Cybersecurity with Cloud Computing

Course details

More and more companies are migrating their applications and infrastructure to the cloud, shifting operational aspects to service providers such as Microsoft and Amazon. However, cloud computing is a shared responsibility, especially when it comes to keeping your data, users, and systems safe. In this course, Malcolm Shore outlines the major forms of cloud technology, its benefits and risks, and the cybersecurity standards and body of knowledge required to mitigate those risks. He introduces concepts such as software as a service (SaaS), platform as a service (PaaS), and infrastructure as a service (IaaS) and the different deployment models available. He then reviews offerings from Microsoft Azure, Amazon Web Services, and Google Apps. Malcolm also shows the Security as a Service (SecaaS) capability of each platform, which can be used to identify unauthorized access and put cloud security defenses like encryption, logging, and monitoring into place.

Learning objectives
Differentiate the various types of cloud services.
Identify characteristics of each type of cloud service.
Explain the different features of Microsoft Azure.
Explain the different features of Amazon Web Services (AWS).
Apply security controls to cloud-based applications.
Identify the different types of cloud security controls.

Concepts

0. Introduction

01 - Making your cloud deployments secure
02 - What you should know

1. Cloud Foundations

03 - Cloud security guidance
04 - Essential characteristics
05 - Cloud services
06 - Infrastructure as a service
07 - Platform as a service
08 - Software as a service
09 - Deployment models
10 - Hypervisors and visualization
11 - Cloud security certification

2. Looking at the Clouds

12 - Microsoft Azure cloud
13 - Amazon Web Services
14 - Amazon Web Services
15 - Command-line access to Amazon
16 - Google Apps
17 - Security as a service
18 - Cloud provider SECaaS
19 - An insight into Rapid7's SECaaS

3. Cloud Flaws, Incidents. and Failures

20 - Incidents in the cloud
21 - Anatomy of a service failure
22 - Anatomy of a business failure
23 - Incident response
24 - Azure recommendations on incident management
25 - Cloud resilience

4. Hands-On with Cloud Flaws

26 - Threats to cloud deployments
27 - Unauthorised access to buckets by anyone
28 - Unauthorized account access to buckets
29 - Searching for account keys

5. Cloud Security Management

30 - Architecting governance and risk
31 - Legal, compliance, and audit
32 - Information governance
33 - Application security
34 - Deploying and operating applications

6. Cloud Security Capabilities

35 - Cryptography foundations
36 - Data security and encryption
37 - Identity in the cloud
38 - Controlling access to cloud objects
39 - Setting up access control in AWS
40 - Logging and monitoring in the cloud
41 - VM monitoring with Azure

What's Next

42 - Next steps

Cybersecurity with Cloud Computing

Authors

Malcolm Shore