Security Could Ruin Everything!
Source: 451 Research, Dec 2012
Cloud Operations Hypervisor Cloud Service APIs DevOps Deployer DC Ops Private Network Attacker Enterprise Consumer Enterprise Private Network Internet Datacenter Cloud Service Provider
Cloud Service APIs Datacenter Hypervisor
Enterprise Multi-tenancy
Hypervisor Attacker Customer B Customer A
Hostile Multi-tenancy
My assessment CSA assessment
“Bring Your Own IT” (BYOIT)
Hypervisor Attacker Enterprise Attacker Friend AWS
For Cloud Service Providers Only
Cloud Operations Hypervisor Cloud Service APIs DevOps Deployer DC Ops Private Network Datacenter Cloud Service Provider
well, public
Hypervisor Cloud Service APIs Attacker Enterprise Internet Datacenter
Source: CSA - Cloud Computing Vulnerability Incidents: A Statistical Overview
Cloud Operations Hypervisor Attacker Cloud Service APIs
US North (primary)US South (secondary)
DC Ops
Cloud Service APIs Attacker Enterprise
Hypervisor
Cloud Service APIs Attacker
Cloud Operations Hypervisor Cloud Service APIs DevOps Deployer DC Ops Private Network Attacker Enterprise Consumer Enterprise Private Network Internet Datacenter Cloud Service Provider