InfoQ Homepage Cloud Security Content on InfoQ
-
/articles/Cloud-Security/en/smallimage/image_cloud-security.jpg)
Standardizing the Cloud for Security
Orlando Scott-Cowley discusses security in the cloud and the need for industry standards to lower the barriers to entry while ensuring that customer data is safe.
-
/articles/distributed-access-control-architecture-for-cloud-computing/en/smallimage/article logo.jpg)
A Distributed Access Control Architecture for Cloud Computing
Cloud computing’s multitenancy and virtualization features pose unique security and access control challenges. In this article, authors discuss a distributed architecture based on the principles from security management and software engineering to address cloud computing’s security challenges.
-
/articles/managing-security-requirements-in-agile-projects/en/smallimage/logo.jpg)
Managing Security Requirements in Agile Projects
Managing security requirements from early phases of software development is critical. Most security requirements fall under the scope of Non-Functional Requirements (NFRs). In this article, author Rohit Sethi discusses how to map NFRs to feature-driven user stories and also how to make security requirements more visible to the stakeholders.
-
/articles/ieee-software-engineeering-services-cloud-computing/en/smallimage/small image.jpg)
Software Engineering Meets Services and Cloud Computing
In this IEEE article, authors Stephen Yau and Ho An talk about application development using service-oriented architecture and cloud computing technologies. They also discuss application development challenges like security in a multi-tenant environment, quality-of-service monitoring, and mobile computing.
-
/articles/regulatory-compliant-cloud-computing/en/smallimage/article icon.jpg)
Regulatory Compliant Cloud Computing: Rethinking web application architectures for the cloud
Not all data is sensitive and hence an equal and balanced investment in securing all data categories is not justified. This article presents an architecture that leverages cloud-computing, cloud-storage and enterprise key-management Infrastructure(EKMI) to lower costs while complying to data-security regulations.
-
/articles/cloud-security-architecture-intro/en/smallimage/art icon.jpg)
Introduction to Cloud Security Architecture from a Cloud Consumer's Perspective
Security concerns are the number one barrier to cloud services adoption. How do we evaluate a vendor's solution? What is an optimal security architecture? What are consumer versus provider responsibilities? What are industry standard patterns in this regard? This article answers some of these questions based on first hand experience dealing with large scale cloud adoption.
-
/articles/architecting-cloud-scale-identity/en/smallimage/small image.jpg)
Architecting a Cloud-Scale Identity Fabric
In this IEEE article, author Eric Olden discusses an identity fabric that links multiple applications to a single identity to manage the volume of user identities that network administrators must secure and to enable a full-scale cloud adoption.
-
/articles/ieee-cloud-computing/en/smallimage/small image.jpg)
Cloud Computing Roundtable
In this IEEE panel discussion article, guest editors Ivan Arce and Anup Ghosh facilitated the discussion on cloud computing security risks. The panelists are Eric Grosse (Google Security), John Howie (Microsoft), James Ransome (Cisco), Jim Reavis (Cloud Security Alliance) and Stephen Schmidt (Amazon Web Services).
-
/articles/poulin-wonderland-soa-governance/en/smallimage/image_alice-rabbit.jpg)
Wonderland Of SOA Governance
Michael Poulin elaborates on the differences between of governance and management and tries to explore the 'wonderland' of governance in a service-oriented environment. He defines SOA Governance, explores the relationship between governance and enterprise architecture, and discusses accountability and ownership of governance efforts, and how practitioners can instrument SOA governance.
-
/articles/malware-detection-intel/en/smallimage/imagesmall.jpg)
Enhanced Detection of Malware
This article, from Intel, discusses significant new threats to host agents, outlines a generic architecture for malware detection, based on enhanced cloud computing, describes how Intel platform technologies can be used to enhance computing solutions, and ends with a threat analysis of the approaches presented. Malware that masks its presence from traditional security agents is the article focus.
-
/articles/encrypt-internet-intel/en/smallimage/images.jpg)
Encrypting the Internet
The authors, from Intel, offer a three pronged approach to providing secure transmission of high volume HTML traffic: new CPU instructions to accelerate cryptographic operations; a novel implementation of the RSA algorithm to accelerate public key encryption; and using SMT to balance web server and cryptographic operations. Their approach, they claim, leads to significant cost savings.
-
/articles/intel-botnets-malware-security/en/smallimage/imagesmall.gif)
The Dark Cloud: Understanding and Defending against Botnets and Stealthy Malware
Botnets are the latest scourge to hit the Internet and this article defines a botnet (a collection of distributed computers or systems that has been taken over by rogue software), examines the botnet life cycle, and presents several promising anti-botnet defense strategies including canary detectors, white lists, and malware traces.