This document discusses security in the cloud. It covers topics like virtualization, deployment models (private, public, hybrid, community cloud), cloud service models (SaaS, PaaS, IaaS), multi-tenancy, data isolation and access patterns, data security techniques like homomorphic encryption, cloud security requirements, and top threats to cloud computing like data breaches, account hijacking, and DoS attacks. The document provides an overview of key concepts in cloud security.

1. Security
in
the
Cloud
Prabath
Siriwardena
Isura
Karunaratne
Last Updated: Nov 2014

2. *

3. Virtualiza:on

4. Virtualiza:on

5. Service
Oriented
Architecture

6. Grid
Compu:ng

7. • Cassandra
ecibrxalt(eeetx:cnp
hIedSr
i
imcneagnn
tea
lbx)
• fsErtxootmreen
,ss
eis
Gconng
fiugsuerre
sdt
otroe
lse
over
riamgpel
eamnye
unsGenrg
Ke r beros
suport
•K
Infrastructure
• Hypervisor
• Management
So3ware
• Deployment
So3ware
• Network
• Server
• Storage

8. Deployment
Models
• Private
Cloud
Model
-­‐
Enterprise
owned
or
leased
• Public
Cloud
Model
-­‐
Accessible
to
general
public
• Hybrid
Cloud
Model
-­‐
Composi6on
of
private
and
public
cloud
• Community
Cloud
Model
-­‐
Shared
infrastructure
for
specific
community

9. • Cassandra
• fsErtxootmreen
,ss
Ke r beros
suport
•K
Cloud
Service
Models
• SaaS
• PaaS
• IaaS
ecibrxalt(eeetx:cnp
hIedSr
i
imcneagnn
tea
lbx)
eis
Gconng
fiugsuerre
sdt
otroe
lse
over
riamgpel
eamnye
unsGenrg

10. Service
Delivery
by
Provider

11. Service
Delivery
by
Provider

12. Service
Delivery
by
Provider

13. Service
Delivery
by
Provider

14. Service
Delivery
by
Provider

15. Service
Delivery
by
Deployment

16. Service
Delivery
by
Deployment

17. Cloud
Under
AFack

18. AFacks
from
the
Cloud

19. Weakest
Link

20. Mul:-­‐tenancy

21. Mul:-­‐tenancy
within
an
Organiza:on

22. Mul:-­‐tenancy

23. Data
Isola:on
–
Separated
DBs

24. Data
Isola:on
Shared
DB/Separate
Schema

25. Data
Isola:on
Shared
DB/Shared
Schema

26. Data
Access
PaFerns

27. Data
Access
PaFerns

28. Data
Access
PaFerns

29. Data
Access
PaFerns

30. Data
Access
PaFerns

31. Data
Security

32. Data
Security

33. Homomorphic
Encryp:on

34. Cloud
Security
Requirements

35. Top
Threats
to
Cloud
Compu:ng
• Data
Breaches
• Data
Loss
• Account
Hijacking
• Insecure
APIs
• DoS
• Malicious
Insiders
• Abuse
of
Cloud
Service
• Insufficient
Due
Diligence
• Shared
Technology
Issues

36. Contact
us
!