The goal of the Cloud Platform and Infrastructure Security domain is to provide you with knowledge regarding both the physical and the virtual components of the cloud infrastructure.
You will gain knowledge of risk-management analysis, including tools and techniques necessary for maintaining secure cloud infrastructure.
In addition to risk analysis, you will learn how to prepare and maintain business continuity and disaster recovery (BCDR) plans, including techniques and concepts for identifying critical systems and lost data recovery
After completing this domain, you will be able to do the following: ❑ Describe both the physical and the virtual infrastructure components as they pertain to a cloud environment
The cloud infrastructure consists of data centers and the hardware that runs in them, including compute, storage, and networking hardware; virtualization software; and a management layer
The abuse of cloud services extends beyond malicious insiders and potentially allows cyber criminals The ability to utilize such services for criminal gain. There are multiple ways in which cloud services can be used for malicious purposes. There is no question, that for the malicious actor their job is considerably easier if their intended victims […]
what is abuse of cloud services? Read More »
A Denial of Service (DOS) or its now more popular unruly child the DDoS attack is not a new phenomenon and has plagued information technology (IT) managers for many years. It refers to an attack that aims to overwhelm the victim with network traffic or consume resources (central processing unit, memory, for example) and subsequently
DoS attack in cloud computing Read More »
Cloud data protection Frameworks: Globally, a plethora of laws, regulations and other legal requirements for organizations and entities exist to protect the security and privacy of digital and other information assets. Organization for Economic Cooperation and Development—Privacy and Security Guidelines On September 9, 2013, the Organization for Economic Cooperation and Development (OECD) published a set
Cloud Computing Data Protection Frameworks Read More »
Identifying and involving the relevant stakeholders from the commencement of any cloud computing discussions are of utmost importance. Failure to do so can lead to segregation or a fractured approach to cloud decision making, as well as non-standardization across the organization about how cloud services are procured, reviewed, managed, and maintained. To objectively assess within
Stakeholders challenges in cloud computing Read More »
What is Cloud SLA (Cloud Service-Level Agreement)? Its similar to a contract signed between a customer and a CSP, the Cloud SLA forms the most crucial and fundamental component of how security and operations will be undertaken. The Cloud SLA should also capture requirements related to compliance, best practices, and general operational activities to satisfy
What is a Cloud SLA (Cloud Service-Level Agreement)? Read More »
Cloud Application Architecture It is important that we examine the mechanisms behind the scenes that make application security and software development for the cloud work, as well as the weaknesses and vulnerabilities associated with each. The readers need to understand how to evaluate and discover these for the customer. Application programming interfaces (APIs) are the
What is Cloud application development? Read More »
The organization also needs to protect Data Processing mechanism as well as Data Control in life-cycle phases other than Create. Industry standards and best practices require the creation, use, and enforcement of a host of data management policies and practices, including the areas of data retention, audit, and disposal. In this section Data Control in
What is data processing in cloud computing? Read More »
Cloud services management fall into three main groups: IaaS, PaaS, and SaaS. Each is discussed in the following sections. What does “IaaS” mean in cloud computing? According to “The NIST Definition of Cloud Computing,” in IaaS, “the capability provided to the consumer is to provision processing, storage, networks, and other fundamental computing resources where the
What does “Cloud Management services” mean? Read More »
Cloud Computing Functions and traditional computing and technology environments, several functions are essential for creating, designing, implementing, testing, auditing, and maintaining the relevant assets So for more understanding, we will look in this blog the Cloud Computing Functions. The same is true for cloud computing, with the following key roles representing a sample of the
What does “Cloud Computing Functions” mean? Read More »
Cloud identity and access management is about the people, processes, and procedures used to create, manage, and destroy identities of all kinds, Whether you are dealing with system administrators or plain users of cloud services, the creation and management of identities are key in maintaining secure operations. IAM systems consist of several components, as shown
Cloud Identity and Access Management Read More »
When we thinking about Cloud Computing the in our mind the question is arise What is data center in cloud technology and computing and how it build and works, So in this blog we are going to see What is the actual data center in cloud computing and technology. The cloud provider needs a datacenter
E-discovery is depending on whether an organization is employing a hybrid, public, or community cloud, there are issues that the organization has to understand. The extra dynamic is the presence of a third party the cloud service provider (CSP) so the organization must understand how laws and regulations apply to the cloud. In other words,
Why Cloud Computing Matters in e-discovery? Read More »
Managing i cloud is a bit complex task so many factors need to consider, The logical design of the i cloud Cloud Environments should include measures to limit remote access to only those authorized to access resources, provide the capability to monitor the i cloud Environments, and allow for the remediation of systems in the
Managing i cloud Infrastructure Read More »
Cloud communications between the provider, its customers, its Vendors and its suppliers is critical for any environment. When you add the cloud to the mix, communication becomes even more central as a success factor overall. What is The Five Ws and One H method? The need to identify the five Ws and the one H
What is cloud service provider communications? Read More »
Cloud Security Policies are crucial to implementing an effective data security strategy. They typically act as the connectors that hold many aspects of data security together across both technical and nontechnical components. The failure to implement and utilize policies in cloud-based (or non-cloud-based) environments would likely result in disparate parts or isolation of activities, effectively
Top 2 types of Cloud Security Policies Read More »
Distributed Computing Models and distributed information systems are becoming increasingly common in conjunction with and amplified by the adoption of cloud computing services. The globalization of companies, along with collaboration and outsourcing, continues to allow organizations and users to avail themselves of distributed services. The drivers for adopting such services are many but include increasing
What to Expect from computing Models? Read More »
Supply chain management is big concern when the organizations have invested heavily to protect their key assets, resources, and intellectual property in recent years, changes to these practices present challenges and complexities. With the supply chain adjusting to include CSPs, security truly is only as good as the weakest link. Of late, many sizable and
What is cloud supply chain management? Read More »
Risk Mitigation and risk reduction is the approach and desired outcome when undertaking risk management and associated activities should always be to reduce and mitigate risks. Mitigation of risks reduces the exposure to a risk or the likelihood of it occurring. Risk mitigation to cloud-based assessments or environments is most often obtained by implementing additional
What risk mitigation means? Read More »
Cloud security operations management there are many aspects and processes of operations that need to be managed, and they often relate to each other. Cloud security operations management include the following: Information security management Configuration management Change management Incident management Problem management Release and deployment management Service-level management Availability management Capacity management Business continuity management
What is cloud security operations? Read More »
cloud Computing Network Security controls was discussed extensively earlier in this blog. You need to be able to follow and implement best practices for all security controls. About cloud Computing Network Security , consider the following general guidelines: Defense in depth VLANs Access controls Secure protocol usage (that is, IPSec and TLS) IDS/IPS system deployments
What is Cloud Computing Network Security? Read More »
In partnership with the cloud security management professionals, you need to have a detailed understanding of the management operation of the cloud environment. As complex networked systems, clouds face the traditional computer and network security issues such as AIC. By imposing uniform management practices, clouds may be able to improve on some security updates and
What is cloud security management? Read More »
Host Configuration data in the cloud environment should be part of the backup plan. You should conduct routine tests and restore hosts as part of the disaster recovery plan (DRP) to validate the proper functioning of the backup system. This thought process is the same regardless of the vendor equipment being used to supply hosts
Backing Up and Restoring the Host Configuration Read More »
Performance monitoring is essential for the secure and reliable operation of a cloud environment. Data on the performance of the underlying components may provide early indications of hardware failure Traditionally, four key subsystems are recommended for monitoring in cloud environments: Network: Excessive dropped packets Disk: Full disk or slow reads and writes to the disks
How to monitoring cloud performance? Read More »
Patch management is a crucial task. All organizations must perform and Regularly patch OSs, middleware, and applications to guard against newly found vulnerabilities or to provide additional functionality. Patch management is the process of identifying, acquiring, installing, and verifying patches for products and systems. Patches correct security and functionality problems in software and firmware. From
How cloud patch management works? Read More »
Big like Google Cloud Physical Infrastructure is more powerful but doesn’t matter the blue print is same for Mid-to-large corporations and government entities, independent system vendors (ISVs), and service providers use cloud infrastructure to build private and public clouds and deliver cloud computing services. Virtualization provides the foundation for cloud computing, enabling rapid deployment of
Google Cloud Physical Infrastructure Read More »
Google Data center design, planning, and architecture have long formed an integral part of the information technology (IT) services for providers of computing services. Over time, these have typically evolved and grown in line with computing developments and enhanced capabilities. Google Data center continue to be refined, enhanced, and improved upon globally; however, they still
How does google cloud data center of works? Read More »
Securely configuring the virtualization management VM tools set is one of the most important steps when building a cloud environment. Compromising on the management VM tools may allow an attacker unlimited access to the VM, the host, and the enterprise network.Therefore, you must securely install and configure the management VM tools and then adequately monitor
How to install VM tools? Read More »
Cloud network security is top end technology today we all using in the Data Center. When it comes to securing the network configuration, there is a lot to be concerned with. Several technologies, protocols, and services are necessary to ensure a secure and reliable network is provided to the end-user of the cloud-based services. Transport
What is cloud network security? Read More »
The creation and implementation of a fully tested BCDR Planning that is ready for the failover event have a great structural resemblance to any other IT implementation plan as well as other disaster response plans. It is wise to consult or even adapt existing IT project BCDR Planning and risk management methodologies. In this section,
Business Continuity and Disaster Recovery (BCDR) Planning for IT Professionals Read More »
Best practices for cloud security are crucial to build the robust environment that prevent upcoming vulnerability/ Attacks. The actual settings for the hardware depending on the chosen operating system (OS) and virtualization platform. Servers Best practices for cloud security Implement the following best practice recommendations to secure host servers within cloud environments: Secure build: To
Best practices for cloud security Read More »
There are several characteristics of the cloud environment that you need to consider for your BCDR plan. They represent opportunities as well as challenges. First, though, it pays to have a more detailed look at some different scenarios in which you might want to consider BCDR. The following sections discuss these scenarios, BCDR planning factors,
What is BCDR Related to Cloud Environment? Read More »
The Secure software development life cycle in cloud computing is one of the most interesting concept. Although some view a single point-in-time vulnerability scan as an indicator of trustworthiness, much more important is a holistic evaluation of the people, processes, and technology that delivered the software and will continue to maintain it. Several software development
Secure software development life cycle in cloud computing Read More »
Cloud Threat Modeling is performed once an application design is created. The goal of Cloud Threat Modeling is to determine any weaknesses in the application and the potential ingress, egress, and actors involved before the weakness is introduced to production. It is the overall attack surface that is amplified by the cloud, and the threat
Cloud Threat Modeling Read More »
Cloud Security risks its an main concept whether run in the platform as a service (PaaS) or infrastructure as a service (IaaS) deployment model, applications running in a cloud environment may enjoy the same security controls surrounding them as applications that run in a traditional data center environment. This makes the need for an application
What are the security risks of the cloud computing? Read More »
OWASP Top 10 Vulnerabilities 2021 is nothing but an Applications run in the cloud should conform to best practice guidance and guidelines for the assessment and ongoing management of vulnerabilities. As mentioned earlier, the implementation of an application risk-management program addresses not only vulnerabilities but also all risks associated with applications. The most common software
OWASP top 10 vulnerabilities 2021 Read More »
Business Continuity and Disaster Recovery (BCDR) Strategy for IT Professionals We already discussed BCDR scenarios. Although the departing positions are different and each situation requires a tailored approach, there are several common components to these scenarios. A logical sequence to discuss these components is location, data replication, functionality replication, event anticipation, failover event, and return
Business Continuity and Disaster (BCDR) Recovery Strategy for IT Professionals Read More »
There are several categories of risks to consider in the context of BCDR. First, risks are threatening the assets and support infrastructure that the BCDR plan is protecting against. Second, some risks threaten the successful execution of a BCDR plan invocation; that is, what can go wrong if and when you need to failover? Does
What are the the BCDR Risks? Read More »
For to understand how to Secure Cloud! We need to focus on countermeasure strategies that span those levels. First, it is highly recommended that you implement multiple layers of defense against any risk. For example, in physical protection there should not be reliance on a single lock; there should be multiple layers of access control,
How to Secure Cloud Infrastructure? Read More »
Security risks for cloud computing is become increases from last decade, Because information technology (IT) is typically deployed to serve the interests of the organization, the goals, and management practices in that organization are an important source of guidance to cloud risk management. From the perspective of the enterprise, cloud computing represents outsourcing, and it
Security Risks For Cloud Computing Read More »
For you to understand disadvantages of cloud storage first we need to understand On a technical level, persistent mass storage in cloud computing typically consists of spinning hard disk drives or solid-state drives (SSDs). For reliability purposes, disk drives are often grouped to provide redundancy. The typical approach is the Redundant Array of Inexpensive Disks
What are the disadvantages of cloud storage? Read More »
The Hypervisor becomes important about the compute resources of a host is the ability to manage and allocate these resources effectively, either on a per-guest operating-system (OS) basis or on a per-host basis within a resource cluster. The use of reservations, limits, and shares offers the contextual ability for an administrator to allocate the compute
How Hypervisor Is Connected to cloud? Read More »
The cloud infrastructure consists of data centers and the hardware that runs in them, including compute, storage, and networking hardware; virtualization software; and a management layer The Physical Environment of the Cloud Infrastructure Just like traditional or onsite computing, cloud computing runs on real hardware that runs in real buildings. At the contemporary scale of
What is Cloud Infrastructure? Read More »
Event Sources have tools at your disposal that can help you filter the large number of events that take place continuously within the cloud infrastructure, allowing you to selectively focus on those that are most relevant and important. Event sources are monitored to provide the raw data on events that will be used to paint
Cloud Computing Event Sources Read More »
For Supporting Continuous Operations When applying security strategies, it is important to consider the whole picture. Technologies may have dependencies or cost implications, and the larger organizational goals should be considered . To support continuous operations, the following principles should be adopted as part of the security operations policies: Audit logging: Higher levels of assurance
Supporting Continuous Operations Read More »
Data-protection policies should include guidelines for the different data lifecycle phases In the cloud, The following three policies should receive proper adjustments and attention Data retention Data deletion Data archiving Data-Retention Policies A data-retention policy is an organization’s established protocol for keeping information for operational or regulatory compliance needs. The objectives of a data-retention policy
What is a data protection in cloud computing? Read More »
Data Privacy Acts, Privacy and data protection (P&DP) matters are often cited as a concern for cloud computing scenarios. The P&DP regulations affect not just those whose personal data is processed in the cloud (the data subjects) but also those (the cloud service customers) using cloud computing to process others’ data and indeed those providing
How many Data Privacy Acts in the world? Read More »
How to do data discovery ? Data discovery is a departure from traditional business intelligence in that it emphasizes interactive, visual analytics rather than static reporting. The goal of data discovery is to work with and enable people to use their intuition to find meaningful and important information in data. This process usually consists of
How to do data discovery? Read More »
DLP, also known as data leakage prevention or data loss protection, describes the controls put in place by an organization to ensure that certain types of data (structured and unstructured) remain under organizational controls, in line with policies, standards, and procedures. Controls to protect data form the foundation of organizational security and enable the organization
Data Masking is a process that need to provide confidentiality protection for data in cloud environments is a serious concern for organizations. The ability to use encryption is not always a realistic option for various reasons including performance, cost, and technical abilities. As a result, additional mechanisms need to be employed to ensure that data
How Data Masking done? Read More »
Cloud Security Standards slogan is “If it cannot be measured, it cannot be managed“. This is a statement that any auditor and security professional should abide by regardless of his focus. How can someone have confidence, awareness, and assurances that he and the CSP are taking the correct steps to ensure that data is secured
What are cloud security standards? Read More »
Cost Benefit Analysis of Cloud Computing is often identified as a key driver for the adoption of cloud computing. The challenge with decisions being made solely or exclusively on cost savings can come back to haunt the organization or entity that failed to take a risk-based view and factor in the relevant effects that may
Cost Benefit Analysis of Cloud Computing Read More »
Business Continuity and Disaster Recovery planning and management is the process by which risks and threats to the ongoing availability of services, business functions, and the organization are actively reviewed and managed at set intervals as part of the overall risk-management process. The goal is to keep the business operating and functioning in the event
Business Continuity and Disaster Recovery planning Read More »
Cloud Security Framework System and subsystem product certification is used to evaluate the security claims made for a system and its components. Although there have been several evaluation frameworks available for use over the years, such as the Trusted Computer System Evaluation Criteria (TCSEC) developed by the United States Department of Defense, the Common Criteria
Cloud Security Framework Read More »
Cloud Computing Security Considerations can be a subjective issue, viewed differently across different industries, companies, and users, based on their needs, desires, and requirements. Many of these actions and Cloud Computing Security Considerations appetites are strongly influenced by compliance and other regulatory requirements. Within IaaS, a key emphasis and focus must be placed on the
Cloud Computing Security Considerations Read More »
The Open Web Application Security Project (OWASP) has provided the 10 most critical web application security threats that should serve as a minimum level for application security assessments and testing. The open web application security project (OWASP) top 10 covers the following categories: Injection Injection flaws, such as SQL, OS, and LDAP injection occur when
Open Web Application Security Project Top 10 Read More »
The deployment of cloud solutions, by its nature, is often deemed a technology decision by Cloud Security Posture Management; however, it’s truly a business alignment decision. Although cloud computing no doubt enables technology to be delivered and utilized uniquely, potentially unleashing multiple benefits, the choice to deploy and consume cloud services should be a business
Cloud Security Posture Management Read More »
The concept of Identity management and access control in cloud computing covers most areas of technology, access control is merging and aligning with other combined activities. Some of these are automated using single sign-on capabilities; others operate in a standalone, segregated fashion. The combination of access control and effective management of those technologies, processes, and controls has
Identity management and access control in cloud computing Read More »
Cloud Computing elements is a very important concept we need to consider before moving to the cloud environment. Below, Anything as a service (XaaS): The growing diversity of services available over the Internet via cloud computing as opposed to being provided locally or on-premises. Apache CloudStack: An open-source cloud computing and IaaS platform developed to
What are Cloud Computing elements? Read More »
Cloud Attacks Surface Essentials is the process where Cloud data centers can be perceived as similar to DMZs in legacy enterprises. Because everything in the cloud can be accessed remotely, it can be considered exposed to the Internet, to a greater or lesser extent. Instead of the discrete perimeter of a private network, cloud configurations
Cloud Attacks surface Read More »
The vendor offering cloud services. The CSP will own the datacenter, employ the staff, own and manage the resources (hardware and software), monitor service provision and security, and provide administrative assistance for the customer and the customer’s data and processing needs. Cloud Computing Roles & Responsibilities Examples include Amazon Web Services (AWS), Rackspace, and Microsoft’s
Cloud Computing Roles & Responsibilities Read More »
Before moving to the main important cores of the cloud we need to understand what are the boundaries of cloud computing we need to understand some concepts. In legacy environments, we had bright-line definitions of the organization’s IT perimeter. Everything inside the perimeter belonging to the organization, including data, hardware, and risk; everything outside was
What are the cloud boundaries in IaaS, PaaS and SaaS? Read More »
Virtualization in cloud computing is the term creating a virtual (a logical vs. a physical) version of something, including virtual computer hardware platforms, operating systems, storage devices, and computer network resources. Computer hardware virtualization is a way of improving overall efficiency. It involves CPUs that provide support for virtualization in hardware and other hardware components that
What is Virtualization in cloud computing? Read More »
Private cloud security risks. A private cloud configuration is a legacy configuration of a data center, often with distributed computing and BYOD capabilities. The organization controls the entire infrastructure (hardware, software, facilities, administrative personnel, security controls, and so on). A private cloud configuration is a legacy configuration of a data center, often with distributed computing and
What are the security risks of cloud computing? Read More »
