Cloud Computing and Its Security

8/7/2019 Cloud Computing and Its Security

1/21

By : Aman Mahajan

Yashraj JoshiArpit Joshi


2/21

What is Cloud Computing?y Cloud Computing is simply a web application that can

be accessed by end users through the various devices

y The term CLOUD represents the abstraction ofservices and resources

y Cloud computing provides unlimited infrastructure to

store and execute customer data and program.


3/21


4/21

5 key Cloud Characteristics

yOn-demand self-service

y Ubiquitous network access

y Instant s/w updates

y Reduced H/w Equipments

y Pay per use


5/21


6/21

4 cloud Deployment modely Private cloud

enterprise owned or leased

y Community cloudshared infrastructure for specific community

y Public cloud

Sold to the public, mega-scale infrastructure

y Hybrid cloud

composition of two or more clouds


7/21


8/21

Security a major Concerny Security concerns arising because both customer data

and program are residing in Provider Premises.

y Security is always a major concern in Open System

ArchitecturesCustomer

Data

CustomerCode

Provider Premises

Customer


9/21

Security Issues In Cloud Computingy Multi-tenancy

- The service hosting processes and the exchanged data are executed

and managed in shared environmentsy Data privacy

- data is being hosted in someone else's data centre

y shared and virtualized resources

- The service infrastructure to be shared among multipletenants


10/21

Security Issues ( contd..)y Heterogeneity

-services may be implemented in a cloud hosting platform

y Internet Transit-Distributed communication are mostly transmitted over

public internet protocols

y Lack of standards and Control

-Standard based data exchange is often supported but mgmtand standard control are not standardized


11/21


12/21

Hybrid Cloud Securityy Key Issue-How to provide secure, single sign-on access

to the cloud that is deployed outside of the

organization's own network environment and securitydomain.

y Traditional Practices:-

y replicating and caching identity directories in different

environments across which we want to enable cross-domain interoperability.

y establish a VPN connection with the cloud provider.


13/21

Inter-Organization Service

Composition Securityy Most implementations today use highly specialized

connections(such as FTP, VPNs, dedicated circuits,

etc.)y These point-to-point models can be brittle and suffer

from classic one-off syndrome.

yAddressing these issues:-

y Use of generic or system accounts shared betweenservices and/or individual users.


14/21

External Identity Providersy Externalizing identity management systems enables

organizations to reuse already provided systems

instead of running their own.y Online digital identity providers, such as cloud based

authentication services(Windows Live ID, GoogleAccount, Yahoo ID, etc.) can be used with various

consumer-facing architecture.


15/21

Major Service Providers of cloud

computing


16/21

Amazon EC2y Amazon Elastic Compute Cloud

web service interface that provides resizable computing

capacity in a cloud

designed to make web-scale computing easier fordevelopers

reduces the time required to obtain and boot new serverspace from weeks to minutes

allows developers to pay only for capacity that theyactually use


17/21

y Azure Internet-scale cloud computing and services platform

hosted in Microsoft data centers

Provides a range of functionality to build applications

that span from consumer web to enterprise scenarios Designed to help developers quickly and easily create,

deploy, manage, and distribute web services andapplications on the internet.


18/21


19/21

Google 101

Network made up of millions of cheap servers, that

would store staggering amounts of data, includingnumerous copies of the world wide web

Makes search faster, helping ferret out answers tobillions of queries in a fraction of a second

y Google has invested more than $2 billion a year in data

centers for cloud computing.y By far the leader in the technology


20/21

Conclusiony Cloud computing provides a super computing power

It is truly a revolutionary concept for many business

because of technology ease of adoption, significantlylower cost ,and greater work flow efficiency , it is nodoubt that it will gain widespread popularity goingforward

Now it is smarter to rent than to buy


21/21

Cloud Computing and Its Security

Documents

Transcript of Cloud Computing and Its Security