Cloud Computing Security and Risk Mitigation Strategies for VideoDev

Desklib provides solved assignments and past papers to help students succeed.

Topic: - Cloud Computing
Student ID: –
Student Name: -
Student E-mail: -

Table of Contents
Introduction: -.......................................................................................................................... 5
Proposed Architectures: -.........................................................................................................6
Cloud computing: -...............................................................................................................6
Cloud computing architecture: -...........................................................................................7
Benefits of cloud computing: -.............................................................................................8
Types of cloud computing architecture: -.............................................................................9
Requirements of the cloud architecture: -.........................................................................12
Cloud Computing risk assessment: -.......................................................................................13
Risk assessment based on the guiding principles: -............................................................13
Risk assessment matrices for cloud computing: -...............................................................14
Management of risk assessment and service provider: -...................................................15
The sensitivity of the data in risk assessment: -.................................................................15
Information Security assessment: -........................................................................................17
Purpose of the security assessment: -................................................................................17
Types of Information security assessment: -......................................................................18
Issues and challenges faced in information security and its solution: -..............................18
Challenges faced today: -................................................................................................... 18
The Solutions to the issues and challenges are: -...............................................................19
Changes to the BCP: -.............................................................................................................20
2

Data Backup: -.................................................................................................................... 20
Disaster recovery: -............................................................................................................ 20
Microservice management: -................................................................................................. 23
Forum Interaction: -............................................................................................................... 24
Conclusion: -...........................................................................................................................25
Reference: -............................................................................................................................ 26
3

List of figures: -
Figure 1: Stack of cloud computing..........................................................................................5
Figure 2: Cloud computing Framework....................................................................................7
Figure 3: Scalable architecture model......................................................................................8
Figure 4: Failover architecture model......................................................................................8
Figure 5: Service oriented architecture....................................................................................9
Figure 6: Cloud hosting architecture......................................................................................10
4

Introduction: -
In this report, we will be going to discuss the various cloud computing methodology and the
strategies that must be followed if the events such as threat occurrence and any other
unwanted interruption occurred. As the company, VideoDev is trying to move its
infrastructure of computer in a cloud computing environment for increasing the company’s
responsiveness and flexibility.
I was a consultant have provided with all the required information in the report below such
as uses of cloud computing, benefits of using cloud computing, threats associated with the
cloud computing and the assessment of the information security with the techniques of
data recovery and data backup.
5

Proposed Architectures: -
Cloud computing: -
Cloud computing is a term used by host services delivery on the internet. The services are
divided broadly into three categories which are: -
1) Platform as a service (PaaS)
2) Software as a service (SaaS)
3) Infrastructure as a service (IaaS)
The name of cloud computing is taken from its symbol of cloud that was used to show the
internet diagram and flowchart. There are three different characteristics that make cloud
computing different from web hosting performed traditionally. The innovation that is
significant is distributed computing and virtualization, as well as improvement in high-speed
internet accessing that, have been accelerating the interest in cloud computing nowadays. A
Cloud service provider can be both public and private. A public cloud service provider sells
its service to almost everyone who is present on the internet, for example, amazon web is
the world’s largest cloud services provider. A private cloud service is a proprietary network
and the data centers which supply the host services for limited people. Whether private or a
public cloud provider, the main goal is to provide scalable, easy accessing to the IT services
and computing resources (Tole, 2015, p.49-58.).
A hybrid cloud is another approach to cloud computing that needs to be implemented in the
VideoDev organization.It is a combination of private cloud services that are on-premises and
the public cloud services which are included with automation and orchestration in between
the private and public cloud services. All the companies can work critically on all the
sensitive applications which are on the private and public cloud that handles the spikes or
burst on demand. The main goal in a hybrid system of cloud is for creating a scalable,
automated and unified environment. It takes advantage of the features of public cloud
service providers. With maintaining the critical data for mission. The organization is
continuously on increasing the embracing of different multi-cloud applications and model
and using them for multiple applications like providers of infrastructure as a service. This led
to enabling of all the applications that used to migrate in between different providers of
6

cloud for operating it in between various cloud providers. Many organizations used to adopt
different multicolored for different reasons. They are able to do such things to minimize risk
of cloud outrage service and take advantage of competitive range of pricing with individual
provider. The implementation of multi-cloud applications development is a challenge
because of the difference between the cloud provider service and APIs. Or an application
program interface. The deployment of cloud that is multi-cloud can be easier as the service
providers converge with the APIs to become much homogenous from an industrial point of
view such as an interface for open cloud computing (Bazi, et al., 2018, p.549-588).
Cloud computing architecture: -
It is a high performance and advanced network and deployment of a network which is a
base for cloud computing. It started taking incorporating visualization shape on-demand
deployment and the services for internet delivery. Looking at the business processes and
the need to run the business efficiently while providing better products and services than
what is available to the competitor (Shakulo, 2015).
Architecture for cloud can help to make the cloud computing of the VideoDev efficient and
perform the following tasks: -
1) Hosting workloads variably
2) Applications that faces interactive users
3) Backend jobs with batch style
4) Deployment of workloads and quickly scaled out the rapid provisioning using
machines that are virtual and also the machines that are physical.
5) Supporting redundant programs, highly scalable, self-recovering, programmable
models which allow recovering the workloads with many unavoidable software and
hardware failures.
6) Monitoring of resources using the time for enabling and rebalancing the need for
allocation (Simmon, et al., 2015, p.40-45.).
7

Figure 1: Stack of cloud computing
Types of cloud computing architecture: -
1) Architecture for hybrid cloud site: -An architecture for a hybrid site of cloud can help in
protecting the application you are using for the system as well as site redundancy if
leveraged the different dedicated host servers and private and public cloud. It can be
deployed in the VideoDev as This will result in the portability of data as well as
infrastructure which are selected in between the servers. This approach to hybrid
application results in the launching ability for the functioning of servers in the number of
clouds servers may be private or public. This kind of architecture is used for avoiding the
lock-In in the cloud service. Through this, we can also take advantage of the resources of
multiple clouds. The hybrid approach we disused can be used easily in both the
applications of hybrid IT situations and hybrid cloud (Kumar, 2017).
2) Architecture with multi-datacenter: - The design of a single site redundant may often
handle many different issues that are prevalent causing downtime in between the layers
of infrastructure. This has happened when the entire site remains unreachable. This
mostly happens when it gets misconfigured DNS sending all the traffic in a different
8

direction than what is required. This kind of architecture can be deployed in the
VideoDev as the traditional approach is very expensive which is a challenge. A site that is
redundant is designed nearly on double the infrastructure cost. For the redundancy of
geographic, there will be a need for second site. This site will be resulting in the budget
double to the first site.
3) Architecture for the scalable multi-cloud: - It is multi-cloud architecture mostly offers
the flexibility of hosting a primary application in cloud infrastructure of a private
network. This can be deployed because it has the ability to get into a public cloud bust
with additional necessary capabilities.
Figure 2: Scalable architecture model
4) Architecture for multi-cloud failover: - The cloud service provider that is second can be
used to provide continuity in the business process for the configuration and the
resources of launch by either provider. There is a certain factor that needs to be
considered while using this which includes the private address of IP and public address
of IP and service level of agreement. In VideoDev there is a problem of switching the
cloud and an architecture of multi-cloud will make this easy to migrate freely and
therefore can easily be deployed in the company.
9

Figure 3: Failover architecture model
5) Service-oriented architecture: -
A service-oriented architecture is a guide pattern for business solutions for creating an
organized way to use the components of computing. It also has a layered architecture that
means top perform very different tasks and can be very useful to the VideoDev. with having
such variable facility size with special materials to handle requirements the efficiency
approach needs to be approached differently at every single stage of the workflow. The
cloud that is implemented must be capable of assisting. The tasks on the floor are logical as
well as an efficient possible way (Shikfa, A., & Kolesnikov, V., 2014).
Figure 4: Service-oriented architecture
10

6) Dedicated and cloud architecture: - The solution for hybrid cloud application can use
private and public resources of cloud as an internal or external supplement for services
of a data center. As being a private company, VideoDev can receive the public resources
also which will be beneficial for the organization. This can easily be used to compensate
with the requirement of physical location. The database if is not able to transition with
the platform of cloud computing then the other applications of tiers will not have some
kind of restrictions. In this kind of situations, the architecture of a hybrid cloud can easily
use the VPN or virtual private network for implementing the tunnel that is encrypted
across a network IP in between the Dedicated servers and cloud.
t is public
Figure 5: Cloud hosting architecture
Benefits of cloud computing architecture: -
The cloud services are very useful for the business of VideoDev and the end-users. There are
major seven benefits of the cloud application: -
1) Elasticity: - Various companies can scale up cloud computing as per their needs which
increases and also scales down when whenever the demand decreases. The result in
eliminating the massive investment needs in the local infrastructure, which does not
always remain active.
2) Self-service provisioning: - The end users may spin up the computer resources and for
almost every type of demanded workload. This result in the elimination of traditional
needs for it is IT administration to manage computer resources and provision.
11

3) Workload resilience: - The cloud service providers are often trying to implement
resources that are redundant for ensuring the storage to keep user run the important
workloads across the globe.
4) Pay per use: -The resources of the cloud computing are measurable generally at a
granular level which enables the user to only pay for the resources they are using.
5) Migration and flexibility: - organization is able to move workloads from the cloud or to
the cloud onto a different platform which was desired automatically for efficient cost-
saving and using the services as it arrives.
6) Security: - The different levels of authorization acquire the different role of users. Just,
for instance, one of the security characteristics is data privacy. Which describes the user
that can perform a certain operation such as change, copy, deletion of information,
creating an object, etc. it also includes the protection of the system form the virus’s
attacks and malware attacks.
7) Reliability:- The bugs in the system program code result in the decrease in reliability,
problem may occur in any other system components, hardware failure, etc. the software
reliability can be measured by counting the percentage of operation which is to be
completed without any error and correctly or one more method can be used like
tracking the average period of time that a system performs without failing.
For example -the update process of the database is able to roll back the updates
when the updating processes (Seffers, 2013, p.18(4).).
There are two types of cloud computing services which are as follows: -
1) Emerging cloud services and technologies.
2) Security cloud computing (Li, 2014, p.3032-3035)
12