Hyper-Converged Infrastructure, Data Storage
businesswire | August 03, 2023
Ermetic, a leading cloud infrastructure security company, today announced CNAPPgoat, an open source project that allows organizations to safely test their cloud security skills, processes, tools and posture in interactive sandbox environments that are easy to deploy and destroy. CNAPPgoat supports AWS, Azure and GCP platforms for assessing the security capabilities included in Cloud Native Application Protection Platforms (CNAPP).
The CNAPPgoat project will be officially presented at DEF CON Demo Labs in Las Vegas on Friday, August 11 from 12:00pm-1:55pm by Noam Dahan, Research Lead and Igal Gofman, Head of Research for Ermetic. On Wednesday, August 16 at 10am PST/1pm EST, Ermetic will present a webinar on using CNAPPgoat, to register visit thislink.
Unlike projects that illustrate possible attack paths, CNAPPgoat provides a large and expanding library of scenarios that security teams can execute to create a customized cloud environment for simulating unsecured and vulnerable assets and validating their defenses. The ability to easily provision a vulnerable environment with a broad range of risk scenarios provides the following benefits:
Create a sandbox for testing an organization’s security posture by assessing security team capabilities, procedures and protocols
Use vulnerable environments for hands-on workshops to train team members on new skills and techniques
Provision a “shooting range” for pentesters to test their skills at exploiting the scenarios and developing relevant capabilities
Benchmark CNAPP tools against known environments to evaluate their capabilities
“Compared to existing open-source projects that create ‘capture the flag’ scenarios where participants are expected to follow a certain path, CNAPPgoat spans the leading cloud provider platforms and CNAPP capabilities while providing a modular and granular approach for provisioning specific categories of risks and vulnerabilities,” said Igal Gofman, Director of Research for Ermetic.
“This breadth and depth allows pentesters and defenders to precisely isolate the elements they want to explore for training, new skills acquisition, prevention and security posture assessments,” added Noam Dahan, Research Lead.
CNAPPgoat enables security teams, trainers and pentesters to provision and run vulnerable scenarios from the following modules that make up the CNAPP specification defined byGartner:
Cloud Infrastructure Entitlement Management (CIEM) - covers risks associated with identities and entitlements, such as the unintended ability of an identity to escalate its privileges
Cloud Workload Protection Platform (CWPP) - includes the exposure of workloads to vulnerabilities such as running vulnerable/end of life software or OS versions
Cloud Security Posture Management (CSPM) - spans the misconfiguration of cloud infrastructure components, such as publicly exposed storage resources
Infrastructure as Code (IaC) scanning - will be added soon for finding misconfigurations directly in the code
CNAPPgoat is an open community initiative designed to be used by anyone for commercial, technical and educational purposes. See today’sblogfor implementation details. Additional artifacts including deeper technical dives and guides will be released soon. Contributions are encouraged including new scenarios, scenario proposals, issues, suggestions, feature requests or simply sharing feedback. To learn more and access CNAPPgoat visit thislink.
About Ermetic
Ermetic reveals and prioritizes security gaps in AWS, Azure and GCP and enables organizations to remediate them immediately. The Ermetic cloud native application protection platform (CNAPP) uses an identity-first approach to unify and automate cloud infrastructure entitlement management (CIEM), cloud security posture management (CSPM), cloud workload protection and Kubernetes security posture management (KSPM). It unifies full asset discovery, deep risk analysis, runtime threat detection and compliance reporting, combined with pinpoint visualization and step-by-step guidance. The company is one of America’s Best Startup Employers according toForbesand led by proven technology entrepreneurs whose previous companies have been acquired by Microsoft, Palo Alto Networks and others. Ermetic has received funding from Accel, Forgepoint, Glilot Capital Partners, Norwest Venture Partners, Qumra Capital and Target Global.
Read More
Hyper-Converged Infrastructure, Windows Systems and Network
prnewswire | July 12, 2023
EdgeConneX®, the pioneer in global Hyperlocal to Hyperscale Data Center Solutions, announces the deployment of AWS Direct Connect with both 10Gbps and 100Gbps capability at the Phoenix Edge Data Center® (PHX01). EdgeConneX is a member of the Amazon Web Services (AWS) Partner Network (APN), and AWS Direct Connect is already available in the Portland Edge Data Center® Campus (POR01 and POR02). AWS Direct Connect allows customers to establish direct edge cloud on-ramps, which can reduce costs, improve operations, and deliver a superior and consistent network experience for their data-intensive workloads.
The greater Phoenix area has developed into a burgeoning tech and business ecosystem in the Southwest region, in part due to local business incentives, tax exemptions, and low latency routes to larger metros. By layering on the added flexibility of AWS Direct Connect in the EdgeConneX Phoenix data center, companies can advance their digital transformation strategies and application evolution by linking their internal network via direct point-to-point connections. This creates a secure, private cloud connection with access to both 10Gbps and 100Gbps AWS Direct Connect ports.
Phillip Marangella, Chief Marketing and Product Officer at EdgeConneX:
"EdgeConneX customers are increasingly leveraging hybrid architecture solutions to address high bandwidth workloads, such as artificial intelligence (AI), machine learning (ML), and augmented and virtual reality (AR/VR). EdgeConneX is working with AWS to offer customers in Phoenix expanded workload transport options and improved scalability and reliability."
Emad Benjamin, General Manager of AWS Direct Connect at AWS:
"Emerging tech applications and cloud-based IT architectures require high availability and lower latency connectivity. With AWS Direct Connect in the EdgeConneX Phoenix data center, customers can create virtual interfaces directly to AWS and access services such as Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Simple Storage Service (Amazon S3), allowing for increased security and consistent network experiences."
Michael Reid, CEO for Megaport
"Our customers with mission-critical applications require secure, on-premises infrastructure to meet optimal application performance. By leveraging AWS Direct Connect at the EdgeConneX Phoenix data center, our customers can benefit from low-latency connections to the cloud, essential to supporting the modern applications that power their businesses."
The EdgeConneX Phoenix Data Center is engineered for customers requiring the lowest latency and is marked by Tier III design, and just 10 miles from downtown Phoenix. In addition, EdgeConneX is building a 100MW data center campus in nearby Mesa, Arizona.
About EdgeConneX
Backed by EQT Infrastructure, part of the global investment organization EQT, EdgeConneX provides a full range of sustainable data center solutions worldwide. We work closely with our customers to offer choices in location, scale, and type of facility, from Hyperlocal to Hyperscale. EdgeConneX is a global leader in anytime, anywhere, and any scale data center services for a diverse portfolio of industries, including Content, Cloud, Networks, Gaming, Automotive, SaaS, IoT, HPC, Security, and more. With a mission predicated on taking care of our customers, our people, and our planet, EdgeConneX strives to Empower Your Edge.
Read More
Application Infrastructure
GlobeNewswire | September 14, 2023
Carahsoft Technology Corp., The Trusted Government IT Solutions Provider®, and member of the Oracle PartnerNetwork (OPN), today announced an agreement to serve as Oracle’s Public Sector aggregator, making the company’s complete cloud and applications portfolio for Government, Defense, Intelligence and Education available through Carahsoft’s reseller partners, NASA Solutions for Enterprise-Wide Procurement (SEWP) V and GSA Schedule contracts.
Oracle offers a diverse set of solutions, ranging from cloud infrastructure, software-as-a-service (SaaS) applications, hardware, and construction and engineering technology. Across these capabilities, Oracle enables the connectivity of project teams, empowerment of decision makers through data, and simplification of multicloud deployment across agencies. The partnership can help accelerate IT infrastructure modernization, and help improve innovation with secure, cost-effective, and FedRAMP-compliant cloud infrastructure.
Oracle’s cloud infrastructure and applications offerings provide customers with a variety of solutions, including:
Oracle Cloud Infrastructure (OCI) enables customers to build and run a wide range of applications in a scalable, secure, highly available, and high-performance environment. From application development and business analytics to data management, integration, AI, and cloud-native services, OCI delivers high security, performance, and cost savings. In addition, with multicloud, hybrid cloud, public cloud, and dedicated cloud options, OCI’s distributed cloud delivers the benefits of cloud with greater control over data residency, locality, and authority, even across multiple clouds.
Oracle Fusion Cloud Applications Suite enables organizations to take advantage of the cloud to break down organizational silos, standardize processes, and manage financial, supply chain, HR, and customer experience data on a secure integrated SaaS platform.
Oracle Construction and Engineering’s Smart Construction Platform helps teams work together, turn data into intelligence, and coordinate resources for smooth project planning, delivery, and operations.
“As the Public Sector continues to prioritize modernization and adoption of a multicloud model, Oracle is focused on interoperability and ideally positioned to help government customers innovate faster to better support their missions,” said Kyle Clement, Senior Manager, NACT Government Alliances and Channels, Oracle. “We are excited to partner with Carahsoft to bring Oracle solutions to more Public Sector customers and to continue to drive success for government agencies and the citizens they serve.”
Carahsoft will serve as the aggregator for the partnership, enabling Oracle to access Carahsoft’s portfolio of contract vehicles and extensive Public Sector ecosystem of channel partners. The Carahsoft team has significant expertise in partnering with the Public Sector to advance multi-cloud strategies while ensuring ease of procurement.
“We are excited to leverage our dedicated sales and marketing teams in support of this new partnership with Oracle,” said Lacey Wean, Sales Director who leads the Oracle Team at Carahsoft. “By including Oracle on our contract vehicles, Carahsoft and our partners are able to expand the reach of their solutions for cloud, cybersecurity, data management and more to Government agencies.”
Oracle's solutions are available through Carahsoft’s SEWP V contracts NNG15SC03B and Carahsoft’s GSA Schedule No. 47QSWA18D008F. For more information about the offerings available through this new partnership, visit https://www.carahsoft.com/oracle. To request a demo or speak to a representative, contact the contact the Oracle team at Carahsoft at (855) 618-3114 or Oracle@carahsoft.com.
About Oracle PartnerNetwork
Oracle PartnerNetwork (OPN) is Oracle’s partner program designed to enable partners to accelerate the transition to cloud and drive superior customer business outcomes. The OPN program allows partners to engage with Oracle through track(s) aligned to how they go to market: Cloud Build for partners that provide products or services built on or integrated with Oracle Cloud; Cloud Sell for partners that resell Oracle Cloud technology; Cloud Service for partners that implement, deploy and manage Oracle Cloud Services; and License & Hardware for partners that build, service or sell Oracle software licenses or hardware products. Customers can expedite their business objectives with OPN partners who have achieved Expertise in a product family or cloud service. To learn more visit: http://www.oracle.com/partnernetwork
About Carahsoft
Carahsoft Technology Corp. is The Trusted Government IT Solutions Provider®, supporting Public Sector organizations across Federal, State and Local Government agencies and Education and Healthcare markets. As the Master Government Aggregator® for our vendor partners, we deliver solutions for Geospatial, Cybersecurity, MultiCloud, DevSecOps, Big Data, Artificial Intelligence, Open Source, Customer Experience and more. Working with resellers, systems integrators and consultants, our sales and marketing teams provide industry leading IT products, services and training through hundreds of contract vehicles. Visit us at www.carahsoft.com.
Read More