Nº
4203
DATE: CALL
PRICE NIS: 870 + VAT
DURATION: 1 Day
Course Overview: Cloud computing is an Internet-based computing model, whereby shared resources, software and information are provided to computers and other devices on-demand. Details are abstracted from the users who no longer have need of expertise in, or control over, the technology infrastructure "in the cloud" that supports them. Cloud Computing is a different model for IT services based on the Internet. It typically involves the provision of dynamically scalable and virtualized resources as services over the Internet. Cloud-like infrastructures are rapidly evolving and are here to stay. What they will look like tomorrow is still not final, though one thing is certain: clouds bring with them new untested deployment issues together with associated adverse models and vulnerabilities.
Participants will hear about the main cloud computing technologies and their benefits as well as the new attack vectors associated with them. In addition, they will hear about the governance and compliance issues that are raised by the use of cloud computing technologies and the security mechanisms to be used to build secure services and applications in the cloud using access control, defensive and enablement services
Who should attend?Security and software architects and anyone who needs to make design decisions for securing cloud technologies.
Prerequisities:Some understanding of security principles.
Course Outline:
1. Introduction
-
Cloud technology
-
Private, public and hybrid clouds
-
SaaS, PaaS, IaaS
-
Benefits of cloud computing
-
Architectural framework
2. The Problem Side
-
Cloud computing Threat Vector
3. Governing in the Cloud
-
Governance and Enterprise Risk Management
-
Compliance and Audit
-
Information Lifecycle Management
4. Security in the Cloud
-
Traditional Security, Business Continuity and Disaster Recovery
-
Incident Response, Notification and Remediation
-
Application Security
-
Encryption and Key Management
-
Identity and Access Management
-
Identity services: Key differences in how identity is handled in the cloud
-
Enabling a consistent authorization policy with XACML
5. Summary