Basculer des applications stratégiques sur le cloud

Transcription

1 Basculer des applications stratégiques sur le cloud Julien SIMON, Principal Technical Evangelist, Camille TYAN, Co-Founder & CEO, Payplug 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

2 The S word

3 Rule #1: security is our first priority Rule #2: when in doubt, follow rule #1

4 AWS customers are in control AWS provides the same, familiar approaches to security that enterprises have been using for decades with increased visibility, control, and auditability. Visibility Control View your entire infrastructure with one click Deep insight with AWS CloudTrail You have sole authority on where data is stored Shared responsibility model Auditability 3 rd Party Validation Certifications for Workloads that Matter

5 Shared Responsibility Model Customer Data centers Physical Security Compute Infrastructure Storage Infrastructure Network Infrastructure Virtualization Layer Operating System Applications + = Security Groups Firewalls Network Configuration Account Management Encryption

6 A Broad Set of Services to Secure your Applications Networking Encryption V i r t u a l P r i v a t e W e b C l o u d A p p l i c a t i o n F i r e w a l l K e y C l o u d H S M M a n a g e m e n t S e r v i c e S e r v e r - s i d e E n c r y p t i o n Identity Compliance I A M A c t i v e D i r e c t o r y I n t e g r a t i o n S A M L F e d e r a t i o n S e r v i c e C a t a l o g C l o u d T r a i l C o n f i g I n s p e c t o r

7 Security by Design CloudHSM IAM KMS CloudTrail Security by Design (SbD) is a modern, security assurance approach that formalizes AWS account design, automates security controls, and streamlines auditing. It is a systematic approach to ensure security; instead of relying on after-the-fact auditing, SbD provides control insights throughout the IT management process. Inspector Config aws.amazon.com/compliance/securitybydesign

8 The Forrester Wave : Public Cloud Platform Service Providers' Security Q The Forrester Wave is copyrighted by Forrester Research, Inc. Forrester and Forrester Wave are trademarks of Forrester Research, Inc. The Forrester Wave is a graphical representation of Forrester's call on a market and is plotted using a detailed spreadsheet with exposed scores, weightings, and comments. Forrester does not endorse any vendor, product, or service depicted in the Forrester Wave. Information is based on best available resources. Opinions reflect

9 The financial service industry attracts some of the worst cyber criminals. We work closely with AWS to develop a security model, hich we believe enables us to operate more securely in the public cloud than we can in our own data centers

10 Camille TYAN, CEO, PayPlug 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

11 M

12 Des outils simples pour rapidement gagner plus de ventes

13

14 Personnalisation de la page en deux clics Aucune expérience en design requise

15 Expérience d achat adaptée au mobile avec clavier numérique Ergonomie conçue pour faciliter la saisie du numéro de carte Le paiement en un clic pour fidéliser les clients

16 Sans contrat VAD À partir de 0,5% + 0,15 3D Secure debrayable Alertes échecs de paiement Sandbox intégrée Librairies PHP, Python,.NET

17 Fingerprinting Clustering Prédiction de la fraude en temps réel Une approche basée sur le «machine learning» Proxy, TOR, etc. Comportement 3-D Secure intelligent Navigation Données émetteur Géolocalisation Vélocité

18 Le challenge : construire une infrastructure financière de nouvelle génération

19 Moteur de paiement Infrastructure transactionnelle Sécurité informatique Certifications et agréments Lutte contre la fraude Conformité et KYC / LABFT

20 +

21 Scalability

22

23

24 Instances Amazon EC2 BDD Amazon RDS Buckets Amazon S3

25 Nous construisons une banque en ligne pour les PME Prédiction de fraude Devises et change SEPA Prélèvement récurrent Conformité règlementaire Cartes de paiement Paiement en ligne Business intelligence Infrastructure sécurisée Investissement et crédit

26

27 Des questions?

28 Pour aller plus loin Prochaine édition le 28 juin à Paris

29 AWS User Groups Lille Paris Rennes Nantes Bordeaux Lyon Montpellier Toulouse

30 Merci!