Alexandra Institute Cloud Computing Security Challenges
•Download as PPTX, PDF•
3 likes•1,042 views
This document discusses cloud computing security challenges. It identifies 14 specific challenges such as migrating personal information and sensitive data to the cloud, ensuring compliance with data protection directives, managing access and identities, securing hypervisors and virtual operating systems, attracting hackers as cloud presents a high value target, and issues with cloud forensics and data discovery. It also maps these 14 challenges to relevant domains in cloud security like governance, legal and electronic discovery, encryption, identity and access management, compliance, and incident response. The document was created by Alexandra Institute on cloud computing security and provides a link for more information.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (19)
Similar to Alexandra Institute Cloud Computing Security Challenges
Similar to Alexandra Institute Cloud Computing Security Challenges (20)
More from Alexandra Instituttet
More from Alexandra Instituttet (16)
Recently uploaded
Recently uploaded (20)
Alexandra Institute Cloud Computing Security Challenges
- 1. Alexandra Instituttet Cloud computing Security 6/5/2011
- 2. Alexandra Institute Cloud computingSecurity
- 3. What Is Cloud Computing?
- 5. B2B Scenario
- 6. B2B2C Scenario (Business to Business to Customer)
- 7. Innovation In Assembly Scenario
- 9. Cloud Service Models http://www.katescomment.com/iaas-paas-saas-definition/
- 10. Multi-Tenancy
- 11. Alexandra Institute Cloud computing Security
- 13. Exposure of data to foreign government & data
- 14. Subpoenas
- 15. Data retention & records management issues
- 16. Privacy Impact Assessments (PIA)Identity & Access Management Multi-tenancy Logging & Monitoring Data ownership /custodianship Quality of Service guarantees Securing hypervisors (Blue Pill) *Cloud Computing An insight in the Governance & Security aspectsarc Vael
- 18. Encrypting administrative access to OS instances
- 19. Encrypting access to applications
- 21. Issues with cloud forensics & e-discovery*Cloud Computing An insight in the Governance & Security aspectsarc Vael
- 22. Domain 2 Governance and Enterprise Risk Management Domain3 Legal and Electronic Discovery Domain 7 Traditional Security, Business Continuity, and Disaster Recovery Domain 12 Identity and Access Management Domain 11 Encryption and Key Management Domain 5 Information Lifecycle Management Domain 13 Virtualization Domain 11 Encryption and Key Management Domain 9Incident Response, Notification, and Remediation Domain 7 Traditional Security, Business Continuity, and Disaster Recovery Domain 12 Identity and Access Management Domain 6 Portability and Interoperability Domain 10 Application Security How Security Gets Integrated Domain 2 Governance and Enterprise Risk Management Domain 6 Portability and Interoperability Domain 4 Compliance and Audit Domain 6 Portability and Interoperability Domain 8 Data Center Operations
- 23. For more information go to Alexandra.dk/CCSK
Editor's Notes
- Generally, SaaS provides the most integrated functionality built directly into the offering, with the least consumer extensibility, and a relatively high level of integrated security (at least the provider bears a responsibility for security).PaaS is intended to enable developers to build their own applications on top of the platform. As a result it tends to be more extensible than SaaS, at the expense of customerready features. This tradeoff extends to security features and capabilities, where the built-in capabilities are less complete, but there is more flexibility to layer on additional security.IaaS provides few if any application-like features, but enormous extensibility. This generally means less integrated security capabilities and functionality beyond protecting the infrastructure itself. This model requires that operating systems, applications, and content be managed and secured by the cloud consumer.