Chapter 6 Flashcards
NIST
National Institute of Standards and Technology
created Three service models
- Note like the ISO only the acronym makes sense
NIST Service Models
SaaS - Software as a Service
PaaS - Platform as a Service
IaaS - Infrastructure as a Service
Private Cloud
The cloud infrastructure is provisioned for exclusive use by a single organization comprising multiple consumers. It may be owned, managed, and operated by the organization, a 3rd party, or some combination of them, and may exist on or off premises
Public Cloud
The cloud infrastructure is provisioned for open use by the general public. It may be owned, managed, and operated by the business, academic, or government organization, or some combination of them. It exists on the premises of the cloud provider
Community Cloud
The cloud infrastructure is provisioned for exclusive use by a specific community of consumers from organizations that have shared goals. It may be owned, managed, or operated by one or more of the organizations in community, a third party, or some combination of them, and it may exist on or off the premesis
Hybrid Cloud
The cloud infrastructure is a combination of two or more distinct cloud infrastructures that remain unique entities, but are bound together by standardized or proprietary technology that enables data and application portability
Two methods of virtualization implimentation
Type I Hypervisor Model
- Aka Bare Metal, is independant of the operating system and boots before the OS
Type II Hypervisor Model
- AKA Hosted is dependent on the operating system and boots within it (like we did in class)
Snapshots
Allow you to take an image of a system at a particular point in time
Patch Compatability
Need to make sure that your virtual technology is as up to date as your OS to ensure compatability
SLA
Service level agreement
Goal 99.999% uptime. Host availability is a major factor
SCT
Security Control Testing
Interviews, examinations, and testing systems to look for weaknesses. It should include contract rules from the SLA.
Sandboxing
Running Apps within restricted memory areas. Prevents “server hop”
Laws and Regulations in regards to cloud security
The customer retains the ultimate responsibility for compliance. Cloud server is not responsible for user error
Multitenancy
Many different clients sharing the same cloud server. Could be a security issue
SaaS
Software as a Service
