This document provides an overview of cloud computing and cloud security. It defines cloud computing and discusses cloud deployment models, service models, and common security threats. The document outlines how to model attacks by identifying assets, threats, and attacker capabilities. It examines threats to confidentiality, integrity and availability. Real-world examples of data loss, downtime and phishing attacks on clouds are also presented. The document concludes that while cloud computing is widely used, security must be a top priority when working in the cloud.

1. Overview on Cloud Computing & Cloud Computing Security German University in Cairo (GUC)

3. Technical Presentation  Page What is Cloud Computing ? Experts Opinion !! “ We’ve redefined Cloud Computing to include everything that we already do. . . . I don’t understand what we would do differently in the light of Cloud Computing other than change the wording of some of our ads.” Larry Ellison , Founder of Oracle Richard Stallman , GNU “ It’s stupidity . It’s worse than stupidity : it’s a marketing hype campaign” Ron Rivest , The R of RSA “ Cloud Computing will become a focal point of our work in security. I’m optimistic …”

4. Technical Presentation  Page What is Cloud Computing ? Google‘s Opinion !!

8. Sensor Networks Seminar  Page What is Cloud Computing ? Cloud Service Models Cloud Computing basically means selling“ X -as-a-Service“ Software-as-a-Service (SaaS): Consumer can use the provider‘s software or application that are running on the cloud infrastructure, but can‘t manage or control the underlying infrastructure. Examples, Gmail, Google Apps, Google Docs. Platform-as-a-Service (PaaS): Consumers develop their own software or applications using tools, programming languages supported by the provider. Examples, Google App Engine, Windows Azure, SpringSource. Infrastructure-as-a-Service(IaaS): Consumer is granted the capability to provision processing, storage, Hardware and computational resources by which he can use to run any arbitary software. The consumer has control over the operating systems, storage, deployed applications and limited control over networking components.

9. Technical Presentaion  Page What is Cloud Computing ? Another way to look at it !!

13. Technichal Presentation  Page Cloud Security Threat Model

17. Technical Presentation  Page Cloud Security Threat Model

19. Technical Presentation  Page Cloud Security Threat Model

23. Technical Presentation  Page Real Examples – Data Loss Cloud Security "Regrettably, based on Microsoft /Danger's latest recovery assessment of their systems, we must now inform you that personal information stored on your device—such as contacts, calendar entries, to-do lists or photos—that is no longer on your Sidekick almost certainly has been lost as a result of a server failure at Microsoft/Danger."

24. Technical Presentation  Page Real Examples – Downtimes Cloud Security

25. Technical Presentation  Page Cloud Security Real Examples – Phishing “ hey! check out this funny blog about you...”

26. Technichal Presntation  Page Cloud Security Real Examples – Botnets

28. Technichal Presentation  Page Questions !??