The Cloud Threat Landscape
The Cloud Threat Landscape
The Cloud Threat Landscape
o
o
o
o
i.
ii.
iii.
iv.
v.
vi.
vii.
viii.
ix.
x.
xi.
xii.
Abstract
Introduction
Cloud Security Architecture
The Cloud Threat landscape
Cloud Architecture
Deployment Models
Private cloud
Public cloud
Hybrid cloud
Others
Community cloud
Distributed cloud
Intercloud
Multicloud
Service Models
Essential characteristics
Cloud Security Concepts
Security Domains
14 Domain Being Revised for 4th version
Concerns
Virtualization
Provisioning
Cloud Storage.
Cloud Operation, Security, and Networking
Security Risks Seven Risks
Mapping the Cloud Model to Security Control and Compliance
Security Threats
Data Breaches
Weak Identity, Credential and Access Management
Insecure APIs
System and Application Vulnerabilities
Account Hijacking
Malicious Insiders
Advanced Persistent Threats (APTs)
Data Loss
Insufficient Due Diligence
Abuse and Nefarious Use of Cloud Services
Denial of Service
Shared Technology Issues
Countermeasures and Future challenges
Conclusion