5-Elephant_in_the_room-A

5-Elephant_in_the_room-A - THE ELEPHANT IN THE ROOM CLOUD...

Info icon This preview shows pages 1–4. Sign up to view the full content.

View Full Document Right Arrow Icon
Sponsored By: THE ELEPHANT IN THE ROOM CLOUD SECURITY AND WHAT VENDORS AND CUSTOMERS NEED TO DO TO STAY SECURE The Cloud is confusing… well it can be, and that’s where CloudU™ comes in. CloudU is a comprehensive Cloud Computing training and education curriculum developed by industry analyst Ben Kepes. Whether you read a single whitepaper, watch a dozen webinars, or go all in and earn the CloudU Certificate, you’ll learn a lot, gain new skills and boost your resume. Enroll in CloudU today at CloudU is a service mark/trademark of Rackspace US, Inc. in the United States and/or other countries
Image of page 1

Info icon This preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
Executive Summary One of the benefits of Cloud Computing that we have been articulating in this series of whitepapers is the benefit of abstracting responsibility for IT functions off to a third party. While this is indeed a benefit of Cloud Computing, it is important to realize that when it comes to security, customers still have a responsibility to ensure their data is secure. Cloud Computing security should be regarded as a partnership between the vendor and the customer with both parties having responsibility for different aspects of security. In this whitepaper we detail the different aspects of security that need to be managed to ensure overall security in the Cloud. Moreover, we contrast those aspects of security that vendors are typically responsible for to those for which customers have an ongoing responsibility. We contend that Cloud Computing is fundamentally more secure than traditional approaches but in order to ensure this security, some basic requirements must be met. Table of Contents Executive Summary 1 A Security Framework for the Cloud 2 What Vendors Should Do 4 Physical Data Center Security 4 Security of Host Machine Operating System 4 Control of the Hypervisor 5 Network Security 5 What Customers Should Do 7 Firewalls 7 Hardware Firewalls Software Firewalls Patches and Backups 8 Passwords 8 Security of the Virtual Machines 9 Controlling Access to Devices Connected to the Cloud 10 Ensuring the Security of Staff 11 Summary 12 About Diversity Analysis 13 About Rackspace 14
Image of page 2
The Elephant in the Room—Cloud Security and What Vendors and Customers Need To Do To Stay Secure © Diversity Limited, 2011 Non-commercial reuse with attribution permitted 2 A Security Framework for the Cloud The Cloud Security Alliance (CSA) 1 is a non-profit organization formed to promote the use of best practices for providing security assurance within Cloud Computing, and provide education on the uses of Cloud Computing to help secure all other forms of computing. Made up of subject matter experts from a variety of disciplines, and with chapters 2 all around the world, the CSA objectives are to: Promote a common level of understanding between the consumers and providers of Cloud Computing regarding the necessary security requirements and attestation of assurance.
Image of page 3

Info icon This preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
Image of page 4
This is the end of the preview. Sign up to access the rest of the document.

{[ snackBarMessage ]}

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern