JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD

Pre-Requisites

Computer Networks, Web Programming

Course Objectives:

• The student will also learn how to apply trust-based security model to real-world security problems.
• An overview of the concepts, processes, and best practices needed to successfully secure information within Cloud infrastructures.
• Students will learn the basic Cloud types and delivery models and develop an understanding of the risk and compliance responsibilities and Challenges for each Cloud type and service delivery model.

Course Outcomes

After completion of course, students would be able to:

• Identify security aspects of each cloud model
• Develop a risk-management strategy for moving to the Cloud
• Implement a public cloud instance using a public cloud service provider
• Apply trust-based security model to different layer

UNIT - I

Introduction to Cloud Computing: Online Social Networks and Applications, Cloud introduction and overview, Different clouds, Risks, Novel applications of cloud computing

UNIT - II

Cloud Computing Architecture: Requirements, Introduction Cloud computing architecture, On Demand Computing Virtualization at the infrastructure level, Security in Cloud computing environments, CPU Virtualization, A discussion on Hypervisors Storage Virtualization Cloud Computing Defined, The SPI Framework for Cloud Computing, The Traditional Software Model, The Cloud Services Delivery Model Cloud Deployment Models: Key Drivers to Adopting the Cloud, The Impact of Cloud Computing on Users, Governance in the Cloud, Barriers to Cloud Computing Adoption in the Enterprise

UNIT - III

Security Issues in Cloud Computing: Infrastructure Security, Infrastructure Security: The Network Level, The Host Level, The Application Level, Data Security and Storage, Aspects of Data Security, Data Security Mitigation Provider Data and Its Security Identity and Access Management: Trust Boundaries and IAM, IAM Challenges, Relevant IAM Standards and Protocols for Cloud Services, IAM Practices in the Cloud, Cloud Authorization Management

UNIT - IV

Security Management in the Cloud Security Management Standards, Security Management in the Cloud, Availability Management: SaaS, PaaS, IaaS Privacy Issues

Page 14 of 55

R19 M.TECH. CSE/CS

Privacy Issues, Data Life Cycle, Key Privacy Concerns in the Cloud, Protecting Privacy, Changes to Privacy Risk Management and Compliance in Relation to Cloud Computing, Legal and Regulatory Implications, U.S. Laws and Regulations, International Laws and Regulations

UNIT - V

Audit and Compliance Internal Policy Compliance, Governance, Risk, and Compliance (GRC), Regulatory/External Compliance, Cloud Security Alliance, Auditing the Cloud for Compliance, Security-as-a-Cloud Advanced Topics Recent developments in hybrid cloud and cloud security.

References:

• 1. Cloud Computing Explained: Implementation Handbook for Enterprises, John Rhoton, Publication Date: November 2, 2009.
• 2. Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance (Theory in Practice), Tim Mather, ISBN-10: 0596802765, O'Reilly Media, September 2009. Page 15 of 55 R19 M.TECH. CSE/CS M. Tech - CSE/CS – I Year – I Semester Common to CSE and CS Syllabus