IT security practitioners are learning the hard way that taking legacy network security tools and applying them to cloud-based workloads doesn’t really work all that well, but few cloud-native options exist to provide the visibility and control needed to secure traffic traversing to and from, as well as between, those workloads. This is because the shared security responsibility model used by public cloud providers, such as Amazon Web Services (AWS) and others, prohibits access to physical network hardware. While agent and log-based approaches have been applied as stopgap measures to bring at least some visibility, they come with their own baggage.
Network Detection and Response in the Cloud Comes of Age
