E N D
Application Security in Cloud http://clean-clouds.com
Security as a after thought SDLC Application Security in Cloud
Reason of Concern: Lack of Control Cloud related Issues Changes in SDLC Unknown Risks (Needs to Identify) Areas to restructure Security Application SDLC
Concerns Responsibilities Solutions SaaS
SAML • XACML • OAuth • OpenID • OATH • OpenAuth Identity & Access Management
Concerns Responsibilities Solutions PaaS
Concerns Responsibilities Solutions IaaS
Training to Developers • Data Validation • Traditional Security • Application Penetration testing • Encryption Different Aspects
Application security policy automation • Automation of auditing • Policy as a Service • Benefits • Automatic Security Policy Enforcement in the Cloud • Automatic Policy Monitoring into the Cloud • Automatic Updating Automation