1. Explain the differences between public, private, and community clouds. What are some of the factors to consider when choosing which of the three to use?2. How do cloud threats differ from traditional threats? Against what threats are cloud services typically more effective than local ones?3. You are opening an online store in a cloud environment. What are three security controls you might use to protect customersâ credit card information? Assume that the information will need to be stored.4. Define TNO. Name three types of data for which one should want TNO encryption.5. How do cloud services make DLP more difficult? How can customers wishing to enforce DLP mitigate this issue?6. You run a website in an IaaS environment. You wake up to discover that your website has been defaced. Assume you are running a web server and an FTP server in this environment and that both an application proxy and a firewall sit between those servers and the Internet. All of your VMs are running SSH servers. What logs might help you determine how the website was defaced? What kind of information would you look for?7.Sidebar 8-2shows that personal biographical informationâaddresses, phone numbers, email addresses, credit card numbers, etc.âcan not only be used by attackers to hijack accounts but can also be collected from one hijacked account to help an attacker gain access to the next. How can you protect yourself against this kind of attack? What can cloud providers change to mitigate such attacks?8. Describe an FIdM authentication system for which you have been a Subject. What organization acted as the IdP? What service acted as the SP?9. Name three security benefits of FIdM over requiring users to use a new set of credentials.10. Why is it important to sign SAML Assertions? Why is it not important to sign OAuth Access Tokens?11. In OAuth, what attack does the Client Secret mitigate? Why do you think the Client Secret is optional for Public Clients?12. Name four services that might allow you to control a VM in an IaaS environment. What entity controls each service?13. What are some characteristics of systems in which you would expect application whitelisting to work well? What about systems in which you would expect it to not work well?Sidebar 8-2 One Manâs Single Point of Failure:In August 2012, journalist Mat Honan had his digital life turned upside down. He was playing with his daughter when his Apple iPhone suddenly shut off. When the phone rebooted, all of his data were gone. Luckily, Honan had set the phone to regularly backup to his Apple laptop, so he wasnât concerned. Soon after he opened the laptop, the screen went gray, and he knew he had a real problem. Before long, Honan discovered that, in addition to his phone, his laptop and Apple iPad had been wiped, and that his Gmail and Twitter accounts had been hacked as well. Hereâs an abridged version of how it happened [HON12]: The hackers started with the original target, which was Honanâs Twitter account (â@matâ). The Twitter account linked to his personal website, which in turn listed his Gmail address. When the hackers went to Gmail to attempt to reset Honanâs account password, Gmail showed them Honanâs obscured emergency alternate email address: m****n@me.com. me.com is owned by Apple. The hackers correctly guessed that the me.com address would be Honanâs username for Apple iCloud, a service that ties all of a userâs Apple devices together with data stored at Appleâs data centers. Because the hackers had perpetrated attacks like this before, they knew that the only additional information they would need to hack the iCloud account would be Honanâs mailing address and the last four digits of his credit card number. The mailing address was easy enough: They just searched the who is record for Honanâs website. To get the last four digits of the credit card, the hackers went to Amazon. They correctly assumed that Honanâs Amazon username would be his Gmail address and, given that and the information they already had, they were able to trick Amazon into showing them the last four digits of the credit cards associated with the account.Once the hackers had those four digits, they had all they needed to get Apple customer service to let them into Honanâs iCloud account. Thanks to a very useful iCloud security feature that allows users to remotely wipe Apple devices in the event of theft, the attackers were able to delete all of Honanâs data from his devices within minutes.Perhaps the most amazing part of this story is the way Honan found out how the attack went down: The hackers told him. One of the hackers reached out to him and, in exchange for a promise not to press charges, detailed the whole event. While one can take a number of valuable security lessons from this story, identifying and eliminating single points of failure is an important one. The obvious single point of failure is the linkage between Honanâs devices and hisiCloud account. He used his Apple laptop to back up his Apple phone, and he allowed his Apple iCloud account permission to remotely wipe both the laptop and phone. But on top of that, it was because all of his accounts were intertwinedâalbeit in a nonobvious wayâthat the attack was even possible.
Our Service Charter
-
Excellent Quality / 100% Plagiarism-Free
We employ a number of measures to ensure top quality essays. The papers go through a system of quality control prior to delivery. We run plagiarism checks on each paper to ensure that they will be 100% plagiarism-free. So, only clean copies hit customers’ emails. We also never resell the papers completed by our writers. So, once it is checked using a plagiarism checker, the paper will be unique. Speaking of the academic writing standards, we will stick to the assignment brief given by the customer and assign the perfect writer. By saying “the perfect writer” we mean the one having an academic degree in the customer’s study field and positive feedback from other customers. -
Free Revisions
We keep the quality bar of all papers high. But in case you need some extra brilliance to the paper, here’s what to do. First of all, you can choose a top writer. It means that we will assign an expert with a degree in your subject. And secondly, you can rely on our editing services. Our editors will revise your papers, checking whether or not they comply with high standards of academic writing. In addition, editing entails adjusting content if it’s off the topic, adding more sources, refining the language style, and making sure the referencing style is followed. -
Confidentiality / 100% No Disclosure
We make sure that clients’ personal data remains confidential and is not exploited for any purposes beyond those related to our services. We only ask you to provide us with the information that is required to produce the paper according to your writing needs. Please note that the payment info is protected as well. Feel free to refer to the support team for more information about our payment methods. The fact that you used our service is kept secret due to the advanced security standards. So, you can be sure that no one will find out that you got a paper from our writing service. -
Money Back Guarantee
If the writer doesn’t address all the questions on your assignment brief or the delivered paper appears to be off the topic, you can ask for a refund. Or, if it is applicable, you can opt in for free revision within 14-30 days, depending on your paper’s length. The revision or refund request should be sent within 14 days after delivery. The customer gets 100% money-back in case they haven't downloaded the paper. All approved refunds will be returned to the customer’s credit card or Bonus Balance in a form of store credit. Take a note that we will send an extra compensation if the customers goes with a store credit. -
24/7 Customer Support
We have a support team working 24/7 ready to give your issue concerning the order their immediate attention. If you have any questions about the ordering process, communication with the writer, payment options, feel free to join live chat. Be sure to get a fast response. They can also give you the exact price quote, taking into account the timing, desired academic level of the paper, and the number of pages.