Xin'an Second Edition: Chapter 23 cloud computing security requirements analysis and security protection engineering learning notes

One 、 The outline of this chapter requires

6. Cloud computing security requirements analysis and security protection engineering

6.1 Cloud computing security threats and needs analysis

6.1.1 Cloud computing security threats

◆ Cloud computing user security threats

◆ Cloud computing platform security threats

◆ Virtual machine security threats

◆ Cloud platform operation and maintenance security threats

6.1.2 Cloud computing security requirements

◆ Cloud operating system security

◆ Cloud service security compliance

◆ Multi tenant security isolation

◆ Data hosting

◆ Privacy protection

6.2 Cloud computing security protection mechanism and technical scheme

6.2.1 Cloud computing security level protection framework

◆ Security classification of cloud computing protection objects

◆ Cloud computing protection object security protection methods

◆ Cloud computing security level protection design framework

6.2.2 Cloud computing security protection

◆ Physical and environmental security （ Traditional physical environment security 、 Cloud computing platform physical location selection ）

◆ Network and communication security 【 Network communication security 、 Network boundary security, etc , It involves infrastructure as a service （laaS） Security 】

◆ Device and computing security 【 Resource control 、 Image and snapshot protection , Involving platform as a service （PaaS） Security 】

◆ Application and data security 【 Software fault tolerance 、 Resource control 、 Interface security 、 Data integrity 、 Data confidentiality 、 Data backup recovery 、 Residual information protection 、 Personal information protection, etc , Involving software as a service （SaaS） Security 】

◆ Cloud user security （ Identity identification and authentication of cloud users 、 Cloud user access control ）

6.2.3 Cloud computing security management

◆ Security policy and management system

◆ Safety management organization and personnel

◆ Safety management object

6.2.4 Cloud computing security operation and maintenance

◆ Cloud computing environment and asset operation and maintenance management

◆ Security vulnerability inspection and risk analysis of cloud computing system

◆ Cloud computing system security equipment and policy maintenance

◆ Cloud computing system security supervision

◆ Security monitoring and emergency response of cloud computing system