Data breaches occur nearly every day. From very large retailers, down to your fantasy football website, and anywhere in between, they have been compromised in some way. How did the attackers get in? What did they do with the data they compromised? What should I be concerned with in my own business or my systems? This course is the second course in the Practical Computer Security. It will discuss types of threats and attack vectors commonly seen in today’s environment. I hate to be the bearer of bad news, but threats are all over the place! This course isn’t designed to insight fear that there is no hope for keeping systems and business secure, but rather educate you on how attacks are carried out so that you have a better sense of what to look out for in your business or with your systems.
What is "The Cloud"?
Loading...
Del curso dictado por University of Colorado System
Cyber Threats and Attack Vectors
166 calificaciones
University of Colorado System
166 calificaciones
Curso 2 de 4 en SpecializationCybersecurity for Business
De la lección
Cloud Security
You use the cloud every day; you may not even realize it! This week will focus on the cloud and security surrounding cloud and cloud services.
Conoce a los instructores
Greg WilliamsLecturer
Department of Computer Science
In this lesson, I'll talk about the cloud.
What is the cloud, and by the end of it, you'll really
be able to tell me what the cloud is and tell other people what the cloud is.
And really discuss the key components of the cloud and
what makes the cloud so important to us today.
Let's define what cloud computing is first.
So going back to NIST, the special publication 800-145.
They define the cloud really as a model for enabling ubiquitous, convenient,
on-demand network access to a shared pool of configurable computing resources.
E.g, networks, servers, storage applications, and
services that can be rapidly provisioned and released with
minimal management effort or service provider interaction.
The cloud model promotes availability and is composed of five
essential characteristics, three service models and four deployment models.
So we're going to talk about a couple of those today.
So how I define the cloud.
Well, really the cloud to me, and you guys can use this definition too
the way I explain it to somebody that says, what is the cloud?
Really, it's just somebody else's computer, that's all it really is.
It's somebody else's computer, on somebody else's network,
with somebody else's policies in place to manage it, so think about the power usage.
Think about the incident response,
think about nearly everything that you do with a computer
at your organization, think about it somewhere else.
So Microsoft Word for example, take that, that's installed on your computer,
and put it out on somebody else's computer and access it from your computer.
That's what we actually call Office 365 is Microsoft has that in place.
So there's a few different models that we have, NIST,
the special publication 800-145 really defines
those three service types as really services, the computing model.
So software as a service, software as a service is really software,
so think about the software that you have on your computer.
Microsoft Word, Microsoft Excel, those could be put out in the cloud and
they actually are through Office 365.
This is probably one you're more familiar with.
Platform as a service, a platform as a service is, well,
think about your operating system that you're on right now.
Whether that's a mobile platform, whether that's a Windows platform, or
an Apple platform, you really can't virtualize Apple
however, the platform as a service, think about the operating system.
So if you have an operating system and
you put it out in the cloud what can you do with that?
You can install applications on it, you can manage resources, that is a platform.
And then finally, we have infrastructure as a service.
Infrastructure as a service is really your computer, it's hardware.
So think of servers for example.
So think about infrastructure as a service as our final service that we have.
So servers, for examples, we could manage infrastructure like number of CPU's,
number of how much RAM we have in it, what kind of network it has with it,
that is infrastructure as a service.
It allows us to put anything and everything on that model as
a service that we want to, but it's hosted somewhere else.
Other types of networking that we can use as a service are things like
networking as a service or data as a service.
Anything that we can basically virtualize and have somebody else run it,
is part of the overall cloud model.
However, software platform and infrastructure are really
what we considered the three models that the cloud uses.
Let's talk about the components of the cloud.
Components of the cloud are really rapid deployment.
So there are companies out there that provide many different services,
they provide all the software, platform, and
infrastructure services but were able to deploy them instantly.
Think about when you're setting up your computer and
how long it could take, or think about setting up your phone or
a server, for example, if you're a system administrator.
The cloud allows us to rapidly deploy anything, that could be software,
platform, as an operating system, or it could be infrastructure as well.
The cloud allows us to do flexible architecture.
So if it's software, maybe the software provider and
we'll talk about these SaaS model, here in another lesson.
But the flexible architecture in software could be the amount of
concurrent licenses you're using, it could be how the system is running as a whole.
We also have resource pooling, so resource pooling,
we usually see this across multiple systems.
So if we have a huge server farm we could stick all the compute cycles together,
or the cores together.
And really allow us to pool those resources so
that we only realize one system versus a multitude of systems.
And then finally, the other component of the cloud is resource measuring.
In order to be an effective cloud provider, you need to have some way
of measuring how much that you're using and this is passed on to the end customer.
So whether that's again concurrent licenses for your software as a service,
or maybe it's number of compute cycles on a platform,
or even CPUs for example on infrastructure.
There's all kinds of resource measuring that we have that cloud providers
allow us to access, and that's how the cloud is usually structured.
NIST Special Publication 500-292 really goes
into the overall reference architecture of the entire cloud itself.
So in this we have the three types of platforms or
as a service that we have,
software platform and infrastructure.
And then we also have other components, such as cloud brokerage and
some other components that make up the cloud.
So why is the cloud so important?
The cloud allows us to rapidly deploy where we may not be able to
rapidly deploy on site.
It allows diversification of architecture and location.
So maybe I don't have an office halfway around the world or
halfway around the country.
The cloud allows us to diversify where
we put back-up systems or compute nodes that
allow real disaster recovery to happen, think about security as well.
Cloud architecture allows us to let somebody else manage
overall workloads and monitor what's going on with our services.
So that if we don't have the personnel to do it ourselves then we
can allow somebody else to do it.
We also can see sometimes a decreased workload when we move to the cloud.
Now that's not always the case, and you need to be real careful about work load
when you move to the cloud and say, well, really everything is going to the cloud.
So let me give you a scenario for this.
Let's say that you have a directive to move everything to the cloud.
Well, let's say that is servers for example.
Now, a lot of cloud providers will charge you to move data up,
I'm sorry to pull data down.
So if I move data up, and let's say I move,
20 gigabytes worth of data up to the cloud,
and that keeps on growing and growing and
growing, and then two years later, what happens if that cloud provider goes away?
Well, now I have to download all that data and
then select a new provider to host that out in the cloud,
where that may take several months to do that on a poor connection.
Or what if the cloud provider all of a sudden goes out of business?
It's going to create more work for you to move that cloud provider somewhere else.
So it's not always an advantage for organizations to move to the cloud.
Disaster recovery is another one of those important features of the cloud.
So we can host other servers all across the world.
If we load-balance servers across the world or across the country,
then if we have a disaster in one location, we can diversify and
go to another location that's backed up, for example.
The cloud gives us a whole variety of options that normal on-premise
solutions don't provide us.
Explora nuestro catálogo
Inscríbete de manera gratuita y obtén recomendaciones personalizadas, actualizaciones y ofertas.
Coursera brinda acceso universal a la mejor educación del mundo, al asociarse con las mejores universidades y organizaciones, para ofrecer cursos en línea.
© 2019 Coursera Inc. Todos los derechos reservados.
