Download - Cloud Security Alliance

More documents

Recommendations

Info

CLOUD SECURITY ALLIANCE SecaaS Implementation Guidance, Category 6: Intrusion Management3.2.4 Technical Performance Concerns........................................................................................................... 173.2.5 General Challenges................................................................................................................................. 173.2.6 Specific to Cloud Consumers .................................................................................................................. 173.2.7 Specific to Cloud Service Providers ........................................................................................................ 174.0 Implementation................................................................................................................................................. 194.1 Architectural Overview.................................................................................................................................. 194.1.1 Intrusion Detection Framework ............................................................................................................. 194.1.2 Intrusion Detection and Protection Architecture................................................................................... 214.1.3 Network-Based Detection ...................................................................................................................... 224.1.4 Virtualization Layer Detection................................................................................................................ 254.1.5 Client-Based Detection........................................................................................................................... 274.1.6 Application Layer Detection ................................................................................................................... 284.1.7 Hybrid Solutions ..................................................................................................................................... 294.2 Cloud-Provided IM SecaaS Implementation.................................................................................................. 314.2.1 Intrusion Management Infrastructure ................................................................................................... 314.2.2 Policy Implementation............................................................................................................................ 315.0 References and Useful Links.............................................................................................................................. 335.1 References..................................................................................................................................................... 335.2 Useful Links.................................................................................................................................................... 33© Copyright 2012, Cloud Security Alliance. All rights reserved. 4
CLOUD SECURITY ALLIANCE SecaaS Implementation Guidance, Category 6: Intrusion ManagementForewordCloud Computing represents one of the most significant shifts in information technology manyof us are likely to see in our lifetimes. We are reaching the point where computing functions as a utility,promising innovations yet unimagined. The major roadblock to full adoption of Cloud Computing has beenconcern regarding the security and privacy of information.Much work has been done regarding the security of the cloud and data within it, but until now, there have beenno best practices to follow when developing or assessing security services in an elastic cloud model—a modelthat scales as client requirements change.One mission of the Cloud Security Alliance is to provide education on the uses of Cloud Computing to helpsecure all other forms of computing. To aid both cloud customers and cloud providers, the CSA SecaaS WorkingGroup is providing Implementation Guidance for each category of Security as a Service, as delineated in theCSA’s SecaaS Defined Categories of Service. Security as a Service was added, as Domain 14, to version 3 of theCSA Guidance.Cloud Security Alliance SecaaS Implementation Guidance documents are available athttps://cloudsecurityalliance.org/research/working-groups/security-as-a-service/.We encourage you to download and review all of our flagship research at http://www.cloudsecurityalliance.org.Best regards,Jerry Archer Alan Boehme Dave CullinaneNils Puhlmann Paul Kurtz Jim ReavisThe Cloud Security Alliance Board of Directors© Copyright 2012, Cloud Security Alliance. All rights reserved. 5
Page 1 and 2: SecaaS Implementation GuidanceCateg
Page 3: CLOUD SECURITY ALLIANCE SecaaS Impl
Page 7 and 8: CLOUD SECURITY ALLIANCE SecaaS Impl
Page 33: CLOUD SECURITY ALLIANCE SecaaS Impl

Download - Cloud Security Alliance

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?