• Privacy Policy
Wednesday, February 8, 2023
Data Centre & Network News
ADVERTISEMENT
  • Data Centres
  • Networking
  • Infrastructure
  • Data
  • Media Kit
  • Events
  • SUBSCRIBE
  • Contact
No Result
View All Result
  • Data Centres
  • Networking
  • Infrastructure
  • Data
  • Media Kit
  • Events
  • SUBSCRIBE
  • Contact
No Result
View All Result
Data Centre & Network News
No Result
View All Result

Protecting against threats with VM Threat Detection in SCC

Beatrice by Beatrice
February 8, 2022
in Security
8 0
0
Share on FacebookShare on Twitter

This piece was written by Timothy Peacock, Product Manager, Google Cloud, on the public preview of Virtual Machine Threat Detection (VMTD) in Security Command Centre (SCC).

As organizations move to the cloud, VM-based architectures continue to make up a significant portion of compute-centric workloads. To help ensure strong protection for these deployments, we are thrilled to announce a public preview of our newest layer of threat detection in Security Command Center (SCC): Virtual Machine Threat Detection (VMTD). VMTD is a first-to-market detection capability from a major cloud provider that provides agentless memory scanning to help detect threats like cryptomining malware inside your virtual machines running in Google Cloud.

The economy of scale enabled by the cloud can help fundamentally change the way security is executed for any business operating in today’s threat landscape. As more companies adopt cloud technologies, security solutions built into cloud platforms help address emerging threats for more and more organizations. For example, in the latest Google Cybersecurity Action Team Threat Horizons Report, we saw 86% of compromised cloud instances were used to perform cryptocurrency mining. VMTD is one of the ways we protect our Google Cloud Platform customers against growing attacks like coin mining, data exfiltration, and ransomware.

Our unique approach with agentless VM threat detection

Traditional endpoint security relies on deploying software agents inside a guest virtual machine to gather signals and telemetry to inform runtime threat detection. But as is the case in many other areas of infrastructure security, cloud technology offers the ability to rethink existing models. For Compute Engine, we wanted to see if we could collect signals to aid in threat detection without requiring our customers to run additional software. Not running an agent inside of their instance means less performance impact, lowered operational burden for agent deployment and management, and exposing less attack surface to potential adversaries. 

What we learned is that we could instrument the hypervisor — the software that runs underneath and orchestrates our customers’ virtual machines — to include nearly universal and hard-to-tamper-with threat detection.

Getting Started with Virtual Machine Threat Detection (VMTD)

We’re excited about the kinds of detection that are possible with VMTD. During our public preview, VMTD detects cryptomining attacks. Over the next months as we move VMTD towards general availability, you can expect to see a steady release of new detective capabilities and integrations with other parts of Google Cloud. 

To get started with VMTD, open the Settings page in Security Command Center. Click on “MANAGE SETTINGS” under Virtual Machine Threat Detection. You can then select a scope for VMTD. To confirm that VMTD is working for your environment, you can download and execute this test binary that simulates cryptomining activity. 

Safeguarding customer trust

We know safeguarding users’ trust in Google Cloud is as important as securing their workloads. We are taking several steps to ensure the ways in which VMTD inspects workloads for potential threats preserves trust: 

  • First, we are introducing VMTD’s public preview as an opt-in service for our Security Command Centre Premium customers. 
  • Additionally, not only does Confidential Computing provide encryption for memory as it moves out of a CPU to RAM, we never process memory in VMTD from Confidential nodes. 

Comprehensive threat detection with SCC Premium

Virtual Machine Threat Detection is fully integrated and available through Security Command Centre Premium. VMTD complements the existing threat detection capabilities enabled by the Event Threat Detection and Container Threat Detection built-in services in SCC Premium. Together, these three layers of advanced defence provide holistic protection for workloads running in Google Cloud:

In addition to threat detection, the premium version of Security Command Centre is a comprehensive security and risk management platform for Google Cloud. It provides built-in services that enable you to gain visibility into your cloud assets, discover misconfigurations and vulnerabilities in your resources, and help maintain compliance based on industry standards and benchmarks.

To enable a Security Command Centre Premium subscription, contact your Google Cloud Platform sales team. You can learn more about all these new capabilities in SCC in our product documentation.

Tags: Cloud computingcryptominingCybersecuritydetectionGoogle cloudproductSecuritysolutionsthreatsvirus
Share3Tweet2Share1

Related Posts

Exertis signs Veeam to cyber security portfolio

Exertis signs Veeam to cyber security portfolio

February 1, 2023
48
Acronis seals cyber protection partnership with Fulham FC

Acronis seals cyber protection partnership with Fulham FC

January 31, 2023
55
Macquarie renews security contract with Australian Tax Office

Macquarie renews security contract with Australian Tax Office

January 30, 2023
39
ThreatSpike Red disrupts elite cyber security market

ThreatSpike Red disrupts elite cyber security market

January 30, 2023
46
Three steps to protect your organisation from wiper malware

Three steps to protect your organisation from wiper malware

January 26, 2023
64
Six Degrees welcomes new advisor to its ranks

Six Degrees welcomes new advisor to its ranks

January 24, 2023
47
Next Post
Cooling specialists launch precision cooling range with capacity up to 1MW

Cooling specialists launch precision cooling range with capacity up to 1MW

Get set for the end of the financial year!

Get set for the end of the financial year!

ADVERTISEMENT
Extreme weather should lead to DC continuity plan review
Data Centres

Extreme weather should lead to DC continuity plan review

February 8, 2023
31
DAMAC Group accelerates Kingdom of Saudi Arabia
Data Centres

DAMAC Group accelerates Kingdom of Saudi Arabia

February 8, 2023
139

Head office & Accounts:
Suite 14, 6-8 Revenge Road, Lordswood
Kent ME5 8UD
T: +44 (0)1634 673163
F: +44 (0)1634 673173

Data Centres

Extreme weather should lead to DC continuity plan review

February 8, 2023
31
Data Centres

DAMAC Group accelerates Kingdom of Saudi Arabia

February 8, 2023
139
  • Privacy Policy

© 2023 All Things Media Ltd.

No Result
View All Result
  • Data Centres
  • Networking
  • Infrastructure
  • Data
  • Media Kit
  • Events
  • SUBSCRIBE
  • Contact

© 2023 All Things Media Ltd.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In
Cleantalk Pixel
This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy and Cookie Policy.