Cloud Computing Security - Risks and Mitigation Strategies

Explore cloud computing security in this 53-minute lecture by Dr. James Walden. Delve into the emerging paradigm of cloud computing for large-scale web application deployment, examining its potential to reduce complexity and costs while introducing new risks. Understand why traditional security approaches like firewalls and network intrusion detection may be ineffective in cloud environments. Investigate key risks such as loss of governance, regulatory compliance challenges, expanded attack surfaces, and hypervisor vulnerabilities. Learn about mitigation strategies for these cloud-specific security concerns. Cover topics including cloud service architectures, deployment models, data loss prevention, virtualization security features, inter-VM attacks, and the complexities of maintaining security in scalable, transient cloud environments. Gain insights into public key cryptography, homomorphic encryption, and their applications in securing cloud data.

Intro
Topics
What is Cloud Computing?
Cloud Service Architectures as Layers
Cloud Service Models Abstraction Layers
Multi-Tenancy
Cloud Deployment Architectures
Data Loss
Downtimes
Phishing
Password Cracking
Botnets and Malware
Virtualization Security Features: Isolation
Virtualization Security Features: Snapshot
State Restore
Complexity
Hypervisor Security
Inter-VM Attacks
Scaling
Transience
Data Lifetime
Accountability
No Security Perimeter
Larger Attack Surface
New Side Channels
Lack of Auditability
Regulatory Compliance
Certifications
Data Security
Public Key Cryptography
An Analogy: Alice's Jewelry Store
Homomorphic Public-key Encryption
References