Provencloud-native
protection
and the best
performancefor your hybrid
environment

Kaspersky
Hybrid Cloud
Security

Digital transformation – challenges
along the road to business efficiency

Security 81%
Managing cloud spend 79%

Today’s business focus on digital transformation is triggering rapid cloud adoption.
Moving to the cloud allows businesses to become more agile, scale themselves togeographical and market demand, transform their products or services and implement
new features, optimize their operations and enhance their customer experience.
Transformation initiatives provide many clear advantages for business, but there’s adownside - infrastructures become more complex, generating significant concernsin terms of security risk, governance, staff resources, performance optimization, newregulations, and spending.

Governance and Compliance 75%
Managing multi-cloud 72%
Cloud migration 71%

Top cloud challenges for allorganizations289%of enterprise use VDI solutions1

55%
of enterprise workloads are expected to be
in a public cloud within twelve months2

Different workloads, different
concerns
In hybrid infrastructures, workloads can have many faces. They can be physical,
virtualized, or based in private, public, and multiple clouds. While challenges associatedwith security risk, governance, compliance, and infrastructure spending can apply to
any organization, working with different types of workload brings in additional concerns.

Conserving performance benefits
The adoption of virtualized servers and VDI is widespread across all businesses,
regardless of size, sector or geography. Virtualization is about getting more from youron-premises hardware resources than can be achieved with physical machines. So
the performance benefits of investment in virtualization must be conserved throughapplying appropriate security, designed specifically to protect virtual environments.
Effective virtualization security must find ways to centralize security tasks, reuseavailable information and eliminate redundancy, balance the load between VMs,
and utilize the potential provided by virtualization platforms to combine maximum
protection with the lowest possible performance impact.

Protecting cloud workloads in terms of shared
responsibility
Public cloud adoption continues to accelerate, with the average cloud-adopting
business using two different cloud services providers. Public clouds offer greatscalability and performance, and are used widely by cloud-adopters for compute, dataprocessing and analytics, among other things. Cloud computing means you don’t needa support infrastructure, because the hardware layer is no longer your responsibility.
Nor are the network, virtualization and management layers – it’s all up to your cloudservices provider. That’s good news, but with loss of responsibility comes loss ofcontrol and visibility. And you’re still responsible for all the other layers (see below) andneed to provide appropriate security for these.

Shared security responsibility
Data FlowsMANAGED BY
CUSTOMER

Applications
ppOperation
pSystemySECURITY
FOR THE CLOUD

User Access

Management

MANAGED BY CLOUDSERVICE PROVIDER

Virtualization
NetworkSECURITY
OF THE CLOUD

Hardware12

Kaspersky internal research, 2021
Flexera State of the Cloud Report, 2021

1

53%
of organizations use Docker3

51%
of organizations use containers as a service
offering from AWS3

Specific requirements of DevOps environments
Developers have switched from annual or semi-annual to daily or even hourly software
releases. That’s why software development focuses on DevOps tactics – Continuous
Integration (CI) and Continuous Delivery (CD). These form an automated pipeline thathelps organizations improve business-impacting KPIs. Containers are central to a
DevOps approach, because they allow for quicker development and deployment atscale. DevOps enablement is generally based around the use of public clouds – andthe focus here on time-to-market, speed and agility all mean that any security solution
must integrate seamlessly into development and cloud-native applications.

A cloud-native approach for optimum hybrid
infrastructure security performance‘This solution helps
to protect virtual andcloud environments,without affecting system
performance or disruptinguser experience.’
Taken from Gartner reviews

Kaspersky Hybrid Cloud Security addresses all these concerns, providing outstanding
protection without in any way compromising the full benefits of virtualization andcloud-based operations. The cybersecurity engine protects your entire hybrid
infrastructure, whatever the workload – physical, virtualized, or based in private, public,
and hybrid clouds – with the lightest possible footprint.
Light agents optimized for each OS efficiently reduce consumption ofvirtualization resources by as much as 30%, freeing them up for use in otherbusiness operations. A number of optimizations, including shared cache whichshares the results of file scans, decrease the amount of data and the numberof operations involved. These optimizations minimize the overall load on yourIT infrastructure, dramatically reducing IOPS, CPU cycles, memory, and disk
footprints - helping you achieve high consolidation ratios and protecting yourinvestment in virtualization projects.
Our platform-agnostic product protects Windows and Linux workloads andprovides native API integration with AWS, Microsoft Azure and Google Cloudplatforms. So no more worries about the security responsibilities you share withyour cloud service provider. Integration with cloud APIs provides automation andadministrative flexibility. You can see all the instances running under the specified
accounts through the management console, and use that information to deploy
security agents and apply security policies to them. Kaspersky Hybrid Cloud
Security also responds automatically to the increasing load as new instances arecreated and run by the cloud. API and auto-scaling policies ensure that every new
instance in each auto-scaling group has security deployed to it, conforming to thepolicy that you as an organization choose to set.
Kaspersky Hybrid Cloud Security enables a ‘security as code’ approach, withcontainerization host memory protection, tasks for containers, image scanningand scriptable interfaces. So you can integrate security tasks into CI/CD
pipelines without impacting on the development process – good news for
DevOps teams. The product also secures Docker and Windows containers, so anattacker can’t use a malicious container component as a stepping stone into theorganization’s internal workings.

3Flexera State of the Cloud Report, 20212

64%
of organizations named data loss/leakage
as a biggest cloud security concern4

Rapid growth in security risks
The journey into the cloud is a big opportunity for cybercriminals. Misconfiguration
during migration, a lack of visibility, and loss of control over different parts of theinfrastructure as a whole can all leave organizations vulnerable to the full spectrumof cyberattacks - from data leakage to ransomware. Rapid cloud adoption means
cybercriminals are switching their focus onto the cloud, as is demonstrated
by a recent doubling in the number of phishing attacks targeting cloud-based
resources5. Attackers even arm themselves with tools specifically designed to detectmisconfigurations.
Protecting the hybrid infrastructure from these growing threats is vital. But at
what cost? Cumbersome intrusion by the security system into the development/
deployment process, for example, is not acceptable. Nor is wasting IT and security
professionals’ time with false positives or low-risk findings. So your security solution
must integrate smoothly with your infrastructure, and mustn’t burden your team with
unnecessary and tedious security tasks.

Best-of-breed protection designed for hybrid
environments‘No need to install
additional anti-virus
software and other agents.’
Taken from Gartner reviews

Best of breed protection is at the heart of all Kaspersky products and services, so you
can be sure that all your data, shared folders and entire hybrid infrastructure are safe.
Multi-layered threat protection proactively fights the broadest range ofcyberattacks including malware, phishing, and more.
Machine learning algorithms empowered by human expertise deliver the highest
detection levels with minimal false positives.
Real-time threat intelligence data helps defend against the latest exploits.

NextGen Al-assisted
Runtime Protection

Systems Hardening& Workloads Defense

Borderless
Cybersecurity
Orchestration

The product not only detects and prevents network-based intrusions into cloud-based
assets, but even allows you to roll back any malicious changes made inside cloud
workloads, if needed. Application control means you can lock down all hybrid cloud
workloads in Default Deny mode for optimum system hardening, and limit the range ofrunning applications to legitimate and trusted only.
Also, in the age of ransomware, Kaspersky Hybrid Cloud Security protects businesscritical data from any attempt to hold it to ransom, including blocking remotely initiatedencryption and rolling back any affected files to their pre-encrypted state.

45Statista, 2021
Kaspersky Security Bulletin, 20213

44%of businesses have problems with a rapid
increase in security costs6

The balance between agility,
management, and the cost of security
Cloud models offer efficiency benefits in the form of agile development and elastic
consumption for the IT infrastructure. But that infrastructure also becomes morecomplex, requiring additional resources to manage, due largely to the short lifespan ofworkloads and the lack of visibility. Getting the most from your investment becomes abalance between the overall efficiency benefits delivered by introducing cloud based IT,
and the costs of managing and fully securing a more complex hybrid infrastructure.

Cost-efficiency and convenient management for a
comfortable cloud journey‘Great way to combine all
the security solutions in
one license.’
Taken from Amazon reviews

We at Kaspersky fully appreciate these practical issues, and Kaspersky Hybrid Cloud
Security offers both straightforward management and flexible licensing, optimizing
your investment and conserving your resources.
Our flexible licensing model means you choose only the capabilities you need,getting the most value from your security budget. You can choose one of twotiers and different licensing objects such as desktops, servers, or CPUs. You canalso combine different license types. And we offer additional BYOL and pay-peruse licensing options.
A unified cloud console makes the security management of your whole
infrastructure simpler, saving on valuable IT staff resources. All workloads can be
managed from the one console.
Straightforward cloud infrastructure inventory, and automated security
provisioning regardless of the agents' location, both contribute further tostreamlined management processes and maximum visibility.

45%of organizations cite a cloud audit failure7

Compliance as a cloud routine
Compliance is an important requirement for every organization, from internal standards
to compliance with external regulations such as GDPR. Cloud security is a shared
responsibility across IT, security teams, DevOps (if present), and the Compliance
Analyst, who’s responsible for the organization’s performance in cloud audits. Yoursecurity solution must be able to support compliance with new regulations as theycome into effect, making audits a painless routine.

Compliance-ready security for highly regulatedindustries‘It has a fully automatedsecurity feature.’
Taken from Amazon reviews

Kaspersky Hybrid Cloud Security doesn’t just help you adhere to cybersecurity
regulations – it reduces the number of routine manual tasks involved in ensuring
adherence.
Adaptive and multi-faceted, this product is designed to enable and continuously
support full regulatory compliance, through technologies ranging from systemhardening and agent self-defense to vulnerability assessment and automatedpatch management.
The wide range of features provides compliance and risk landscape adaptation,
keeping your security continuously on top of current legislation.

67Kaspersky internal research, 2021
Fugue The State of Cloud Security Report, 2021

4Focus on your digital transformation
journey
Digital transformation produces a whole spectrum of new opportunities – for you, andfor the cybercriminals targeting you. Kaspersky Hybrid Cloud Security helps you get
the best from your digital transformation, because it doesn’t just mitigate security risk
– it also saves labor hours, infrastructure resources, and money. With one product for
all your cloud security needs, one license for all workloads, and one console to manage
your whole hybrid infrastructure, security becomes one less thing to worry about –leaving you free to focus on other aspects of your digital transformation journey.

Learn more about
Kaspersky Hybrid CloudSecurity

Learn moreVMVM

Security for
Virtualization and VDI

Physical and Virtual Machines

Public cloudsecurity

Security for DevOpsand containers

Public Clouds

Kaspersky
Security CenterContainers

One Product

One Console

One License

For more about how to ensure the strongest and most efficient protection for yourhybrid environment, speak to your Kaspersky reseller or visit our website.

www.kaspersky.com
www.securelist.com© 2022 AO Kaspersky Lab.
Registered trademarks and service marks are theproperty of their respective owners.