Cloud Computing Security, 2nd Edition

CHAPTER 31

Advanced Security Architecture for Cloud Computing

Albert Caballero

DigitalEra Group, LLC

Surfside, Florida

Contents

31.1 Introduction

31.2 Securing the Cloud

31.2.1 Cloud Security Best Practices

31.2.1.1 Identity and Access Management

31.2.1.2 Vulnerability and Configuration Analysis

31.2.1.3 Network and Infrastructure Security

31.2.1.4 Host and Endpoint Security

31.2.1.5 Data Protection and Encryption

31.2.1.6 Governance, Risk, and Compliance

31.2.1.6 Logging, Monitoring, Threat Detection, and Analytics

31.2.1.7 Application Security

31.2.2 Perceived Threat

31.2.3 The Real Risk

31.2.4 Challenges and Issues

31.3 Secure Architecture Design

31.3.1 Design Characteristics

31.3.2 Industry Standards and Compliance

31.3.3 Security Reference ...