JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD

Pre-requisites

Computer Networks, Cryptography and Network Security, Cloud Computing.

Course Objectives:

• 1. To understand the fundamentals concepts of cloud computing.
• 2. To understand the cloud security and privacy issues.
• 3. To understand the Threat Model and Cloud Attacks
• 4. To understand the Data Security and Storage
• 5. To analyze Security Management in the Cloud.

Course Outcome:

• 1. Ability to acquire the knowledge on fundamentals concepts of cloud computing.
• 2. Able to distinguish the various cloud security and privacy issues.
• 3. Able to analyze the various threats and Attack tools
• 4. Able to understand the Data Security and Storage
• 5. Able to analyze the Security Management in the Cloud.

UNIT - I

Overview of Cloud Computing: Introduction, Definitions and Characteristics, Cloud Service Models, Cloud Deployment Models, Cloud Service Platforms, Challenges Ahead. Introduction to Cloud Security: Introduction, Cloud Security Concepts, CSA Cloud Reference Model, NIST Cloud Reference Model, NIST Cloud Reference Model.

UNIT - II

Cloud Security and Privacy Issues: Introduction, Cloud Security Goals/Concepts, Cloud Security Issues, Security Requirements for Privacy, Privacy Issues in Cloud. Infrastructure Security: The Network Level, the Host Level,the Application Level, SaaS Application Security, PaaS Application Security, IaaS Application Security.

UNIT - III

Threat Model and Cloud Attacks: Introduction, Threat Model- Type of attack entities, Attack surfaces with attack scenarios, A Taxonomy of Attacks, Attack Tools-Network-level attack tools, VM- level attack tools, VMM attack tools, Security Tools, VMM security tools.

UNIT - IV

Information Security Basic Concepts, an Example of a Security Attack, Cloud Software Security Requirements, Rising Security Threats. Data Security and Storage: Aspects of Data Security, Data Security Mitigation, Provider Data and Its Security.

UNIT - V

Evolution of Security Considerations, Security Concerns of Cloud Operating Models, Identity Authentication, Secure Transmissions, Secure Storage and Computation, Security Using Encryption Keys, Challenges of Using Standard Security Algorithms, Variations and Special Cases for Security Issues with Cloud Computing, Side Channel Security Attacks in the Cloud Security Management in the Cloud- Security Management Standards, Availability Management, Access Control, Security Vulnerability, Patch, and Configuration Management.

TEXT BOOKS:

• 1. Cloud Security Attacks, Techniques, Tools, and Challenges by Preeti Mishra, Emmanuel S Pilli, Jaipur R C Joshi Graphic Era, 1st Edition published 2022 by CRC press.
• 2. Cloud Computing with Security Concepts and Practices Second Edition by Naresh Kumar Sehgal Pramod Chandra, P. Bhatt John M. Acken, 2nd Edition Springer nature Switzerland AG 2020.
• 3. Cloud Security and Privacy by Tim Mather, Subra Kumaraswamy, and Shahed Lati First Edition, September 2019.

REFERENCES:

• 1. Essentials of Cloud Computing by K. Chandrasekaran Special Indian Edition CRC press.
• 2. Cloud Computing Principles and Paradigms by Rajkumar Buyya, John Wiley.