17
Dr. Dimitar Shterionov Machine Translation Researcher

IC4 Cloud Security Workshop 2016

Embed Size (px)

Citation preview

Page 1: IC4 Cloud Security Workshop 2016

Dr. Dimitar ShterionovMachine Translation Researcher

Page 2: IC4 Cloud Security Workshop 2016

Topics to cover:

About KantanMT.comWho are we and what we stand for?

Cloud Security for KantanMT.comCustomer Data ProtectionApplication SecurityPhysical and Environmental SecurityeCommerce Transactions

Key Takeaways

12

6

9 3

12

45

11

7

10

8

Page 3: IC4 Cloud Security Workshop 2016

KantanMT.com

Statistical Machine TranslationCloud-based Saas

Highly scalable for high volumeInexpensive to operateHigh speed, high quality translationsFully Automated Usable Translation (FAUT)

Page 4: IC4 Cloud Security Workshop 2016

What is KantanMT.com?

Our VisionTo put Machine Translation

Customisation Improvement Deployment

into your hands

Hel

lo!

Engl

ish 你好

Chinese

Page 5: IC4 Cloud Security Workshop 2016

What is KantanMT.com?

Page 6: IC4 Cloud Security Workshop 2016

What is KantanMT.com?

Page 7: IC4 Cloud Security Workshop 2016

On the cloud

700 EC2 instances, C3.4-8xlarge,4,500 CoresELBs used to scale on -demandAlarms via CloudWatch, SNS, SMSWWW x 25, Sentinels x 8,Multi-region deployments (3 DC)Uptime target : 99.999% available

EC2/ELB/CloudFormation/CloudWatch

Storage for data models120 (TB) Terabytes provisionedIOPS, SSD and Magnetic VolumesKantanSwift caches these drives for high speed launch of SMT engines

EBS

Storage for all member dataStorage for Data models & statistical analysis34,000 Gigabytes of storage requiredUsed for primary and archive storageUsed for Throttling ASYNC requests

S3/API Gateway

High speed low-latency database servicesHighest level of fault toleranceDeployed over multiple availability zonesDaily backups and weekly roll oversUptime target : 99.999% available

RDS

Page 8: IC4 Cloud Security Workshop 2016

The KantanMT Community

Some clients un-named for maintenance of confidentiality

Page 9: IC4 Cloud Security Workshop 2016

The KantanMT Stats

Some clients un-named for maintenance of confidentiality

Active KantanMT Engines

7,698Training Words Uploaded

178,381,122,070Member Words Translated

5,502,953,580

www.kantanMT.com

Page 10: IC4 Cloud Security Workshop 2016
Page 11: IC4 Cloud Security Workshop 2016

Security measures

Effe

ctiv

enes

sC

osts

Preventive Detective Corrective

Customer Data ProtectionApplication SecurityPhysical and Environmental SecurityeCommerce Transactions

Page 12: IC4 Cloud Security Workshop 2016

Customer Data Protection

MonitoringAlarmsLogs

Back-UpEncryptionUnique session tokensVerification and validation

DataCredentials

Page 13: IC4 Cloud Security Workshop 2016

Application security

Proven and secure softwareQuality assessment

Prior to deploymentIn-service QARegular patches

24/7 customer support

Page 14: IC4 Cloud Security Workshop 2016

Physical security

Biometric scansCCTV surveillance 24/7 security staff

Redundant HVAC Hazard detection

and preventionRedundant UPS

Page 15: IC4 Cloud Security Workshop 2016

Security certificationHighly restrictive network configuration Regular audits by external firms24/7 expert support

eCommerce transactions

Page 16: IC4 Cloud Security Workshop 2016

Takeaways

First line of defence

Invest inYour Cloud

provider

Rely onWith security

trends

Stay up-to-dateVulnerabilities

Test for

FAIL FAST, RECOVER FASTER!

Page 17: IC4 Cloud Security Workshop 2016