book

Practical Cloud Security, 2nd Edition

by Chris Dotson

October 2023

Intermediate to advanced

230 pages

6h 47m

English

O'Reilly Media, Inc.

Book available

Read now

Unlock full access

Includes

Includes Quizzes

Who Should Read This BookNavigating This BookWhat’s New in the Second EditionConventions Used in This BookO’Reilly Online Learning PlatformHow to Contact UsAcknowledgments
Least PrivilegeDefense in DepthZero TrustThreat Actors, Diagrams, and Trust BoundariesCloud Service Delivery ModelsThe Cloud Shared Responsibility ModelRisk ManagementConclusionExercises
Data Identification and ClassificationExample Data Classification LevelsRelevant Industry or Regulatory RequirementsData Asset Management in the CloudTagging Cloud ResourcesProtecting Data in the CloudTokenizationEncryptionConclusionExercises
Differences from Traditional ITTypes of Cloud AssetsCompute AssetsStorage AssetsNetwork AssetsAsset Management PipelineProcurement LeaksProcessing LeaksTooling LeaksFindings LeaksTagging Cloud AssetsConclusionExercises
Differences from Traditional ITLife Cycle for Identity and AccessRequestApproveCreate, Delete, Grant, or RevokeAuthenticationCloud IAM IdentitiesBusiness-to-Consumer and Business-to-EmployeeMulti-Factor AuthenticationPasswords, Passphrases, and API KeysShared IDsFederated IdentitySingle Sign-OnInstance Metadata and Identity DocumentsSecrets ManagementAuthorizationCentralized AuthorizationRolesRevalidatePutting It All Together in the Sample ApplicationConclusionExercises
Differences from Traditional ITVulnerable AreasData AccessApplicationMiddlewareOperating SystemNetworkVirtualized InfrastructurePhysical InfrastructureFinding and Fixing VulnerabilitiesNetwork Vulnerability ScannersAgentless Scanners and Configuration Management SystemsAgent-Based Scanners and Configuration Management SystemsCloud Workload Protection PlatformsContainer ScannersDynamic Application Scanners (DAST)Static Application Scanners (SAST)Software Composition Analysis Tools (SCA)Interactive Application Scanners (IAST)Runtime Application Self-Protection Scanners (RASP)Manual Code ReviewsPenetration TestsUser ReportsExample Tools for Vulnerability and Configuration ManagementRisk Management ProcessesVulnerability Management MetricsTool CoverageMean Time to RemediateSystems/Applications with Open VulnerabilitiesPercentage of False PositivesPercentage of False NegativesVulnerability Recurrence RateChange ManagementPutting It All Together in the Sample ApplicationConclusionExercises
Differences from Traditional ITConcepts and DefinitionsZero Trust NetworkingAllowlists and DenylistsDMZsProxiesSoftware-Defined NetworkingNetwork Functions VirtualizationOverlay Networks and EncapsulationVirtual Private CloudsNetwork Address TranslationIPv6Network Defense in Action in the Sample ApplicationEncryption in MotionFirewalls and Network SegmentationAllowing Administrative AccessNetwork Defense ToolsEgress FilteringData Loss PreventionConclusionExercises
Differences from Traditional ITWhat to WatchPrivileged User AccessLogs from Defensive ToolingCloud Service Logs and MetricsOperating System Logs and MetricsMiddleware LogsSecrets ServerYour ApplicationHow to WatchAggregation and RetentionParsing LogsSearching and CorrelationAlerting and Automated ResponseSecurity Information and Event ManagersThreat HuntingPreparing for an IncidentTeamPlansToolsResponding to an IncidentCyber Kill Chains and MITRE ATT&CKThe OODA LoopCloud ForensicsBlocking Unauthorized AccessStopping Data Exfiltration and Command and ControlRecoveryRedeploying IT SystemsNotificationsLessons LearnedExample MetricsExample Tools for Detection, Response, and RecoveryDetection and Response in a Sample ApplicationMonitoring the Protective SystemsMonitoring the ApplicationMonitoring the AdministratorsUnderstanding the Auditing InfrastructureConclusionExercises
Chapter 1Chapter 2Chapter 3Chapter 4Chapter 5Chapter 6Chapter 7

Content preview from Practical Cloud Security, 2nd Edition

About the Author

Chris Dotson is an IBM Distinguished Engineer and an executive security architect in the IBM CIO organization. He has 11 professional certifications, including the Open Group Distinguished IT Architect certification, and over 25 years of experience in the IT industry. Chris has been featured as a cloud innovator on the IBM home page several times; his focus areas include cloud infrastructure and security, identity and access management, networking infrastructure and security, servers, storage, and bad puns.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Start your free trial

Publisher Resources

ISBN: 9781098148164Errata Page

Practical Cloud Security, 2nd Edition

by Chris Dotson

About the Author

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

You might also like