Part 1: Plan: Threats, Risk, and Requirements Landscape
by Raymond Choo, Ryan Ko
The Cloud Security Ecosystem
- Cover image
- Title page
- Table of Contents
- Copyright
- Dedication
- Contributors
- Foreword
- Preface
- About the Authors
- List of Reviewers
- Acknowledgments
- Chapter 1: Cloud security ecosystem
- Abstract
- 1 How it all started—the story of an online bookstore
- 2 Consolidation of terminologies and perspectives
- 3 The achilles’ heel—depending on a trust relationship
- 4 Top threats and vulnerabilities of cloud security
- 5 Managing cloud security risks with the deming cycle
- 6 Plan—threats, risk, and requirements landscape
- 7 Do—cloud security approaches and challenges
- 8 Check—forensics and incident response
- 9 Act—governance and auditing
- 10 Summary
- Part 1: Plan: Threats, Risk, and Requirements Landscape
- Chapter 2: Cybercrime in cloud: Risks and responses in Hong Kong, Singapore
- Chapter 3: CATRA: Conceptual cloud attack taxonomy and risk assessment framework
- Chapter 4: Multitiered cloud security model
- Abstract
- Acknowledgments
- 1 Introduction
- 2 The problem
- 3 Holistic approach
- 4 Why develop cloud security standards and guidelines
- 5 Related work
- 6 Design considerations of multitiered cloud security
- 7 Benefits to stakeholders
- 8 MTCS standards
- 9 Self-disclosure
- 10 Certification scheme
- 11 Status
- 12 Deployment
- 13 Harmonization
- 14 Future work
- 15 Conclusion
- Part 2: Do: Cloud Security Approaches and Challenges
- Chapter 5: A guide to homomorphic encryption
- Abstract
- 1 Introduction
- 2 Current industry work-arounds and their gaps
- 3 History and related work
- 4 Overview of partial homomorphic encryption schemes
- 5 Fully homomorphic encryption
- 6 Homomorphic encryption in the cloud
- 7 Future of homomorphic encryption and open issues
- 8 Alternatives to homomorphic encryption
- 9 Summary
- Chapter 6: Protection through isolation: Virtues and pitfalls
- Chapter 7: Protecting digital identity in the cloud
- Chapter 8: Provenance for cloud data accountability
- Chapter 9: Security as a service (SecaaS)—An overview
- Chapter 10: Secure migration to the cloud—In and out
- Chapter 11: Keeping users empowered in a cloudy Internet of Things
- Chapter 12: Cloud as infrastructure for managing complex scalable business networks, privacy perspective
- Chapter 13: Psychology and security: Utilizing psychological and communication theories to promote safer cloud security behaviors
- Chapter 5: A guide to homomorphic encryption
- Part 3: Check: Forensics and Incident Response
- Chapter 14: Conceptual evidence collection and analysis methodology for Android devices
- Chapter 15: Mobile cloud forensics: An analysis of seven popular Android apps
- Chapter 16: Recovering residual forensic data from smartphone interactions with cloud storage providers
- Chapter 17: Integrating digital forensic practices in cloud incident handling: A conceptual Cloud Incident Handling Model
- Chapter 18: Cloud security and forensic readiness: The current state of an IaaS provider
- Chapter 19: Ubuntu One investigation: Detecting evidences on client machines
- Part 4: Act: Governance and Auditing
Part 1
Plan: Threats, Risk, and Requirements Landscape
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.