Cloud security

Alexandra Instituttet
Cloud computing Security
6/5/2011

Alexandra Institute
Cloud computingSecurity

What Is Cloud Computing?

Cloud Benefits

B2B Scenario

B2B2C Scenario (Business to Business to Customer)

Innovation In Assembly Scenario

Cloud Computing Evolution

Cloud Service Models
http://www.katescomment.com/iaas-paas-saas-definition/

Multi-Tenancy

Alexandra Institute
Cloud computing
Security

14 Specific Cloud Computing Security Challenges*
Migrating PII & sensitive data to the cloud
EU Data Protection Directive & U.S. Safe Harbor program
Exposure of data to foreign government & data
Subpoenas
Data retention & records management issues
Privacy Impact Assessments (PIA)
Identity & Access Management
Multi-tenancy
Logging & Monitoring
Data ownership /custodianship
Quality of Service guarantees
Securing hypervisors (Blue Pill)
*Cloud Computing An insight in the Governance & Security aspectsMarc Vael

14 Specific Cloud Computing Security Challenges*
Attracting hackers (high value target)
Security of virtual OS in the cloud
BCP / DRP
Data encryption & key management
Encrypting access to cloud resource control interface
Encrypting administrative access to OS instances
Encrypting access to applications
Encrypting application data at rest
Public cloud vs. Internal cloud security
Lack of public SaaS version control
14.Using SLAs to obtain cloud security
Suggested requirements for cloud SLAs
Issues with cloud forensics & e-discovery
*Cloud Computing An insight in the Governance & Security aspectsMarc Vael

Domain 2 Governance and Enterprise Risk Management
Domain3
Legal and Electronic Discovery
Domain 7
Traditional Security, Business Continuity, and Disaster Recovery
Domain 12 Identity and Access Management
Domain 11 Encryption and Key Management
Domain 5 Information Lifecycle Management
Domain 13 Virtualization
Domain 11 Encryption and Key Management
Domain 9Incident Response, Notification, and Remediation
Domain 7
Traditional Security, Business Continuity, and Disaster Recovery
Domain 12
Identity and Access Management
Domain 6 Portability and Interoperability
Domain 10
Application Security
How Security Gets Integrated
Domain 2 Governance and Enterprise Risk Management
Domain 4 Compliance and Audit
Domain 8 Data Center Operations

For more information go to Alexandra.dk/CCSK

http://alexandra.dk	3131
http://ny.alexandra.dk	1060
http://www.alexandra.dk	342
http://edit.alexandra.dk	23
http://web.alexandra.dk	4
http://thepcsecurity.com	1
http://www.serviceplatform.dk	1

Cloud security

by Alexandra Instituttet

Accessibility

Categories

Upload Details

Usage Rights

7 Embeds 4,562

Statistics

Cloud security Presentation Transcript