CLOUD SECURITY OR: HOW I LEARNED TO STOP WORRYING AND LOVE THE CLOUD - PowerPoint PPT Presentation

Click to edit Master title style CLOUD SECURITY OR: HOW I LEARNED TO STOP WORRYING AND LOVE THE CLOUD Jakob I. Pagter (Alon Hazay) Alexandra Instituttet A/S �

About the Alexandra Institute Click to edit Master title style • Non-profit application oriented research institution – focus on IT • GTS – Godkendt Teknologisk Service Institut • 100+ employees generating Commercial R&D • Development • Consultancy • Researchers • Providers • Ideation • Users • Networks • Dissemination inspiration

Essential Characteristics of Cloud Click to edit Master title style Computing On-demand self-service • provision computing capabilities automatically without requiring human interaction Broad network access • Capabilities are available over the network promote use by heterogeneous thin or thick client Measured Service Resource usage can be monitored, controlled, and reported, providing transparency Rapid elasticity • Capabilities can be rapidly and elastically provisioned, automatically, to quickly scale out or rapidly scale in Resource pooling • A sense of location independence. customer has no control or knowledge over the location of the resources

Deployment Model Click to edit Master title style 4

Cloud Service Models - Click to edit Master title style

NIST Visual Model of Cloud Computing Click to edit Master title style Definition

Click to edit Master title style 7

Governance and compliance Click to edit Master title style • We have four datacenters in the US, two in Europe and two in Asia. Even though you choose to store your data in Europe instead of Worldwide, your data will be stored at least three times. Two times on your main location and one time at a secondary data center’ Statement MS Azure:

Click to edit Master title style

Amazon Outage Click to edit Master title style http://aws.amazon.com/message/65648/

Account or Service Hijacking Click to edit Master title style • Zeus botnet running an unauthorized command and control center on Amazon's EC2 cloud computing infrastructure.

Multi-Tenancy Click to edit Master title style Multi-Tenancy ¡ Separation ¡ • one program, need to • Solution that supports serve at the same time the Multi-Tenancy, capable of number of consumer creating separation organizations (Tenants) ¡ between the different Tenants ¡

Virtualization vulnerabilities by vendor Click to edit Master title style Low percentages for Oracle, IBM, and Microsoft • VMware: 80.9% • Oracle: 1.8% • RedHat: 6.9% • IBM: 1.1% • Citrix: 5.8% • Microsoft: 0.9%

Insecure Interfaces and APIs Click to edit Master title style Web service Web service man-in-middle redirection message attack ¡ alteration attack

Click to edit Master title style 15

Business pros (and cons!) Click to edit Master title style Fate- Indbygget sharing sikkerhed 2000 Stordrift Tilføjet $150.000 Location sikkerhed Samlet Armbrust et al.: Above The Clouds , 2011 sikkerhed Berkeley 2009 $1500 ? ? IaaS PaaS SaaS ? Omkostning Lokation Agilitet Virtualisering Hvem Selvbetjening • er på? Innovation Tredjeparter • hvor? • hvilke Compliance data? APIs Kompleksitet Innovation Availability Risikoprofil? Omkostning Innovation … ??!! År1 År2 År3 År4 År5 År6 År7 År8

Cloud Security Alliance Click to edit Master title style The CSA is a member-driven organization, chartered with promoting the use of best practices for providing security assurance within Cloud Computing.

Get certified! Click to edit Master title style alexandra.dk/ccsk

Get certified! Click to edit Master title style 19 Alexandra – Sikkerhed og Innovation i Skyen

Click to edit Master title style

A (proper) encrypted Dropbox Click to edit Master title style Data hidden to Dropbox Transparent integration

Shallow confidentiality Click to edit Master title style No real confidentiality web server.. Computation: decrypted! ?! Storage: encrypted Local computation

Deep confidentiality Click to edit Master title style web server.. Security Performance Computation: encrypted! Storage: encrypted

Case: energiauktion.dk (via partisia.com) Click to edit Master title style 100 90 80 70 2. Submit bids 1. Define Usage 60 auction 50 Base cost 40 30 SMC cost 20 (amortized) 10 0 Elasticity 0-2 2-4 6-8 10-12 14-16 18-20 22-24 2-3 4-6 8-10 12-14 16-18 20-22 3. Find => confidentiality! winner 4. Make the deal

Thx for you attention! Click to edit Master title style PS: Please remember to evalueate the presentations (incl. this one ;)