资源描述：
《Cloud Security》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。
1、SecurityandPrivacyinCloudComputingRagibHasanJohnsHopkinsUniversityLecture2en.600.412Spring201002/01/2010Threats,vulnerabilities,andenemiesGoalLearnthecloudcomputingthreatmodelbyexaminingtheassets,vulnerabilities,entrypoints,andactorsinacloudTechniqueApplydifferentthreatmodelingschemes2/1/201
2、0en.600.412Spring2010Lecture2
3、JHU
4、RagibHasan2Assignmentfornextclass•Review:ThomasRistenpartetal.,Hey,You,GetOffofMyCloud!ExploringInformationLeakageinThird-PartyComputeClouds,proc.ACMCCS2009.•Format:–Summary:Abriefoverviewofthepaper,1paragraph(5/6sentences)–Pros:3ormoreissues–Cons:3ormoreiss
5、ues–Possibleimprovements:Anypossiblesuggestionstoimprovethework•Due:2.59pm2/8/2010•Submission:Byemailtorhasan7@jhu.edu(textonly,noattachmentsplease)2/1/2010en.600.412Spring2010Lecture2
6、JHU
7、RagibHasan3ThreatModelAthreatmodelhelpsinanalyzingasecurityproblem,designmitigationstrategies,andevalua
8、tesolutionsSteps:–Identifyattackers,assets,threatsandothercomponents–Rankthethreats–Choosemitigationstrategies–Buildsolutionsbasedonthestrategies2/1/2010en.600.412Spring2010Lecture2
9、JHU
10、RagibHasan4ThreatModelBasiccomponents•Attackermodeling–Choosewhatattackertoconsider–Attackermotivationandc
11、apabilities•Assets/AttackerGoals•Vulnerabilities/threats2/1/2010en.600.412Spring2010Lecture2
12、JHU
13、RagibHasan5Recall:CloudComputingStack2/1/2010en.600.412Spring2010Lecture2
14、JHU
15、RagibHasan6Recall:CloudArchitectureSaaS/PaaSClientProviderCloudProvider(IaaS)2/1/2010en.600.412Spring2010Lecture2
16、JHU
17、
18、RagibHasan7Attackers2/1/2010en.600.412Spring2010Lecture2
19、JHU
20、RagibHasan8Whoistheattacker?Insider?•Maliciousemployeesatclient•MaliciousemployeesatCloudprovider•CloudprovideritselfOutsider?•Intruders•Networkattackers?2/1/2010en.600.412Spring2010Lecture2
21、JHU
22、RagibHasan9AttackerCapability:Malic
23、iousInsiders•Atclient–Learnpasswords/authenticationinformation–GaincontroloftheVMs•Atcloudprovider–Logclientcommunication2/1/2010en.600.412Spring2010Lecture2
24、JHU
25、RagibHasan10AttackerCapability:CloudProvider•What?–Canreadunencrypteddata–Canpossiblyp
