Flashcards
1.2 Seperation and Cloud Security
Cards in this deck (18)
- 1Seperation and Cloud Security When assessing the separation measures of a given cloud service, there are two factors determining your security and assurance requirements:+ The deployment model
+ The service model. - 2Seperation and Cloud Security What are the three known deployment models for a cloud service:+ Public Cloud
+ Community Cloud
+ Private Cloud - 3Seperation and Cloud Security What are the three known service models for a cloud service:+ Iaas
+ Paas
+ Saas - 4Seperation and Cloud Security Public cloud services can normally be accessed by anyone in possession of a credit card or an email address:You will need a high level of confidence in the controls seperating your data.
- 5Seperation and Cloud Security Community cloud services host users from a specific community, such as the public sector:These communities often have a shared risk appetite and an agreed minimum standard or legal agreement.
- 6Seperation and Cloud Security Private cloud services are deployed to support a single organisation. They normally offer the ability to tailor the architecture to meet specific security and business requirements:For processing untrusted or very sensitive data. You will need to manage, monitor and maintain the infrastructure, unless an agreement exists with the cloud service provider to do this.
- 7Seperation and Cloud Security In many situations a private cloud service will operate within a single security domain (for example providing a virtual desktop, or test and development resources):The cloud platform is simply another part of the enterprise IT environment and should be configured, managed and monitored as such.
- 8Seperation and Cloud Security IaaS products generally provide compute, networking and storage services:User separation needs to be enforced in all of these elements.
- 9Seperation and Cloud Security IaaS: compute separation:Within the compute environment, separation between users is typically enforced by a hypervisor or hardware.
- 10Seperation and Cloud Security IaaS: network separation:It is important to understand the network separation, since users will normally be constructing their own virtual networks on multi-tenanted network infrastructure.
- 11Seperation and Cloud Security If you cannot gain sufficient confidence in the separation provided by an IaaS within the networking layer, you may:Enhance your protection with your own encryption. You may also need to consider whether the service protects or reserves your share of network to prevent a DDOS attack.
- 12Seperation and Cloud Security IaaS: storage users may have direct control over some portion of a multi-tenanted storage environment:This makes it possible for a user to attack the storage components of the service. Effective separation within the storage of the service will help tackle this problem.
- 13Seperation and Cloud Security PaaS offerings can provide users with rich and complex interfaces. They cover a wide range of implementation technologies, and are likely to be at different levels of security maturity:It may be appropriate to run the PaaS solution within a private or community cloud service.
- 14Seperation and Cloud Security Two common PaaS approaches, with different associated risks are:+ Shared application hosting
+ Managed host services - 15Seperation and Cloud Security Paas shared application hosting:Involves the hosting of users’ applications on top of a shared operating system. The operating system and application host are responsible for preventing users from affecting each other.
- 16Seperation and Cloud Security Paas managed host services:The user has a dedicated physical or virtual machine, but rather than manage the operating system themselves, they purchase this as a service from the service provider.
- 17Seperation and Cloud Security There are two key additional risks when considering Paas Managed host services:+ Service providers administrators access
+ Additional connections in the infrastructure by the management services - 18Seperation and Cloud Security SaaS offerings separation between users is often enforced by software controls running within a single instance of an application:The infrastructure is not usually relied upon to enforce separation. It may be difficult to understand where and how your data is protected.
Information
- Description
- ACA Cloud Sy Guidance Flashcards on 1.2 Seperation and Cloud Security, created by Matthew Cowley on 28/04/2022.
- Created by
- Matthew Cowley
- Views
- 0
- Rating