WiseClouds

Cloud Computing Security and Compliance

The Cloud Computing Security and Compliance course provides managers, architects and developers an overview of security in the cloud . Participants will be baselined on security terminology, security standards and security compliance currently available by the major providers and the impact to Cloud Computing consumers. In addition a sample of security threats identified by OWASP and current forums and research are reviewed.

Course Brochure

LEARN

Discussion of Basic Security Principles
Security Audit and Compliance Review
Understanding Cloud Computing Attack Vectors for SaaS, IaaS and PaaS
Security Review of Major Service Providers (Amazon, Google, Microsoft, Salesforce.com)

AGENDA

Cloud Computing Security Basics

Availability
Privacy
Authentication
Authorization
Comparison of traditional enterprise security practices and comparison with service providers.

Security Standards and Approaches

Transport Level Security
Message Level Security
Identity Management, Authentication, Authorization
Privacy
Availability Management
Security Patches

Security Auditing and Compliance Requirements

Statement on Auditing Standards (SAS70 Type II Audit)
ISO/SEC 27001:2005
Federal Information Security Management Act (FISMA)
Health Insurance Protection and Portability Act (HIPAA)
Payment Card Industry Data Security Standard (PCI DSS)

Cloud Computing Attack Vectors Sampling

Poisioned Machines / Bad Images
Cloud Cartography
Side-Channel Attacks
Cross Site Scripting
Injection Attacks
Denial Of Service
Broken Authentication / Session Management
Misconfiguration

Service Provider Security Review

Amazon AWS
Google App Engine
Microsoft Azure
Salesforce.com

Is This Course For You?

This course is provides an individual with a foundation in security terminology/knowledge and its application in the cloud. Understanding details of current auditing / accreditations are important in identifying security compliance and security capabilities by the service provider. A review of some of the top traditional and cloud specific security challenges is discussed to help technical managers, architects and developers prepare for cloud deployment challenges and risks.