Cloud Computing Security

Security is one of the main points of concern when it comes to a company’s IT infrastructure. Cloud Computing does not have the traditional way of security, but it has advanced encryption of data and access restrictions to safeguard privacy. It is a sub-domain of computer security, network security, and, at a broader level, information security.

Cloud Computing Security

Cloud computing security, consists of a set of controls, policies, technologies and procedures that work together to protect the cloud ecosystem, data, applications, services and the associated infrastructure. These security processes are configured to protect data, support compliance regulation and ensure customer privacy as well as implement authentication rules for individual users and devices. From allowing access to filtering traffic, cloud security can be configured to meet the exact needs of the business. These facilities, in turn, reduce administration overheads and IT teams can mainly focus on other areas of the business.

The way this security is implemented will depend on the cloud provider or cloud security solutions. Thus, the implementation of cloud security processes should be a joint venture between the business and the cloud service provider.

Various Categories of Security

1.      Web security

2.      Data Loss Prevention(DLP)

3.      Email Security

4.      Network Security

Security  Certifications

There are various certifications that authenticate and ensure Security:

1.      ISO 27001

2.      ISO 27017

3.      ISO 27018

4.      PC IDSS

5.      FEDRAMP

Network Security means to ensure data confidentiality and involving the authorization of access to data in a network, which is controlled by the network administrator. It also ensures proper access to the data.  

Various types of Network Security:

1.      Virtual  Private Network(VPN):  Virtual private network that extends a private network across the public network, and it enables users to send the data and receive the data across over a shared or public networks and as if their computing devices were directly connected to the private network.

Types of VPN

1.      WAN VPN: It is used for the Branch Offices.

2.      Access VPN: It can be used for Roaming users.

3.      Extranet VPNs: It is mainly used by the suppliers, Branch Office.

2.      Virtual Private Cloud ( VPC): VPN is a virtual network you have when you’re not having a network – it behaves just like a “private network” only it’s virtual. VPC is same as: a virtual “private cloud” it behaves like a private cloud. The user can get all the benefits of it.

3.      Firewall: A Firewall is a network security system that monitors and controls the incoming as well as outgoing network traffic and this can be done by allowing or restricting specific ports.

4. IP Restriction: IP restriction is a feature of cloud security. This is used to limit access to specific IP addresses.

Different IP Address Classes:

1. Class A:  Class A is the First octet in the network position.  Class A address is used for a network which is having more than  65,536 hosts.

2. Class B: Class B is the First two octets in the Network position. Class A address is used for a network which is lies between 256 and 65,536 hosts.

communications while

3. Class C: Class C  is the First three octets in the Network Position. Class B address is used for a network which is less than 254 hosts.

Network Firewall:  

Network Firewall is to eliminate the occurrence of unwanted network communications while allowing all legitimate communication to flow freely.

1.      Router / Bridge Based  Firewall

2.      Computer-based Network Firewall