7 - Cloud Security and Governance

Question 1

Security concerns

Answer 1

Loss of control
Lack of trust
Multitenancy

MTC

Question 2

Firewalling

(3 firewalls)

Answer 2

Main firewall
then border systems route to DMZ
DMZ contains app servers

3 firewalls

Question 3

NIDS

Answer 3

Network Intrusion Detection

Question 4

NIDS: Purpose

Answer 4

Monitors local traffic for irregular activity.

Eg port scans, ddos, exploits

Question 5

NIDS: Speed

Answer 5

Quite slow as must inspect every packet and payload

Question 6

Volumetric Attacks

Answer 6

Use massive traffic. Easy to generate

Impact: Blocks access

Question 7

Protocol Attacks

Answer 7

Exploit weaknesses in L3 and L4 protocols

Impact: All processing capacity consumed

Question 8

Application Attacks

Answer 8

Exploit L7 weaknesss. Sophisticated and challenging to identify

Impact: Exhaust resources by monopolising processes and transactions

Question 9

DDoS scrubbing

Answer 9

Traffic goes to high bandwidth scrubber before legitimate traffic is allowed back

Expensive

Question 10

HIDS

Answer 10

Host Intrusion Detection System

Question 11

HIDS: Purpose

Answer 11

Monitors server state for unusal activity

Question 12

Data segmentation

Answer 12

Separating data by sensitivity. High sensitivity data would require full system breach

Question 13

Responding to attacks

Answer 13

Cut off intruder
Identify atack vector
Wipe server and start over with patch
Launch server again

Question 14

Threat model

Answer 14

Helps in analysing a security problem, design mitigation and solutions.

Identify threats
Rank
Choose strategies
Build solutions

Question 15

Attacker model: Questions to consider

Answer 15

insider vs outsider?
single vs collaborator?

What motivates them?

Question 16

Security Governance

Answer 16

The act of defining, monitoring and auditing rules, guidelines, policies and processes about security.

Question 17

Security issues with cloud computing

Answer 17

No direct control over hardware and thus data
Files might not be deleted
Machine could be compromised without knowledge
In public cloud cannot audit physical machines

Question 18

Security benefits of cloud computing

Answer 18

Servers held in a secure location - intrusion difficult
always up to date
Dedicated security teams & DDOS protections