Cloud Computing Security

1. CLOUD COMPUTING
SECURITY

2. Computing is not about
computing any more ,Its about
living.

3. TOPICS
1 . What is Cloud Computing .?
2 . Cloud Computing Infrastructure Models
3 . Architectural Layers of Cloud Computing
4 . Cloud Computing Characteristics
5 . Security Issues

4. 1 . What is Cloud Computing ?
Cloud computing is defined as a type of
computing that relies on sharing computing
resources rather than having local servers or
personal devices to handle applications.

5. What is Cloud Computing Security ?
Cloud computing security refers to the set of
procedures, processes and standards designed to
provide information security assurance in a
cloud computing environment.

6. Cloud computing security addresses both
physical and logical security issues across all
the different service models of software,
platform and infrastructure. It also addresses
how these services are delivered (public,
private or hybrid delivery model).

7. Cloud computing as the dynamic provisioning of
IT capabilities (hardware,software, or
services) from third parties over a network

9. WHY CLOUD COMPUTING ?
1 . Achieve economies of scale
2 . Reduce spending on technology
infrastructure.
3 . Globalize your workforce on the cheap
4 . Streamline processes
5 . Reduce capital costs

10. 6 . Improve accessibility
7 . Monitor projects more effectively.
8 . Less personnel training is needed.
9 . Minimize licensing new software
10 . Improve flexibility

11. 2 . CLOUD COMPUTING INFRASTRUCTURE MODELS
1 . Public Cloud
2 . Private Cloud
3 . Hybrid Cloud

12. Public Cloud
1 .Public clouds are run by third parties, and
applications from different customers are
likely to be mixed together on the cloud’s
servers, storage systems, and networks.
2 .Public clouds are most often hosted away from
customer premises, and they provide a way to
reduce customer risk and cost by providing a
flexible, even temporary extension to
enterprise infrastructure.

13. 3 .If a public cloud is implemented with
performance, security, and data locality in
mind, the existence of other applications
running in the cloud should be transparent to
both cloud architects and end users.

14. Private clouds
1 . Private clouds are built for the exclusive
use of one client, providing the utmost
control over data, security, and quality
of service
2 . Private clouds may be deployed in an
enterprise data center, and they also may be
deployed at a collocation facility.
3 . Private clouds can be built and managed by a
company’s own IT organization or by a
cloud provider.

15. Private clouds

16. Hybrid Cloud
1 . Hybrid clouds combine both public and private
cloud models.
2 . They can help to provide on­demand,
externally provisioned scale
3 . The ability to augment a private cloud with
the resources of a public cloud can be used
to maintain service levels in the face
of rapid workload fluctuations.
4 . A hybrid cloud also can be used to handle
planned workload spikes. Sometimes called
“surge computing,”

17. Hybrid Cloud

19. Cloud computing
Service Model

20. Cloud Components

21. 3 . ARCHITECTURAL LAYERS OF CLOUD COMPUTING

23. 4 . CLOUD COMPUTING CHARACTERISTICS
1 . On­demand self­service
A consumer can unilaterally provision
computing capabilities, such as server time and
network storage, as needed automatically
without requiring human interaction with each
service provider.

24. 2 . Broad network access.
Capabilities are available over the network
and accessed through standard mechanisms that
promote use by heterogeneous thin or thick
client platforms
Examples : ­ mobile phones, tablets, laptops,
and workstations

25. 3 . Rapid elasticity
Capabilities can be elastically provisioned
and released, in some cases automatically, to
scale rapidly outward and inward commensurate
with demand.
To the consumer, the capabilities available
for provisioning often appear to be unlimited
and canbe appropriated in any quantity at any
time.

26. 4 . Measured service
Cloud systems automatically control and
optimize resource use by leveraging a metering
capability 1 at some level of abstraction
appropriate to the type of service
Eg: ­Storage, processing, bandwidth, and
active user accounts

27. SECURITY IN CLOUD COMPUTING IS OF TWO TYPES
1. Data Security:­

It focuses on protecting the software and
hardware associated with the cloud.

It deals with choosing an apt location for data
centers so as to protect it from internal
threats, different types of weather conditions,
fire and even physical attacks that might
destroy the center physically and external
threats avoiding unauthorized access and break
in.

28. 2 . Network Security :­
Protecting the network over which cloud is
running from various attacks – DOS, DDOS, IP
Spoofing, ARP Spoofing and any novel attacks
that intruders may device. Attack on data
affects a single user whereas a successful
attack on Network has the potential to affect
multiple users. Therefore network security is
of foremost importance.

29. Advantages of cloud
1 . Cost
2 . Device and location independence
3 . Multi­tenancy
4 . Reliability
5 . Scalability
6 . Maintenance

30. 5 . SECURITY ISSUES

32. TOP 3 CLOUD SECURITY ISSUES

33. CONCLUSION
Cloud computing is sometimes viewed as a
reincarnation of the classic mainframe client­
server model
However, resources are ubiquitous, scalable,
highly virtualized Contains all the traditional
threats, as well as new ones

34. In developing solutions to cloud computing
security issues it may be helpful to identify the
problems and approaches in terms of
a. Loss of control
b. Lack of trust
c. Multi­tenancy problems

35. THANK YOU