7 - Cloud Computing Security Challenges

Question 1

Elastic Resources

Answer 1

Scale up/down to meet demand

Question 2

Measured service

Answer 2

Pay per use

Question 3

Resource Pooling

Answer 3

Resourcees pooled to multiple consumers using a multi-tenant model.

Different physical and virtual resources dynamically assigned/reassigned

Question 4

On-demand self service

Answer 4

Customer can provision their own computing capabilities

Question 5

High Availability/Broad network access

Answer 5

Available over the network and accessed through standard mechanisms that promoto use by heterogeneous platforms

Question 6

Private cloud

Answer 6

Single organisation (comprising multiple consumers)

Owned/managed/operated by the organisation, a 3rd party or mix. On or off prem

Question 7

Community Clooud

Answer 7

For use by a community of consumers from orgs that have shared interest.

Question 8

Public Cloud

Answer 8

Open use by general public

Question 9

Hybrid Cloud

Answer 9

Composition of two/more other cloud types that are unique entities but bound by standardised/proprietary tech that enables data/app portability

Question 10

IaaS

Answer 10

Infrastructure as a service

Provision fundamental computing resources

Question 11

PaaS

Answer 11

Deploy customer apps using languages, libraries etc supported by the provider

Question 12

SaaS

Answer 12

Software as a service

Use provider’s own apps on a cloud service

Question 13

Advantages of Cloud
LIHCD

Answer 13

• Lower costs (software/computing)
• Improved performance and availability
• High storage capacity
• Continuous updates
• Data sharing and group work(?)

Question 14

Key Cloud Issues

Answer 14

• Client has no control of infrastructure (black box)
• Who are we sharing with?
• Requires internet conneciton
• Limited flexibility
• Different protocols/APIs
• Data security/privacy (lose control, multi-tenancy, data leakage)
• Does the provider comply with the same regulations/policy?

Question 15

Cloud Security Solutions

Answer 15

• Isolation/protection of VMs
• APIs for reporting/auditing/alerts
• Docker-based services
• Data encryptions
• Security policies
• Mapping of security controls for internally hosted apps to the cloud infra
• Audit and compliance
• Multi factor auth for example,

Question 16

Docker

Answer 16

Platform for running apps inside containers.

Allows developers to package apps and dependencies into portable isolated unites

Question 17

Docker Issues

Answer 17

• Misconfigurations, vulnerable images, inadequate access controls
• Shared kernal vulnerabilities or compromised host systems can impact security of Docker containers

Question 18

Security as a service

Answer 18

Extra layer of security

Cloud IDS
Anti DDOS systems
Physical security
Backup, recovery and archive
Data residency/location

Question 19

CSA

Answer 19

Cloud Security Alliance