Explore cloud security fundamentals in this 46-minute conference talk from BSides Tampa 2015. Delve into cloud definitions, benefits, actors, and risks. Learn about eDiscovery, data classification, and accountability in cloud environments. Examine vendor governance, including key questions to ask providers and strategies for vendor selection and monitoring. Understand the importance of planning for failure and multitenancy considerations. Investigate potential attack surfaces, hypervisor vulnerabilities, and the role of the Cloud Security Alliance. Gain insights into cloud operations models and relevant security standards to enhance your organization's cloud security posture.
Overview
Syllabus
Introduction
Cloud Definition
Cloud Benefits
Cloud Actors
Cloud Risks
EDiscovery
Data Classification
Accountability
Vendor Governance
Questions To Ask
Who Are Their Officers
What Are Their Internal Controls
Audited By An Independent Party
Vendor Lockin
Vendor Selection
Monitoring
Plan for failure
Content starts from the bottom
Multitenancy
Cloud Bursting
Surface Attack
hypervisor attack
cloud security alliance
operations model
standards
