VIDEO: Akamai CSO Andy Ellis Talks CDN Security

Transcription

well dayto day I focus on a couple of different things so one area is the protection of our customers and our platform so I work very strongly with our engineering teams to ensure that we're building you know appropriate products that take customer safety into account uh then pay attention to our corporate networks ensuring that those are secure and then work with our security business unit on defining security products that would be of interest to the market well I think you started out with what a lot of the secret sauce is which is that massive scale you being in 1500 locations with a network of 120,000 servers that are Distributing you know upwards of 10 terabits per second you have this just ability to absorb a tax that would otherwise you know an infrastructure if you think back to the old you know Sittin that people would do you you show up in a bank and everybody would sit in the headquarters and shut down the bank that doesn't work these days because banks are all one through ATMs sure and if you showed up at an ATM and tried to sit in front of it and block people from using it they walk across the street there's another ATM exactly and so that's how our infrastructure really operates and then using the fact that we see 30% of all web traffic we can do analytics and correlation across our customer base to provide better protection and then when we talk about the protection uh certainly you know the Dos you know you can absorb that kind of stuff but um what about you know user authentication role-based attack where somebody's trying to get a piece of information as opposed to a disruption of service what sort of controls challenges and risks are involved in that and I know that's a multi-headed question with lots of questions it's a big question so we provide a web application firewall at the Ed and the idea there is you know adversaries are clearly moving out the stack so provide defense as close to the adversar as you can now obviously if somebody has already compromised someone's credentials you know web application firewall isn't going to be the right solution for it uh but you can look at things like geographical based targeting you know other analytics of where content should be going uh we do integrate with our customers there but that's not an area were really plenty now for the analytics across you know 120,000 servers and all the log file and data how do you manage that I'm assuming there's some kind of big data back end whatever that is Oracle Hadoop or otherwise but what are you using to Aggregate and figure all that out there's a couple of different big data back ends so one of them that we use you we built ourselves is a realtime Telemetry monitoring system that's aggregating Telemetry you know out at the edge and then bringing it back in so it's a distributed right centralized read database that we built ourselves yeah it's WR read that's a slave master MySQL massive scale with M cached similar similar to that but it's it's completely homebuilt uh so we call it query because we have you know very very original when it comes to names but what it really lets us do is let each server continuously write data in and then the aggregation nodes will you know prune out old data and put in new data that gives us real-time visibility to what's going on around our Network and then we ship logs around inside the infrastructure into our own billing clusters which do reporting and in and Publishing that data for and then you know traditional Enterprise data center I'd have some kind of sim kind of system and you know dashboards I would assume in your office you've got you know four or five screens but what are on those screens is there some kind of centralized dashboard where you can see security health incidents issues there's a couple of different ones so in fact there's one that can be seen downstairs at our demo today see that that'll show sort of what a customer view looks like so I get a view of that both for any given customer as well as for aite hole Yeah and then we have just a lot of you know JP graph views into our existing data to look for interesting anomalies a lot of challenges you got you know 120,000 servers so there's Big Data challenge there's customers there's your management telling you this that whatever I know you got a new CEO now um what's your biggest challenge as ceso is it just operational excellence or is it something else I think there's a lot of different challenges you one of the challenges of being a you know service provider is that often times you have customers who really like a legacy service that has security issues that you'd like to move them off of it right now it's a contractual issue you have to you know move them slowly and gradually so it's not like being a software provider where you can just ship a patch and it's up to other people to implement it you actually have to do the implementations for them as well

This transcript was generated automatically from the video's captions and may contain errors.

Published: Mar 13, 2013
Updated: Jul 16, 2021
1 minute read

Akamai uses a number of different Big Data type back-ends to help deliver security analytics. One of them was built by Akamai on its own, as a real-time telemetry monitoring system that leverages the company’s home-grown Query database.

“It’s a distributed write, centralized read database,” Andy Ellis, Chief Security Officer at Akamai explained. “What it really lets us do is, each server can continuously write data in, then the aggregation nodes will prune out data and it gives us real time visibility into what’s going on around our network.”

Read the full story at eSecurity Planet:
How Akamai’s Chief Security Officer Secures Millions

Sean Michael Kerner is a senior editor at InternetNews.com, the news service of the IT Business Edge Network, the network for technology professionals Follow him on Twitter @TechJournalist.

Sean Michael Kerner

Sean Michael Kerner is an Internet consultant, strategist, and writer for several leading IT business web sites.

Internet News Logo

InternetNews is a source of industry news and intelligence for IT professionals from all branches of the technology world. InternetNews focuses on helping professionals grow their knowledge base and authority in their field with the top news and trends in Software, IT Management, Networking & Communications, and Small Business.

Property of TechnologyAdvice. © 2026 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.