Table Of ContentInformation Technology VACCA
SECURITY IN THE
P r i v a t e C l o u d
S
This comprehensive handbook serves as a professional reference and E
practitioner’s guide to today’s most complete and concise view of private cloud C
security. It explores practical solutions to a wide range of private cloud comput- U
R
ing security issues. The knowledge imparted will enable readers to determine
I
whether the private cloud security solution is appropriate for their organization
T
from a business and technical perspective, to select the appropriate cloud Y
security model, and to plan and implement a cloud security adoption and
I
migration strategy.
N
Features T
H
E
• Demonstrates you how to create and manage a private cloud by providing
a complete and concise view of advanced private cloud computing security
P
technologies
• Reviews the literature and shows how to solve problems in actual practice, r
i.e., implement IT governance, risk management, and compliance, etc.
i
• Examines cases for joining the different private clouds and demonstrates
v
various private cloud bursting applications
a
About the Author
S E C U R I T Y I N T H E
t
e
John Vacca is an information technology consultant and internationally-known
Private Cloud
author of more than 600 articles in the areas of advanced storage, computer
security, and aerospace technology. John was also a configuration management
C
specialist, computer specialist, and the computer security official (CSO) for
l
NASA's space station program (Freedom) and the International Space Station
Program, from 1988 until his retirement from NASA in 1995. o
u
d
E D I T E D B Y
JOHN R. VACCA
K24190
ISBN-13: 978-1-4822-5955-1
90000
9 781482 259551
S E C U R I T Y I N T H E
Private Cloud
S E C U R I T Y I N T H E
Private Cloud
EDITED BY
JOHN R. VACCA
Boca Raton London New York
CRC Press is an imprint of the
Taylor & Francis Group, an informa business
CRC Press
Taylor & Francis Group
6000 Broken Sound Parkway NW, Suite 300
Boca Raton, FL 33487-2742
© 2017 by Taylor & Francis Group, LLC
CRC Press is an imprint of Taylor & Francis Group, an Informa business
No claim to original U.S. Government works
Printed on acid-free paper
Version Date: 20160628
International Standard Book Number-13: 978-1-4822-5955-1 (Hardback)
This book contains information obtained from authentic and highly regarded sources. Reasonable efforts have been
made to publish reliable data and information, but the author and publisher cannot assume responsibility for the valid-
ity of all materials or the consequences of their use. The authors and publishers have attempted to trace the copyright
holders of all material reproduced in this publication and apologize to copyright holders if permission to publish in this
form has not been obtained. If any copyright material has not been acknowledged please write and let us know so we may
rectify in any future reprint.
Except as permitted under U.S. Copyright Law, no part of this book may be reprinted, reproduced, transmitted, or uti-
lized in any form by any electronic, mechanical, or other means, now known or hereafter invented, including photocopy-
ing, microfilming, and recording, or in any information storage or retrieval system, without written permission from the
publishers.
For permission to photocopy or use material electronically from this work, please access www.copyright.com (http://
www.copyright.com/) or contact the Copyright Clearance Center, Inc. (CCC), 222 Rosewood Drive, Danvers, MA 01923,
978-750-8400. CCC is a not-for-profit organization that provides licenses and registration for a variety of users. For
organizations that have been granted a photocopy license by the CCC, a separate system of payment has been arranged.
Trademark Notice: Product or corporate names may be trademarks or registered trademarks, and are used only for
identification and explanation without intent to infringe.
Library of Congress Cataloging‑in‑Publication Data
Names: Vacca, John R., editor.
Title: Security in the private cloud / editor, John R. Vacca.
Description: Boca Raton : Taylor & Francis, a CRC title, part of the Taylor &
Francis imprint, a member of the Taylor & Francis Group, the academic
division of T&F Informa, plc, [2017] | Includes bibliographical references
and index.
Identifiers: LCCN 2016024366 | ISBN 9781482259551 (hardback)
Subjects: LCSH: Cloud computing--Security measures. | Computer
networks--Security measures.
Classification: LCC QA76.585 .S4435 2017 | DDC 004.67/82--dc23
LC record available at https://lccn.loc.gov/2016024366
Visit the Taylor & Francis Web site at
http://www.taylorandfrancis.com
and the CRC Press Web site at
http://www.crcpress.com
This book is dedicated to my wife, Bee.
Contents
Foreword, xi
Preface, xiii
Acknowledgments, xix
Editor, xxi
Contributors, xxiii
Section i Introduction to Private Cloud Security
chapter 1 ◾ Private Cloud Computing Essentials 3
Lauren coLLinS
chapter 2 ◾ Integration of Enterprise Content Management and Software
as a Service 17
patricia c. FrankS
chapter 3 ◾ Infrastructure as a Service 37
Mario Santana
chapter 4 ◾ Preservation as a Service for Trust 47
Luciana Duranti, aDaM JanSen, Giovanni Michetti, courtney MuMMa,
DaryLL preScott, corinne roGerS, anD kenneth thiboDeau
chapter 5 ◾ Software and Data Segregation Security 73
DanieL chinG Wa
Section ii Achieving Security in a Private Cloud
chapter 6 ◾ Taking Full Responsibility for Cyber Security in the Private Cloud 89
DanieL chinG Wa
vii
viii ◾ Contents
chapter 7 ◾ Selecting the Appropriate Product 101
DanieL chinG Wa
chapter 8 ◾ Virtual Private Cloud 113
Lauren coLLinS
chapter 9 ◾ Security in the Virtual Private Cloud 141
DanieL chinG Wa
Section iii Implementing Security in a Private Cloud
chapter 10 ◾ The Hybrid Cloud Alternative 155
DanieL chinG Wa
chapter 11 ◾ Identification and Privacy in the Secure Cloud 169
Sarbari Gupta
chapter 12 ◾ Private Cloud Security and Identification 179
DanieL chinG Wa
chapter 13 ◾ Secure Management of Virtualized Resources 193
roberto Di pietro, FLavio LoMbarDi, anD Matteo SiGnorini
chapter 14 ◾ Designing Cloud Security and Operations Models in the
Changed Geopolitical Environment 219
thorSten herre
chapter 15 ◾ Continuous Private Cloud Security Monitoring 235
thorSten herre
chapter 16 ◾ Cloud Security Assessment and Authorization 261
Sarbari Gupta
chapter 17 ◾ Assessment and Authorization in Private Cloud Security 271
roberto Di pietro, FLavio LoMbarDi, anD Matteo SiGnorini
Section iv Advanced Private Cloud Computing Security
chapter 18 ◾ Advanced Security Architectures for Private Cloud
Computing 289
praMoD panDya anD riaD rahMo
Contents ◾ ix
chapter 19 ◾ Advanced Private Cloud Computing Security Architectures 303
aLbert cabaLLero
chapter 20 ◾ Privacy Protection in Cloud Computing through
Architectural Design 319
Wanyu ZanG, MenG yu, anD penG Liu
Section v Appendices
APPENDIX A, 347
APPENDIX B, 351
APPENDIX C, 359
GLOSSARY, 361
INDEX, 367
