Cloud computing provides on-demand access to shared computing resources like networks, servers, storage, applications and services. While it offers advantages like flexibility and cost savings, security is a major concern due to issues like loss of physical control of data and systems, multi-tenancy, and the complexity of massive cloud systems. Key challenges include isolation management between tenants, data encryption, disaster recovery planning and secure virtualization. Organizations should plan for security, encrypt data, backup regularly, audit systems and sandbox applications to help address risks in the cloud.

1. Cloud Computing
Security
by Vitor Domingos
intrepid and professional basher
http://vitordomingos.com

2. * as seen on regular weather channel

5. Cloud Computing is ?
- Network as a “cloud”
- Network is the computer (SUN moto)
- TCP/IP abstraction (1st cloud)
- www data abstraction (2nd cloud)
- Virtualization (3rd cloud)
Bottom line:
- Virtualization done right, with webservices

6. Cloud Computing is !
- on-demand self-service
- ubiquitous network access
- location independent resource pooling
- rapid elasticity
- measured service
- pay as you go
- abstract resources

7. CCaaS
- Software as a Service
- SalesForce
- Platform as a Service
- Google App Engine
- Microsoft Azure
- Infrastructure as a Service
- Rackspace Mosso
- Amazon Web Services

8. Cloud Computing leverages
- Virtualization
- Multi-Tenancy
- Massive Scale
- Autonomic Computing
- Distributed Environment
- Security Technologies
- Service Oriented

9. Security in the Cloud

10. Only the paranoid survive!
- Key issues
trust, trust, multi-tenancy, trust, encryption,
compliance
- Massive complex systems running on functional
units
- Certification & Audit
- Loss of physical control
- Interoperability
- Accountability

11. please, keep in mind that
- Shared hell:
- Hardware
- Memory
- Disks
- NIC's (Virtual)
- Cache Snooping
- Hypervisor Attacks
- Persistent Root Kits
- Password Cracking
- Broken or stolen key rings / authorization federation
- Never ending logs

13. Great things do come
- Provisioning
- Rapid reconstitution of services
- Storage fragmented
- Security layers (auth, firewall, logging, …)
- Network and Security perimeters
- Virtual Zoning
- Fault tolerance

14. Challenges
- Data dispersal and international privacy laws
- Isolation management & Multi-Tenancy
- Certification (SAS 70 Type II audits and ISO 27001)
- Data ownership
- QoS & SLA's garantees
- Secure Hypervisors

15. Challenges
- Massive outages
- Service bottle necks; DNS as your best friend
- Encryption needs
cloud resources, applications, storage, services
- Disaster recovery and contingency plans
- If you have it on Auto mode, you won't see it coming
- Honey for hackers

17. ToDo
- Network with VPN and VLAN's
- SLA's; read the fine prints
- Backup and recover often; Risk assessment
- Log (out of there) as if the world ended tomorrow
- Plan for failure
- YOU secure!!!
- Sandbox, Sandbox, Sandbox

18. You're not alone
- Security Groups
IBM; SUN; Amazon; ISV
- Cloud Security Alliance (awesome guide!!)
- OpenCloud Manifesto & Amazon Security Paper
- Cloud Computing ML at Google Groups
- Legal Cloud's
- Vivek Kundra, USA CTO, did it, so as Facebook,
New York Times and Nasdaq (on AWS)

20. Wrap up
- Plan
- Encrypt
- Backup
- Secure
- Audit
- Sandbox (check my last year sapo codebits talk)
- http://codebits.sapo.pt/files/aws_23.pdf
- Trust

21. mail: vd@prt.sc
?
site: http://vitordomingos.com