Unit II
Security Design Principles for Cloud Computing
Comprehensive Data Protection
o Encryption: Use encryption methods for data at rest, in
transit, and in use to ensure that sensitive information is
protected from unauthorized access.
o Backup and Disaster Recovery: Regularly back up data, and
have a robust disaster recovery plan in place to ensure continuity
in case of data loss or a cyber-attack.
o Access Control: Implement Identity and Access Management
(IAM) policies, ensuring only authorized users and services
have access to sensitive data.
o Audit Trails: Maintain detailed logs of access and
activities to detect and investigate any unusual behavior.
End-to-End Access Control
Authentication and Authorization: Implement strong
authentication mechanisms (such as multi-factor authentication)
and fine-grained authorization policies to control access at all
levels.
Least Privilege: Ensure users, services, and applications have only
the minimum necessary permissions to perform their tasks.
Role-Based Access Control (RBAC): Use RBAC to assign access
based on the user's role, minimizing the risk of unauthorized
access.
Common Attack Vectors and Threats
Denial of Service (DoS) Attacks: Protect against volumetric attacks
and application-level attacks by using rate limiting, IP blocking, and
web application firewalls (WAF).
Man-in-the-Middle (MitM) Attacks: Ensure data integrity and
confidentiality using SSL/TLS encryption for communications.
Insider Threats: Implement strict monitoring, logging, and control
over access rights to mitigate risks from malicious insiders.
Phishing and Social Engineering: Educate users and provide secure
methods of communication to protect against social engineering
attacks.
Network and Storage Security
Virtual Private Cloud (VPC): Use VPCs to isolate resources and
create secure, private networks within the cloud.
Firewalls and Security Groups: Set up firewalls to protect against
unauthorized access and use security groups to control traffic within
the cloud environment.
Data Backup: Use secure backup strategies and ensure that
backup data is also encrypted and protected by strong access
control.
Data Integrity: Ensure that stored data is tamper-resistant and
validated regularly using hashing and checksum techniques.
Secure Isolation Strategies
Virtualization Strategies
Hypervisor Security: Protect the hypervisor (the software layer
that manages virtual machines) to prevent unauthorized access to
the virtual machine environment.
Resource Isolation: Ensure that virtual machines and containers
are securely isolated from one another, preventing lateral
movement of attacks.
Guest OS Security: Ensure that guest operating systems on virtual
machines are regularly updated and have security hardening
practices applied.
Inter-Tenant Network Segmentation Strategies
Network Segmentation: Use sub netting and VLANs (Virtual
Local Area Networks) to separate workloads and create
boundaries between tenants’ data and applications.
Firewalls: Implement firewalls to segment network traffic
and control access to specific cloud resources between
different tenants.
Network Monitoring: Continuously monitor inter-tenant
traffic and implement intrusion detection/prevention systems
(IDS/IPS) to detect any unauthorized access or malicious
behavior.
Data Protection Strategies
o Data Retention, Deletion, and Archiving Procedures for
Tenant Data
Retention Policy: Define clear policies on how long data
should be stored and when it should be deleted to comply
with legal and regulatory requirements.
Secure Deletion: Use secure data deletion techniques,
such as cryptographic erasure, to ensure that deleted data
cannot be recovered.
Archiving: Implement secure data archiving solutions to
retain important information for long-term storage, ensuring
it remains protected.
o Encryption
o Data Encryption: Encrypt sensitive data both at rest and in
transit using strong encryption algorithms (e.g., AES-256, RSA).
o Key Management: Use proper key management techniques to
protect encryption keys and ensure keys are rotated regularly.
o Data Redaction
o Data Masking: Apply data redaction or masking techniques
to hide sensitive data (such as personally identifiable
information) while preserving its usability in non-sensitive
contexts.
o Selective Redaction: Redact sensitive information based on
access rights, so only authorized personnel can view or access the
unreacted data.
o Tokenization
Substitution of Sensitive Data: Tokenization replaces sensitive
data (like credit card numbers) with non-sensitive tokens,
reducing the risk of data breaches.
Secure Token Management: Ensure tokenization processes
are secure and tokens are stored in protected
environments.
o Obfuscation
Data Obfuscation Techniques: Obfuscate sensitive data
to make it unreadable or nonsensical to unauthorized
parties, while retaining its usability in a secure context.
Dynamic Obfuscation: Continuously apply obfuscation when
the data is being processed, ensuring that attackers cannot
gain useful insights.
o Public Key Infrastructure (PKI) and Key Management
PKI: Use PKI to manage digital certificates and encryption
keys for secure communication and authentication
between cloud services.
Key Management Systems: Implement strong key
management policies for creating, distributing, and revoking
encryption keys to ensure that they are never exposed.