ENISA云计算安全风险评估指南

4星 · 超过85%的资源需积分: 15 12 浏览量更新于2024-07-27 1 收藏 1.95MB PDF 举报

"该文档是‘云计算安全风险评估指南’，由欧洲网络与信息安全局（ENISA）编撰，旨在促进欧盟内部市场的运作，并在网络安全领域提供专业建议和推荐。本指南关注新兴和未来风险的评估，以帮助云计算环境下信息安全管理。" 在云计算环境中，安全风险评估是至关重要的，因为它有助于识别、量化和管理与云服务相关的潜在威胁。这份指南可能涵盖了以下几个关键知识点： 1. **云计算的基本概念**：介绍云计算的基本架构和服务模式（IaaS, PaaS, SaaS），以及这些模式如何影响安全风险的分布和类型。 2. **风险评估框架**：详细说明如何应用通用的风险评估方法，如ISO 27005或NIST SP 800-30，来适应云计算的特性。 3. **特定风险分析**：深入探讨云计算特有的安全问题，如数据隐私、多租户环境中的隔离失败、供应商依赖性、合规性和法律管辖权问题。 4. **控制措施与最佳实践**：提供针对云安全的控制策略和最佳实践，包括身份和访问管理、加密、审计和监控、灾难恢复计划等。 5. **利益与风险平衡**：讨论云计算带来的成本节省、灵活性和可扩展性的益处，以及与之相伴的安全风险，并提供如何在两者之间找到平衡的建议。 6. **推荐策略**：为组织提供如何选择合适的云服务商、制定风险管理政策、以及在合同谈判中确保适当的安全条款的指导。 7. **法规遵从性**：探讨欧盟和全球其他地区的法律法规，以及如何确保云服务符合GDPR等数据保护法规。 8. **合作与信息共享**：强调在公私部门之间建立联系和信息共享的重要性，以提高整体的网络安全态势。 9. **未来风险展望**：展望新兴技术和趋势，如边缘计算、人工智能在云中的应用，及其对安全风险的影响。这份指南对于理解云计算环境下的安全挑战、实施有效的风险管理策略以及制定相应的企业安全政策具有很高的参考价值。读者可以从中获取到实用的工具和建议，以保护他们的云资产免受各种威胁。

Cloud Computing

Benefits, risks and recommendations for information security

FIGURE 1: FEATURES OF PUBLIC, PARTNER AND PRIVATE CLOUDS

SURVEY OF EXISTING WORK

In compiling this report, we surveyed existing work on cloud security risks and their mitigation,

including Security Guidance for Critical Areas of Focus in Cloud Computing (Cloud security Alliance (55))

Cloud Cube Model: Selecting Cloud Formations for Secure Collaboration (Jericho Forum (56)) and

Assessing the Security Risks of Cloud Computing (Gartner (57)) in order to understand where to focus

its results for maximum added value.

Cloud Computing

BENEFITS, RISKS AND RECOMMENDATIONS FOR INFORMATION SECURITY

1. SECURITY BENEFITS OF CLOUD COMPUTING

It is hardly necessary to repeat the many rain-

forests’ worth of material which has been

written on the economic, technical and

architectural and ecological benefits of cloud

computing. However, in the direct experience

of the members of our expert group, as well as

according to recent news from the ‘real world’, an examination of the security risks of cloud computing

must be balanced by a review of its specific security benefits. Cloud computing has significant potential

to improve security and resilience. What follows is a description of the key ways in which it can

contribute.

SECURITY AND THE BENEFITS OF SCALE

Put simply, all kinds of security measures are cheaper when implemented on a larger scale. Therefore

the same amount of investment in security buys better protection. This includes all kinds of defensive

measures such as filtering, patch management, hardening of virtual machine instances and

hypervisors, human resources and their management and vetting, hardware and software redundancy,

strong authentication, efficient role-based access control and federated identity management

solutions by default, which also improves the network effects of collaboration among various partners

involved in defense. Other benefits of scale include:

 Multiple locations: most cloud providers have the economic resources to replicate content in

multiple locations by default. This increases redundancy and independence from failure and

provides a level of disaster recovery out-of-the-box.

 Edge networks: storage, processing and delivery closer to the network edge mean service

reliability and quality is increased overall and local network problems are less likely to have

global side-effects.

 Improved timeliness of response: larger to incidents: well-run larger-scale systems, for

example due to early detection of new malware deployments, can develop more effective and

efficient incident response capabilities.

 Threat management: cloud providers can also afford to hire specialists in dealing with specific

security threats, while smaller companies can only afford a small number of generalists.

SECURITY AS A MARKET DIFFERENTIATOR

Security is a priority concern for many cloud customers [see the survey: An SME perspective on Cloud

Computing] – customers will make buying choices on the basis of the reputation for confidentiality,

Put simply, all kinds of security measures are

cheaper when implemented on a larger scale.

Therefore the same amount of investment in

security buys better protection.

Cloud Computing

Benefits, risks and recommendations for information security

integrity and resilience, and the security services offered by a provider, more so than in traditional

environments. This is a strong driver for cloud providers to improve their security practices and

compete on security.

STANDARDISED INTERFACES FOR MANAGED SECURITY SERVICES

Large cloud providers can offer a

standardised, open interface to managed

security services (MSS) providers offering

services to all its customers. This potentially

creates a more open and readily available

market for security services where customers

can switch providers more easily and with

lower set-up costs.

RAPID, SMART SCALING OF RESOURCES

The list of cloud resources which can be rapidly scaled on demand already includes, e.g., storage, CPU

time, memory, web service requests and virtual machine instances, and the level of granular control

over resource consumption is increasing as technologies mature.

A cloud provider has the potential to dynamically reallocate resources for filtering, traffic shaping,

encryption, etc, in order to increase support for defensive measures (e.g., against DDoS attacks) when

an attack is likely or it is taking place. When this ability for dynamic resource reallocation is combined

with appropriate resource optimisation methods, the cloud provider may be able to limit the effect

that some attacks could have on the availability of resources that legitimately hosted services use, as

well as limit the effect of increasing the use of resources by the security defence to combat such

attacks. Achieving this requires however that the provider implements adequate coordination of

autonomics for security defence and for resource management and optimisation.

The ability to dynamically scale defensive resources on demand has obvious advantages for resilience.

Furthermore, the more all kinds of individual resources can be scaled in a granular way, without scaling

all of the system resources, the cheaper it is to respond to sudden (non-malicious) peaks in demand.

AUDIT AND EVIDENCE-GATHERING

IaaS offerings support on-demand cloning of virtual machines. In the event of a suspected security

breach, the customer can take an image of a live virtual machine – or virtual components thereof – for

offline forensic analysis, leading to less down-time for analysis. With storage on tap, multiple clones

can be created and analysis activities parallelised to reduce investigation time. This improves the ex-

post analysis of security incidents and increases the probability of tracking attackers and patching

The ability to dynamically scale defensive

resources on demand has obvious advantages

for resilience. Furthermore, the more all kinds

of individual resources can be scaled in a

granular way, without scaling all of the

system resources, the cheaper it is to respond

to sudden (non-malicious) peaks in demand.

Cloud Computing

BENEFITS, RISKS AND RECOMMENDATIONS FOR INFORMATION SECURITY

weaknesses. However, it does presume the customer has access to trained forensic experts (which is

not a standard cloud service as of writing).

It can also provide more cost-effective storage

for logs, thus allowing more comprehensive

logging without compromising performance.

Pay as you go cloud storage brings

transparency to your audit storage costs and

makes adjusting to meet future audit log

requirements easier. This makes the process of identifying security incidents as they happen more

efficient (7).

MORE TIMELY AND EFFECTIVE AND EFFICIENT UPDATES AND DEFAULTS

Virtual machine images and software modules used by customers can be pre-hardened and updated

with the latest patches and security settings according to fine-tuned processes; moreover, IaaS cloud

service APIs also allow snapshots of virtual infrastructure to be taken regularly and compared with a

baseline (e.g., to ensure software firewall rules have not changed) (8). Updates can be rolled out many

times more rapidly across a homogenous platform than in traditional client-based systems that rely on

the patching model. Finally in PaaS and SaaS models the applications are more likely to have been

hardened to run outside the enterprise environment, which makes them likely to be more portable

and robust than the equivalent enterprise software (where it exists). They are also more likely to be

regularly updated and patched in a centralized fashion minimizing the window of vulnerability.

AUDIT AND SLAS FORCE BETTER RISK MANAGEMENT

The need to quantify penalties for various risk scenarios in SLAs and the possible impact of security

breaches on reputation (see Security as market differentiator) motivate more rigorous internal audit

and risk assessment procedures than would otherwise be exist. The frequent audits imposed on CPs

tend to expose risks which would not otherwise have been discovered, having therefore the same

positive effect.

BENEFITS OF RESOURCE CONCENTRATION

Although the concentration of resources undoubtedly has disadvantages for security (see

Updates can be rolled out many times more

rapidly across a homogenous platform than in

traditional client-based systems that rely on

the patching model.

剩余124页未读，继续阅读

Narcissisoul

粉丝: 0
资源: 1

ENISA云计算安全风险评估指南

云计算风险评估方法-云计算开源产业联盟.pdf

ENISA云计算安全风险评估

ENISA云计算安全风险评估.pdf

在选择云计算服务提供商时，应如何运用ENISA的云计算安全风险评估指南进行安全评估，以确保服务符合行业标准和安全实践？

ENISA发布云计算安全风险评估报告：欧洲视角与专家见解

云计算平台安全风险评估系统分析.docx

云计算平台安全风险评估系统分析.pdf

云计算平台安全风险评估系统分析-最新范文.docx

云计算平台安全风险评估系统分析-最新范文.pdf

云计算关键领域安全指南.docx

最新资源