Cloud computing refers to using internet-based computer resources and relies on trends like software as a service and web 2.0. There are different types of cloud including software as a service (SaaS), platform as a service (PaaS), and infrastructure as a service (IaaS). Deploying in an untrusted cloud domain presents security challenges that are different from traditional IT environments due to the dynamic scaling and virtualization of resources. Security in the cloud requires approaches like encryption, firewalls, access control, and not storing critical data in the cloud.

1. CloudSec The real voyage of discovery consists in having new eyes . Marcel Proust

2. Kris Buytaert Senior Linux and Open Source Consultant @inuits.be

3. „ Infrastructure Architect“

4. Building Clouds since 2004

5. Surviving the 10 th floor test

6. Co-Author Virtualization with Xen

7. Guest Editor at Virtualization.com

8. The Cloud ? Cloud computing refers to the use of Internet ("cloud") based computer technology for a variety of services. It is a style of computing in which dynamically scalable and often virtualised resources are provided as a service over the Internet. The concept incorporates software as a service (SaaS), Web 2.0 and other recent, well-known technology trends, in which the common theme is reliance on the Internet for satisfying the computing needs of the users.

9. SAAS <(>) Cloud PAAS <(>) Cloud IAAS > Cloud

10. Cloud and Open Source Xen

11. Enomalism

12. openQRM

13. OpenNebula

14. SnowFlock

15. Eucalyptus

16. ScalR Python (Google AppEng)

17. Puppet

18. Chef

19. Hadoop

20. MemcacheD

21. Cloud and Open Source Imagine having to pay software licenses for machines that have only lived 1 hour. And 10000 of them each month

22. The Cloud in 2005 for host in `seq 1 10000` create_vhost { Create LVM partitions Chroot Rsync Configure }

23. CloudSec Deploying in an untrusted domain This is not your average DMZ

24. You don't even own the Vhost Cloud Datacenters Attrackt Attackers Identical Hypervisors => Only 1 exploit needed

25. Cloud Hijacking Pre and Post Deployment What was there and what stays behind ?

26. What changed with Cloud ? Deployment Methods

27. Scale 1 physical machine => MANY VM's

28. Deploy on demand The Network stack System vs Network vs Virtualization

29. Who's network is this anyhow ?

30. What changed with Cloud ? Involvement of IT, or the lack thereof!

31. Flux and Scale Can Traditional HIDS follow the quick changing state of Hosts ?

32. My HA Clusters, are Active Passive, Active Active, or N+M too. Their state is in constant flux too

33. The role Config Management and Platform Automation grows every second.

34. Static Security was DEAD before Virtualization Cloud High Availability Clusters

35. VM Relocation

36. Live Migration

37. Rapid ReDeployment

38. Multiple Instances of a service

39. Image Sprawl, your update nightmare Image sprawl Copy VM, Deploy VM, Modify VM, Copy VM How do you patch 1 VM ?

40. Did you patch before or after that one was copied ?

41. How do you patch 100 VM's ?

42. What about machines that are offline ?

43. Image Sprawl, your update nightmare The biggest challenges we have in virtualization cloud are operational and organizational rather than technical. Christofer Hoff

44. For better nights Automate Deployment

45. Implement Configuration Management

46. Map Security management to Config Mgmt Prepare to Survive the 10 th floor test !

47. Security Advise Increase security as never before

48. Encrypt all inter Vhost traffic

49. FireWall as Never before

50. Don't store critical data in the cloud Use it for analytics

51. Workload offload

52. Volatile data Build your own Private Cloud

53. Security still isn't a product you can buy It's not even a process It's a lifestyle

54. ` Kris Buytaert < [email_address] > Further Reading http://www.krisbuytaert.be/blog/ http://www.inuits.be/ http://www.virtualization.com/ http://www.oreillygmt.com/ ? !

55. SaaSSec One Vendor

56. Full control over His application

57. His application stack Supposed to manage his platform in Secure Fashion

58. But do you TRUST him ?