Module 4

1. Summarize Cloud Data Encryption and Challenges

in Data Encryption
Cloud Data Encryption
Cloud data encryption is a security technique used to convert readable data (plaintext) into unreadable form
(ciphertext) using encryption algorithms. Only authorized users with a decryption key can access the original data.

Encryption protects:

• Data stored in cloud servers (Data at Rest)

• Data moving through networks (Data in Transit)
• Data being processed (Data in Use)

Common encryption algorithms:

• AES (Advanced Encryption Standard)

• RSA
• DES

Types of Encryption in Cloud

Type Meaning
Data at Rest Encrypting stored files/databases
Data in Transit Encrypting data during transfer using SSL/TLS
End-to-End Encryption Data encrypted from sender to receiver

Challenges in Data Encryption

1. Key Management

Managing encryption keys securely is difficult.

• Loss of keys → data becomes inaccessible

• Stolen keys → attackers access data

2. Performance Overhead

Encryption and decryption consume CPU and memory resources, reducing system performance.

3. Multi-Tenant Environment

Many users share the same cloud infrastructure, increasing security risks.

4. Data Availability

Encrypted data must still remain accessible to authorized users without delay.
5. Compliance and Regulations

Cloud providers must follow legal regulations like GDPR and HIPAA.

6. Insider Threats

Cloud administrators may misuse access privileges.

7. Secure Data Sharing

Sharing encrypted data among multiple users is complex.

Conclusion
Cloud data encryption provides confidentiality and security for cloud data. However, issues like key management,
performance reduction, and compliance create major challenges.

2. Define Privacy Impact Assessment (PIA). List the

Key Components and Purpose in Cloud Environment
Definition
Privacy Impact Assessment (PIA) is a process used to identify, analyze, and reduce privacy risks related to personal
data in a cloud system.

It ensures that user information is collected, stored, and processed securely.

Purpose of PIA in Cloud Environment

1. Protect User Privacy

Ensures sensitive information is handled securely.

2. Identify Privacy Risks

Detects possible threats before deployment.

3. Ensure Legal Compliance

Helps organizations follow privacy laws and regulations.

4. Improve Trust

Users gain confidence that their data is protected.

5. Reduce Data Misuse

Prevents unauthorized access and leakage.

Key Components of PIA
Component Description
Data Collection Identifies what data is collected
Data Storage Explains where and how data is stored
Risk Assessment Finds privacy threats
Access Control Defines who can access data
Security Measures Encryption, authentication, firewalls
Compliance Check Ensures legal requirements are satisfied
Mitigation Plan Methods to reduce identified risks

Conclusion
PIA is an important process for maintaining privacy and compliance in cloud computing environments.

3. Define Cloud Security. What are the Top 5 Security

Concerns Faced by Cloud Security?
Definition
Cloud security is a set of technologies, policies, and controls used to protect cloud systems, applications, and data
from cyber threats.

It ensures:

• Confidentiality
• Integrity
• Availability

Top 5 Security Concerns in Cloud Security

1. Data Breaches
Unauthorized users may access confidential cloud data.

Effects

• Financial loss
• Reputation damage
• Data theft

2. Insecure APIs
Cloud services communicate using APIs. Weak APIs can allow attackers to enter systems.

Solution

• Strong authentication
• API encryption

3. Account Hijacking
Hackers may steal usernames and passwords.

Causes

• Weak passwords
• Phishing attacks

4. Insider Threats
Employees or administrators may misuse their access privileges.

Example

An employee copying sensitive customer data.

5. Denial of Service (DoS) Attacks

Attackers overload cloud servers, making services unavailable.

Result

• Service interruption
• Reduced availability

Conclusion
Cloud security protects cloud resources, but organizations must handle risks like data breaches, API attacks, and
insider threats carefully.

4. Discuss Anomaly Detection Techniques in Cloud

Definition
Anomaly detection identifies unusual activities or behaviors in cloud systems that may indicate attacks or failures.
Techniques of Anomaly Detection
1. Statistical Techniques
Uses mathematical models to detect abnormal behavior.

Example

If network traffic suddenly increases abnormally, it is flagged.

2. Machine Learning Techniques

Uses AI algorithms to learn normal behavior patterns.

Types

• Supervised learning
• Unsupervised learning

Advantage

High accuracy in detecting unknown attacks.

3. Rule-Based Detection
Predefined rules identify suspicious behavior.

Example

• Multiple failed login attempts

4. Clustering Techniques
Groups similar activities together and identifies outliers.

Example

Users behaving differently from normal groups are detected.

5. Neural Networks
Uses deep learning models for advanced threat detection.
Advantages
• Detects cyber attacks early
• Improves cloud security
• Reduces system failures

Disadvantages
• High computational cost
• False alarms may occur

Conclusion
Anomaly detection helps maintain secure and reliable cloud services by identifying unusual activities quickly.

5. Explain Access Control and Identity Access

Management
Access Control
Definition
Access control is a security method that restricts unauthorized users from accessing resources.

It determines:

• Who can access

• What they can access
• What actions they can perform

Types of Access Control

Type Description
DAC Owner decides access permissions
MAC Access based on security policies
RBAC Access based on user roles

Identity Access Management (IAM)

Definition
IAM is a framework used to manage digital identities and user permissions in cloud systems.
Functions of IAM
1. Authentication

Verifies user identity using:

• Passwords
• OTP
• Biometrics

2. Authorization

Determines what resources users can access.

3. User Management

Creates and manages user accounts.

4. Single Sign-On (SSO)

Allows users to access multiple services with one login.

5. Multi-Factor Authentication (MFA)

Adds extra security layers.

Benefits of IAM
• Improved security
• Reduced unauthorized access
• Better user management
• Easier auditing

Conclusion
Access control and IAM are essential for protecting cloud resources and ensuring only authorized users access
sensitive data.

Module 5

6. Compare and Contrast Cloud and Grid Computing

 Feature Cloud Computing Grid Computing
Definition Provides services over internet Combines multiple computers to solve tasks
Resource Ownership Managed by cloud provider Resources belong to different organizations
Scalability Highly scalable Limited scalability
Cost Pay-as-you-use Usually shared resources
Virtualization Widely used Less commonly used
Focus Service delivery High-performance computing
Examples AWS, Azure, Google Cloud Scientific research grids

Similarities
• Both use distributed systems
• Both share resources
• Both support parallel processing

Conclusion
Cloud computing focuses on service delivery and scalability, while grid computing mainly focuses on solving large
computational problems.

7. What are the Various System Issues for Running a

Typical Parallel Program in Either Parallel or
Distributed Manner?
Introduction
Parallel and distributed systems execute multiple tasks simultaneously for faster computation.

System Issues
1. Communication Overhead
Processors need to exchange information frequently.

Problem

Communication delays reduce performance.

2. Synchronization
Processes must coordinate properly.
Issue

Improper synchronization causes deadlocks.

3. Load Balancing
Work should be distributed equally.

Problem

Uneven distribution causes some processors to remain idle.

4. Fault Tolerance
System should continue working even if some nodes fail.

5. Scalability
System performance should improve when more processors are added.

6. Resource Sharing
Multiple processes compete for CPU, memory, and storage.

7. Security
Distributed systems are vulnerable to cyber attacks and unauthorized access.

Conclusion
Efficient communication, synchronization, load balancing, and fault tolerance are necessary for successful execution
of parallel programs.

8. With a Neat Diagram Explain the Data Flow in

Running a MapReduce Job at Various Task Trackers
Using Hadoop Library
Introduction
Hadoop MapReduce processes large datasets using distributed computing.

Main Components:

• JobTracker
• TaskTracker
• HDFS

Data Flow in MapReduce

Client
|
v
JobTracker
/ | \
/ | \
v v v
TaskTracker TaskTracker TaskTracker
(Map) (Map) (Reduce)
| | |
v v v
HDFS ------ Shuffle ------ Output

Working Steps
Step 1: Client Submits Job
User submits MapReduce job to JobTracker.

Step 2: Input Splitting

Input data stored in HDFS is divided into blocks.

Step 3: Map Phase

TaskTrackers execute map tasks on data blocks.

Output

Key-value pairs generated.

Step 4: Shuffle and Sort

Intermediate data is transferred and sorted.
Step 5: Reduce Phase
Reducer combines data and produces final output.

Step 6: Output Storage

Final result stored in HDFS.

Advantages
• Fast processing
• Scalability
• Fault tolerance

Conclusion
MapReduce efficiently processes large datasets by dividing work among multiple task trackers.

9. Discuss Programming the Google App Engine

Introduction
Google App Engine is a Platform as a Service (PaaS) used to build and host web applications on Google
infrastructure.

Features
• Automatic scaling
• Load balancing
• Built-in security
• Supports Python, Java, Go, PHP

Steps in Programming Google App Engine

1. Create Application
Create a project using Google Cloud Console.
2. Write Application Code
Develop web applications using supported languages.

Example:

from flask import Flask

app = Flask(__name__)

@[Link]('/')
def hello():
return "Hello Cloud"

3. Configure [Link]
Defines runtime environment.

Example:

runtime: python39

4. Deploy Application
Use command:

gcloud app deploy

5. Access Application
Application runs on Google servers.

Advantages
• Easy deployment
• High scalability
• Reduced infrastructure management

Disadvantages
• Vendor lock-in
• Limited control over infrastructure

Conclusion
Google App Engine simplifies cloud application development by handling scaling and infrastructure automatically.
10. List and Justify the Best Practices for Cloud
Software Development
Best Practices
1. Design for Scalability
Applications should handle increasing users and workload.

Benefit

Improves performance during heavy traffic.

2. Use Secure Coding Practices

Avoid vulnerabilities like SQL injection.

Benefit

Improves application security.

3. Implement Data Encryption

Encrypt sensitive information.

Benefit

Protects confidentiality.

4. Use Microservices Architecture

Develop applications as independent services.

Benefit

Easy maintenance and deployment.

5. Continuous Integration and Deployment (CI/CD)

Automate testing and deployment.

Benefit
Faster and reliable software delivery.

6. Backup and Disaster Recovery

Maintain regular backups.

Benefit

Prevents data loss.

7. Monitor Application Performance

Use monitoring tools to track performance.

Benefit

Quick detection of failures.

8. Identity and Access Management

Apply proper authentication and authorization.

Benefit

Prevents unauthorized access.

Conclusion
Following best practices in cloud software development improves security, scalability, reliability, and overall
application performance.

MODULE 3

1. Describe Cloud Deployment Models and Cloud

Service Models with Diagram
Cloud Deployment Models
Cloud deployment models define how cloud services are deployed and accessed.

Types of Cloud Deployment Models

Model Description
Public Cloud Services are available to the public through internet
Private Cloud Cloud infrastructure used only by one organization
Hybrid Cloud Combination of public and private cloud
Community Cloud Shared by organizations with common requirements

1. Public Cloud
• Owned by third-party providers
• Accessible through internet
• Cost effective

Examples

• Amazon Web Services

• Google Cloud

Advantages

• Low cost
• High scalability

Disadvantages

• Less control
• Security concerns

2. Private Cloud
• Dedicated to one organization
• More secure and controlled

Advantages

• Better security
• High customization

Disadvantages

• Expensive
3. Hybrid Cloud
• Combines private and public cloud

Advantages

• Flexibility
• Better resource utilization

Disadvantages

• Complex management

4. Community Cloud
• Shared among similar organizations

Example

Hospitals sharing healthcare cloud systems.

Diagram of Deployment Models

Cloud Deployment Models

---------------------------------------
| | | |
Public Private Hybrid Community

Cloud Service Models

Cloud service models define the type of services provided to users.

Types of Service Models

Model Description
IaaS Infrastructure as a Service
PaaS Platform as a Service
SaaS Software as a Service

1. IaaS (Infrastructure as a Service)

Provides:

• Virtual machines
• Storage
• Networking

Example

Amazon Web Services EC2

Advantages

• Full control over infrastructure

• Flexible

2. PaaS (Platform as a Service)

Provides:

• Development platform
• Runtime environment

Example

Google App Engine

Advantages

• Easy application development

• No infrastructure management

3. SaaS (Software as a Service)

Provides ready-to-use applications through internet.

Examples

• Gmail
• Microsoft Office 365

Advantages

• Easy access
• No installation required

Diagram of Service Models

 Cloud Service Models

-------------------------
| | |
SaaS PaaS IaaS

Conclusion
Cloud deployment models determine cloud accessibility, while service models define services provided to
users.

2. Describe the Architecture Design of Compute

Clouds with Diagram
Introduction
Compute cloud architecture refers to the structure used to provide computing resources over the internet.

It includes:

• Clients
• Data centers
• Distributed servers
• Virtualization

Components of Compute Cloud Architecture

1. Front End
The user side of cloud computing.

Includes:

• Web browsers
• Client devices
• Mobile apps

2. Back End
Cloud provider side.

Includes:
 • Servers
• Storage
• Databases
• Virtual machines

3. Middleware
Acts as bridge between front end and back end.

Functions:

• Resource management
• Communication

4. Virtualization Layer
Creates virtual machines from physical hardware.

Benefits

• Resource sharing
• Scalability

5. Network
Connects cloud components using internet.

Diagram of Compute Cloud Architecture

Users / Clients
|
Internet
|
--------------------------------
| |
Front End Back End
(Browser) (Servers, Storage)
|
Virtualization
|
Data Centers

Working
1. User sends request through browser.
 2. Request reaches cloud server through internet.
3. Virtualization allocates resources.
4. Data processed in data centers.
5. Output returned to user.

Advantages
• Scalability
• Resource sharing
• Cost reduction
• High availability

Conclusion
Compute cloud architecture efficiently delivers computing services using virtualization and distributed
infrastructure.

3. Compare the Public Cloud Platforms Google

App Engine, AWS and Microsoft Azure
Feature Google App Engine AWS Microsoft Azure
Provider Google Amazon Microsoft
Type PaaS IaaS + PaaS IaaS + PaaS
Launch Year 2008 2006 2010
Main Strength Application hosting Large service collection Enterprise integration
Scalability Automatic Highly scalable Highly scalable
Supported Languages Python, Java, Go Multiple languages .NET, Java, Python
Pricing Pay-as-you-use Pay-as-you-use Pay-as-you-use
Storage Service Google Cloud Storage Amazon S3 Azure Blob Storage
Best For Web applications Large-scale cloud services Enterprise applications

Google App Engine

Advantages
• Easy deployment
• Automatic scaling
• Good for developers

Disadvantages
 • Less infrastructure control

AWS
Advantages
• Largest cloud platform
• Many services available
• High flexibility

Disadvantages
• Complex for beginners

Microsoft Azure
Advantages
• Strong Windows integration
• Good enterprise support

Disadvantages
• Cost management can be difficult

Conclusion
• Google App Engine is best for application development.
• AWS is best for scalability and large services.
• Azure is best for enterprise and Microsoft-based environments.