Cloud Security

Question 1

Most security problems stem from three main things. What are they?

Answer 1

Loss of control, Lack of trust and multitenancy.

Question 2

Explain loss of control.

Answer 2

• -Data, applications, resources are located with provider
• -User identity management is handled by the cloud
• -User access control rules, security policies and enforcement are managed by the cloud provider.

Question 3

Explain lack of trust.

Answer 3

• -Lack of mechanism to establish trust
• -Cloud provider employees can be phished
• -Cloud provider can use my data without my consent

Question 4

Explain multitenancy.

Answer 4

• -conflict between tenants’ opposing goals in resource sharing
• -even if you trust the cloud provider do you trust the strangers who are sharing the infrastructure with you?