An Overview of Cloud Security and Privacy includes about Cloud services delivery model, Impact of cloud computing on the governance structure of IT organizations, Companies are still afraid to use clouds, Taxonomy of Fear, Attacker Capability, Infrastructure Security, Data Security and Storage. | An Overview of Cloud Security and Privacy CS 590, Fall 2010 Presenter: YounSun Cho Sep. 9, 2010 What we are going to do today A high-level discussion of the fundamental challenges and issues of cloud computing security and privacy It is impossible to consider all issues today The goal is to give you a big picture rather than focus on a particular topic or a paper Note that some of these slides, especially part I, re-used/modified some slides in the Internet (References are in the last slides) 2 Part1: Introduction Why do you still hesitate to use cloud computing? Threat Model 3 Cloud services delivery model 4 While cloud-based software services are maturing, Cloud platform and infrastructure offering are still in their early stages ! Impact of cloud computing on the governance structure of IT organizations 5 5 If cloud computing is so great, why aren’t everyone doing it? The cloud acts as a big black box, nothing inside the cloud is visible to the clients Clients have no idea or . | An Overview of Cloud Security and Privacy CS 590, Fall 2010 Presenter: YounSun Cho Sep. 9, 2010 What we are going to do today A high-level discussion of the fundamental challenges and issues of cloud computing security and privacy It is impossible to consider all issues today The goal is to give you a big picture rather than focus on a particular topic or a paper Note that some of these slides, especially part I, re-used/modified some slides in the Internet (References are in the last slides) 2 Part1: Introduction Why do you still hesitate to use cloud computing? Threat Model 3 Cloud services delivery model 4 While cloud-based software services are maturing, Cloud platform and infrastructure offering are still in their early stages ! Impact of cloud computing on the governance structure of IT organizations 5 5 If cloud computing is so great, why aren’t everyone doing it? The cloud acts as a big black box, nothing inside the cloud is visible to the clients Clients have no idea or control over what happens inside a cloud Even if the cloud provider is honest, it can have malicious system admins who can tamper with the VMs and violate confidentiality and integrity Clouds are still subject to traditional data confidentiality, integrity, availability, and privacy issues, plus some additional attacks 6 Companies are still afraid to use clouds 7 [Chow09ccsw] Taxonomy of Fear Confidentiality Fear of loss of control over data Will the sensitive data stored on a cloud remain confidential? Will cloud compromises leak confidential client data Will the cloud provider itself be honest and won’t peek into the data? Integrity How do I know that the cloud provider is doing the computations correctly? How do I ensure that the cloud provider really stored my data without tampering with it? 8 Taxonomy of Fear (cont.) Availability Will critical systems go down at the client, if the provider is attacked in a Denial of Service attack? What happens if cloud provider goes out of .
