help customers in the Philippines protect their cloud applications and data against emerging threats.
These new capabilities, which will enhance OCI’s already comprehensive security offering, also include a new built-in and cloud-native firewall service and enhancements to Oracle Cloud Guard and Oracle Security Zones. These innovations will further help ensure that organizations in the Philippines can easily secure their cloud deployments and applications with integrated services that, in most cases, do not require additional investment. In case of migrating mission-critical workloads to the cloud, organizations must defend against security vulnerabilities from inside and outside the firewall that are resulting in more breaches and exposed data.
According to Oracle Cloud Infrastructure senior vice president Mahesh Thiagarajan, there are different challenges existing in the cloud security today. Organizations don’t get breached because they don’t have the tools but they get breached because the tools are too complex, fragmented, isolated, expensive and hard to use. Oracle believes there is a better way to make security simple, prescriptive, and integrated which helps protect and guide customers in order not to make any mistakes.
The new cloud security capabilities, which provide multiple layers of defense to help identify and defeat emerging threats and security violations quickly, include the following:
OCI Network Firewall – provides centralized protection against cyberattacks across OCI with a new cloud-native, manage firewall service that is powered by industry-leading Palo Alto Networks VM-Series Next-Generation Firewall technology (NGFW). The firewall provides security controls, threat prevention, and mitigation features, including custom URL filtering, intrusion prevention and detection (IDS/IPS), and TLS inspection for inbound, outbound, and lateral traffic to customer workloads hosted on OCI. With OCI Network Firewall, customers can quickly turn on and secure their applications and cloud environment with firewall features and scale their security across their cloud deployment. OCI network firewall is available as a turn-key offering to enable customers to immediately take advantage of the firewall without the need to configure and manage additional security infrastructure.
Oracle Threat Intelligence Service – this aggregates threat intelligence data across different sources and manages this data to provide actionable guidance for threat detection and prevention in Oracle Cloud Guard and other OCI services. This service provides insights from Oracle security researchers, Oracle’s own uniquely telemetry, open-source feeds such as abuse.ch and Tor exit relays, and third-party partners, such as CrowdStrike.
Oracle Cloud Guard Threat Detector – this capability identifies misconfigured resources, insecure activity across tenants, and malicious threat activities. It provides security administrators with the visibility to triage and resolve cloud security issues. Security inconsistencies can be remediated automatically with out-of-the-box Cloud Guard security recipes to effectively scale the security operations center.
Oracle Cloud Guard Threat Detector – identifies misconfigured resources, insecure activity across tenants, and malicious threat activities. It provides security administrators with the visibility to triage and resolve cloud security issues. Security inconsistencies can be remediated automatically with out-of-the-box Cloud Guard security recipes to effectively scale the security operations center.
Oracle Security Zones – expands Oracle Security Zones with support for customer-defined policy sets and integrated security posture monitoring with Cloud Guard. Now customers can create custom security zone policy sets to prevent actions that could weaken a customer’s security posture. Security Zone policies can be applied to various cloud infrastructure types (e.g., network, compute, storage, database, etc.) to ensure cloud resources stay secure and prevent security misconfigurations. Users determine which policies are appropriate for their needs by defining custom security zone policy sets. OCI enforces Security Zone policies as an integrated platform feature that supports a growing number of adjacent OCI Security services. In contrast to IAM permissions, which are associated with people, Security Zone policies act as security guardrails for resources and define allowable configurations.
Oracle Cloud Guard Fusion Applications Detector – extends Oracle Cloud Guard beyond cloud security posture management for OCI to also monitor Oracle Fusion Cloud Applications and provide customers with a consolidated view of IaaS and SaaS security policies. Available first for Oracle Fusion Cloud Human Capital Management and Oracle Fusion Cloud Enterprise Resource Planning, Oracle Cloud Guard Fusion Applications Detector provides pre-configured and customized configurations or “recipes” to monitor potential security violations in the applications. Detectors trigger alerts on sensitive configuration changes related to user privileges that impact important data access, including adding, deleting, or modifying data and function privileges for roles and users and changes to sensitive objects.
