CODE: OEC-CS-702(II)
SUBJECT NAME: CLOUD COMPUTING
NO OF CREDITS: 3
[Link] 7th SEMESTER SESSIONAL: 25
L TP THEORY EXAM: 75
3 0 0 TOTAL : 100
Course objectives: The student will learn how to apply
1. Trust-based security model to real-world security problems.
2. An overview of the concepts, processes, and best practices needed to successfully secure
information within Cloud infrastructures.
3. Students will learn the basic Cloud types and delivery models and develop an
understanding of the risk and compliance responsibilities and Challenges for each
Cloud type and service delivery model.
MODULE-1: INTRODUCTION TO CLOUD COMPUTING
Online Social Networks and Applications, Cloud introduction and overview, Different clouds,
Risks, Novel applications of cloud computing .
MODULE-2: CLOUD COMPUTING ARCHITECTURE
Requirements, Introduction Cloud computing architecture, On Demand Computing
Virtualization at the infrastructure level, Security in Cloud computing environments, CPU
Virtualization, A discussion on Hypervisors Storage Virtualization Cloud Computing Defined,
The SPI Framework for Cloud Computing, The Traditional Software Model, The Cloud Services
Delivery Model Cloud Deployment Models Key Drivers to Adopting the Cloud, The Impact of
Cloud Computing on Users, Governance in the Cloud, Barriers to Cloud Computing Adoption in
the Enterprise .
MODULE-3: SECURITY ISSUES IN CLOUD COMPUTING
Infrastructure Security, Infrastructure Security: The Network Level, The Host Level, The
Application Level, Data Security and Storage, Aspects of Data Security, Data Security
Mitigation Provider Data and Its Security Identity and Access Management Trust Boundaries
and IAM, IAM Challenges, Relevant IAM Standards and Protocols for Cloud Services, IAM
Practices in the Cloud, Cloud Authorization Management
MODULE-4: SECURITY MANAGEMENT IN THE CLOUD
Security Management Standards, Security Management in the Cloud, Availability Management:
SaaS, PaaS, IaaS Privacy Issues Privacy Issues, Data Life Cycle, Key Privacy Concerns in the
Cloud, Protecting Privacy, Changes to Privacy Risk Management and Compliance in Relation to
Cloud Computing, Legal and Regulatory Implications, U.S. Laws and Regulations, International
Laws and Regulations
MODULE-5: AUDIT AND COMPLIANCE
Internal Policy Compliance, Governance, Risk, and Compliance (GRC), Regulatory/External
Compliance, Cloud Security Alliance, Auditing the Cloud for Compliance, Security-as-a-Cloud.
MODULE-6: DATA INTENSIVE COMPUTING
Map-Reduce Programming Characterizing Data-Intensive Computations, Technologies for Data-
Intensive Computing, Storage Systems, Programming Platforms, MapReduce Programming,
MapReduce Programming Model, Example Application
Course Outcomes:
After completion of course, students would be able to:
1. Identify security aspects of each cloud model
2. Develop a risk-management strategy for moving to the Cloud
3. Implement a public cloud instance using a public cloud service provider
REFERENCES:
1. Gautam Shroff, “Enterprise Cloud Computing Technology Architecture Applications”,
Cambridge University Press; 1 edition, [ISBN: 978-0521137355], 2010.
2. Kai Hwang, Geoffrey C. Fox, Jack J. Dongarra, “Distributed and Cloud Computing:
From parallel processing to IOT” Morgan Kaufmann Publishers; 1 edition [ISBN: 978-0-
12-385880], 2012.