0% found this document useful (0 votes)
20 views3 pages

Cloud_Security_Topics_Final

The document discusses key topics in cloud security and privacy, including case studies of companies utilizing various cloud models and the advantages and disadvantages of each deployment model. It highlights the importance of SSL encryption, identity and access management, and the business value of cloud computing, such as cost reduction and scalability. Additionally, it addresses vulnerabilities and risks associated with public and private clouds, as well as the complexities of multicloud tenancy.

Uploaded by

mclarerb
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
20 views3 pages

Cloud_Security_Topics_Final

The document discusses key topics in cloud security and privacy, including case studies of companies utilizing various cloud models and the advantages and disadvantages of each deployment model. It highlights the importance of SSL encryption, identity and access management, and the business value of cloud computing, such as cost reduction and scalability. Additionally, it addresses vulnerabilities and risks associated with public and private clouds, as well as the complexities of multicloud tenancy.

Uploaded by

mclarerb
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 3

Cloud Security and Privacy - Important Topics

1. Case Studies of Companies in Cloud Computing


Amazon Web Services (AWS): Pioneered IaaS and PaaS, offering scalable and reliable cloud
services.
Salesforce: SaaS-based CRM platform emphasizing secure multitenancy and high availability.
Netflix on AWS: Demonstrates high availability and scalability using EC2, S3, and Auto Scaling.

2. Case Study for Deployment Models


Private Cloud (Banking): Used for data sensitivity and regulatory compliance.
Public Cloud (Startups/SMEs): Cost-effective, scalable services via AWS, Azure, or GCP.
Hybrid Cloud (Healthcare): Uses private cloud for patient data and public cloud for analytics.

3. Cloud Service & Deployment Models


Service Models:
- IaaS: Infrastructure as a Service (e.g., AWS EC2).
- PaaS: Platform as a Service (e.g., Google App Engine).
- SaaS: Software as a Service (e.g., Gmail, Dropbox).

Deployment Models:
- Public Cloud: Shared infrastructure, low cost.
- Private Cloud: Internal use, high control/security.
- Hybrid Cloud: Mix of public and private cloud.
- Community Cloud: Shared among similar organizations.

4. Advantages & Disadvantages of Cloud Deployment Models


Public Cloud:
+ Cost-effective, scalable
- Less control, security risks

Private Cloud:
+ High control, enhanced security
- Expensive, complex
Hybrid Cloud:
+ Flexibility, optimized cost-security balance
- Integration complexity

Community Cloud:
+ Collaboration, shared infrastructure
- Limited scalability, governance issues

5. SSL Encryption in Cloud


Purpose: Secures data in transit using encryption.
How it Works: Public-private key cryptography with TLS.
Applications: Web services, APIs, secure transfers.
Risks: Misconfiguration, expired certificates, MITM attacks.

6. Business Value (BV) of Cloud


Cost Reduction: Shifts from CapEx to OpEx.
Agility: Rapid deployment of services.
Scalability: On-demand resources.
Innovation: Leveraging PaaS and SaaS platforms.

7. Cloud Provisioning, Metering, and Pricing


Provisioning:
- Static: Pre-allocated resources.
- Dynamic: Real-time resource allocation.

Metering:
- Tracks usage (CPU, storage, bandwidth).

Pricing Models:
- Pay-as-you-go, Subscription, Reserved Instances.

8. Identity and Access Management (IAM)


Purpose: Manage user identities and access.
Authentication: MFA, passwords.
Authorization: Role-based access (RBAC).
Auditing: Tracks and logs access for compliance.
Tools: AWS IAM, Azure AD, Google IAM.

9. Multicloud Tenancy
Using multiple cloud providers (e.g., AWS + Azure).
Benefits: Avoid lock-in, performance optimization, redundancy.
Challenges: Management complexity, security integration.

10. Cloud Model Vulnerabilities / Risk Analysis


Public Cloud Risks:
- Shared infrastructure, data leakage, misconfiguration.

Private Cloud Risks:


- Insider threats, costly security maintenance.

General Risks:
- Insecure APIs, data breaches, account hijacking.

You might also like