60 likes | 229 Views
Workshop on Capacity Building for Computer Emergency Readiness Team (CERT) for Africa New Approaches to Security -. Cloud CERT Arun Sood Professor (Computer Science) Co-Director, International Cyber Center George Mason University Fairfax, VA 20124 asood@gmu.edu. Cloud Computing.
E N D
Workshop on Capacity Building for Computer Emergency Readiness Team (CERT) for AfricaNew Approaches to Security - Cloud CERT Arun Sood Professor (Computer Science) Co-Director, International Cyber Center George Mason University Fairfax, VA 20124 asood@gmu.edu
Cloud Computing • On-demand service • near instant scalability and flexibility • Virtualization based • near instantaneous provisioning • Shared resources • hardware, database, memory, etc • ‘service on demand’, usually with a ‘pay as you go’ billing system • Application • Special apps • Games like Zynga • R&D • Startup companies • Desktop virtualization • General purpose
Evolution of Architectures Individual Servers Data Centers Virtualization (1 app / server) Virtualization (N apps / server) Cloud 40 to 45 % Utilization 10 to 20 % 10 to 20 % 15 to 25% 60 + % Security Highest High Lowest
Virtualization / Cloud Security Issues • Shared resources • Hypervisor layer • Memory • Communication • Inter VM infection
Consider Cloud Based CERT Issues • People, Process, Technology • Centralized vs Distributed • Efficient use of skilled manpower • Policy Implementation