Posts

Guidance for Setting Up a Cloud Security Operations Center (cSOC)

Image
Note : My original blog was published in ORACLE CLOUD INFRASTRUCTURE blog site on August 20th, 2018. I have republished it here with permission. Official Disclaimer : The views and opinions expressed in this blog are those of the author and do not necessarily reflect the official policy or position of Oracle Corporation. Establishing a security operations center (SOC) is one of the primary requirements for managing cybersecurity-related risks in the current information age. This post provides general DIY guidance for building a SOC primarily for Oracle Cloud, including both platform-as-a-service and infrastructure-as-a-service offerings. This general guidance is also applicable to hybrid cloud environments. As more businesses are relying on interconnected technologies, like IoT sensors and cloud-based platforms, it’s becoming unmanageable to respond to cyberthreats and resulting incidents without having proper visibility across the cyberthreat landscape. So it’s ...

PCI Compliance on Oracle Cloud Infrastructure is EASY!

Image
Note : My original blog was published in ORACLE CLOUD INFRASTRUCTURE blog site on August 20th, 2018. I have republished it here with permission. Official Disclaimer : The views and opinions expressed in this blog are those of the author and do not necessarily reflect the official policy or position of Oracle Corporation. Oracle Cloud Infrastructure services have the PCI DSS Attestation of Compliance. The services covered are Compute, Networking, Load Balancing, Block Volumes, Object Storage, Archive Storage, File Storage, Data Transfer Service, Database, Exadata, Container Engine for Kubernetes, Container Registry, FastConnect, and Governance. In this blog post, we discuss the guidelines that help Oracle Cloud Infrastructure customers achieve PCI compliance for workloads running on Oracle IaaS. Background Our guidelines for achieving PCI compliance fall on the shared-responsibility spectrum of the cloud security continuum. The following diagram describes the separation between ...

Resilient IP-Based Connectivity Between IoT Sensors and Diverse Oracle Cloud Infrastructure Regions

Image
Note : My original blog was published in  ORACLE CLOUD INFRASTRUCTURE  blog site on August 7th, 2018. I have republished it here with permission. Official Disclaimer :  The  views  and  opinions expressed  in this blog  are those of the author and do not necessarily reflect the official policy or position of Oracle Corporation. This blog post specifically explores how to use Border Gateway Protocol (BGP) for resiliency and high availability for IP-based applications (not DNS-enabled) hosted in Oracle Cloud Infrastructure diverse regions. The scope is limited to IPv4 addresses, but the solution presented also works for IPv6 services with some additional configuration. Most of these applications fall in the IoT application domain.  Because of the implementation of ubiquitous connectivity for the Internet of Things (IoT), devices like sensors and gateways communicate back to central processors hosted in cloud data centers. I have used thi...

Naxalite Movement and the influence of Lenin

  Greetings, dear readers. As promised, I am writing about the Bengali Naxalite movement of the 1970s. This is based on a few texts written by level-headed historians and stories from the elders of my family across the spectrum of the political divide of that time. As a Bengali born in the 1970s, I find myself reflecting on the life and legacy of  Lenin and the profound impact his ideas had on my own homeland. Growing up in West Bengal during the tumultuous years of the Naxalite movement, my elder cousins witnessed firsthand the devastating consequences of a revolution gone astray. Lenin, the mastermind behind the Bolshevik Revolution, was a figure who inspired many in our state. His call for the overthrow of the bourgeoisie and the establishment of a socialist state resonated with the disenfranchised and the marginalized. The Naxalite movement, which began as a peasant uprising in the village of Naxalbari in 1967, drew heavily from Lenin's ideas and tactics, including those o...

Vladimir Lenin: The Revolutionary Mastermind Behind the Bolshevik Revolution

Image
  Greetings, dear readers. Today, we embark on a journey through the annals of history to examine the life and legacy of one Vladimir Ilyich Ulyanov, better known to the world as Lenin. This legendary figure, whose very name evokes images of revolution and radical change, played a pivotal role in shaping the course of the 20th century and beyond. Born into a middle-class family in 1870, on 22nd April, Lenin's early life was marked by tragedy, with the execution of his elder brother for plotting to assassinate Tsar Alexander III. This event, one might argue, sowed the seeds of Lenin's revolutionary fervor. He immersed himself in the works of Karl Marx and Friedrich Engels, becoming a staunch advocate of their socialist ideals. Lenin's intellect and oratory skills were undeniable. He possessed a keen ability to galvanize the masses and inspire them to action. His famous slogan, "Peace, Land, and Bread," resonated with the downtrodden and disenfranchised, promising a...

The Dawn of a new breed of Hyperscale Datacenters

Image
 This is a New Era of Connectivity and Efficiency In the ever-evolving landscape of technology, the demand for faster, more reliable, and efficient data processing has never been more critical. The introduction of hyperscale datacenters represents a seismic shift in how we handle vast amounts of information. Central to this revolution is the use of advanced networking protocols and architectures, such as Border Gateway Protocol (BGP), Virtual Routing and Forwarding (VRFs), and Remote Direct Memory Access (RDMA). Together, they are reshaping the foundations of datacenter design and operation. BGP at the Core of Hyperscale Networking BGP, a staple in the internet's routing architecture, has found a new role within the datacenter. By leveraging BGP for internal routing between compute nodes, top of rack (ToR) switches, and leaf and spine switches, hyperscale datacenters can achieve unprecedented scalability and flexibility. The use of BGP facilitates efficient route advertisement and ...

The Curious Case of vCloud Director and the Perils of Over-Engineering

Back in December 2011 , I wrote what many considered a borderline heretical blog post: a prediction that VMware vCloud Director,  that shining paragon of private cloud orchestration, would not thrive in the following five years. At the time, I was accused of being overly skeptical, anti-vCloud, and even of being secretly on AWS’s payroll. (Spoiler: I wasn’t. Though I wouldn’t have minded the stock options.) Now that it’s August 2016 , I figured it’s only fair to revisit that time capsule of cynicism and ask: Was I right?  Well, grab your favorite performance dashboard, because the data doesn’t lie. Let’s tally up the results. What I Warned in 2011 Just to refresh your memory (and my ego), here’s the TL;DR of what I said five years ago: vCloud Director was too complex for most enterprises. It was designed more for telcos and service providers , not your average enterprise IT shop. It introduced too many layers of abstraction , distancing users from the physical in...