Defending Lift and Shift Cloud Applications | SANS@MIC Talk
8When an organization moves an application or service from one environment to another without stopping to redesign the application, this is often referred to as lift and shift. Many organizations, as an initial effort to move applications and services into the cloud, choose this strategy to make the move less painful and more familiar to their existing operating environment. This results in a mainly Infrastructure as a Service (IaaS) hosting environment. Although this is not the most efficient use of cloud, it is still a very common occurrence.
This talk will guide you through some of the nuances that cloud brings to your organization when transitioning from on-premise to an IaaS cloud environment and to better prepare you to defend these, now cloud-hosted, applications and services. Several, of which, are discussed in much greater detail in SEC488: Cloud Security Essentials.
Speaker Bio
Ryan Nicholson
As the lead cybersecurity engineer for a major DoD cloud project, Ryan Nicholson is constantly learning new and exciting methods to ensure that information systems in both an off- and on-premise environment can be adequately defended. Throughout these years, Ryan has picked up a number of industry certifications and is constantly trying to expand his technical and cybersecurity expertise. These certifications include GIAC's GSLC and GSEC, Offensive Security's OSCP, ISC2's CISSP, EC Council's CEH and CFHI, AWS' Certified Solutions Architect Associate. Ryan also maintains a website.