Cloud Data Security

---

Goals

• Identify design principles of secure cloud computing.
• Explain security concepts relevant to cloud computing.
• Analyze cloud reference architecture.
• Compare cloud computing concepts.
• Evaluate trusted cloud services.
• Identify the cloud data life cycle.
• Evaluate cloud data storage architectures.
• Analyze cloud infrastructure components.
• Analyze risks associated with cloud infrastructure.
• Critique security controls.
• Critique disaster recovery and business continuity management plans.
• Manage the physical infrastructure for the cloud environment.
• Outline compliance requirements with regulations and controls.
• Apply risk assessment to the logical and physical infrastructure.
• Analyze the collection, acquisition, and preservation of digital evidence.

Cloud Data Lifecycle

• Cloud Data Lifecycle

Cloud Storage Architecture

• Cloud Storage Architectures

Threats to Cloud Storage

• Threats to Cloud Storage

Designing and Applying Security Strategies for Storage

• Encryption
• Key Management Considerations for Cloud Computing
• Certificate Management for Cloud Computing
• Hashing
• Data Obfuscation
  • Implementations
  • Data Obfuscation Use Cases
• Data Randomization
• Data Anonymization
  • Pseudo-anonymization
• Cryptographic Hash
• Data Shuffling
• Data Masking
• Nulling
• Tokenization
• Data Loss Prevention (DLP)
  • DLP Goals
• Cloud Log Capture and Analysis
  • Security Information and Event Management (SIEM)