10 security concerns related to cloud

7/31/2019 10 security concerns related to cloud

1/26

10 Security Concerns For Cloud

Computing

Submitted To: Submitted By:

Prof Ashok Wahi Aprajay Minocha

(11609137)

4/9/2011 10 Security Concerns For Cloud Computing Page 1


2/26


3/26

Contd. Introduction

Service fully managed by the provider.

Users can consume services according to

needs.

This on demand service can be provided at

any time.



4/26

Cloud Computing Models


Can be broken into three basic designs:

Infastructure-as-a-Service(IaaS)

Companies buy infrastructure They own the software and purchase virtual

power to execute as needed

Similar to a utility company model as you pay forwhat you see.

Example: Amazon Services


5/26

Platform-as-a-Service(PaaS)

1. Provider provides a platform for company use2. Services provided include all phases of the SDLC

and can use APIs, website portals or gateway

software3. Buyers do need to look closely at specific solutions

4. This is because some providers do not allow

software created by their customers to be movedoff the platform

5. Example: GoogleApps



6/26

Software-as-a-Service(SaaS)

1. Designed to provide everything and simply rent

out the software to the user

2. Usually provided through some type of front end

or web portal

3. While the end user is free to use the service fromanywhere, the company pays a per user fee

4. Example: Salesforce.com



7/26



8/26


9/26


10/26

Contd. Benefits of Cloud Computing

Increased mobility(information access fromanywhere

There is also ability of the cloud computing to

free-up IT workers who may have beenoccupied performing updates, installingpatches, or providing application support

Gartner predicts that cloud computing willsurge to 150 billion dollars by 2013



11/26


12/26


13/26

Security Concerns of Cloud Computing

2. Who has access?

Access control is a key concern

Insider attacks are a huge risk A potential hacker is someone who has been

entrusted with approved access to the cloud

Companies considering using the cloud need to lookat who is managing their data and what types of

controls are applied to these individuals



14/26


15/26


16/26


5. What type of training does the provider offer their

employees?

People will always be the weakest link in security

Knowing how your provider trains their employees

is an important item to review



17/26


18/26


19/26


20/26


9. What happens if there is a security breach?

Though cloud computing service providers

promote their services as being unhackable, cloud

based services are an attractive target to the

hackers



21/26


22/26


23/26



24/26


25/26


26/26

Documents

10 security concerns related to cloud