HTTP/2 302 server: nginx date: Sat, 02 Aug 2025 22:42:40 GMT content-type: text/plain; charset=utf-8 content-length: 0 x-archive-redirect-reason: found capture at 20100105181531 location: https://web.archive.org/web/20100105181531/https://safari.oreilly.com/9780596806453 server-timing: captures_list;dur=0.487927, exclusion.robots;dur=0.018269, exclusion.robots.policy;dur=0.009011, esindex;dur=0.009539, cdx.remote;dur=7.283799, LoadShardBlock;dur=103.519179, PetaboxLoader3.datanode;dur=66.739213 x-app-server: wwwb-app218 x-ts: 302 x-tr: 132 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0 set-cookie: wb-p-SERVER=wwwb-app218; path=/ x-location: All x-rl: 0 x-na: 0 x-page-cache: MISS server-timing: MISS x-nid: DigitalOcean referrer-policy: no-referrer-when-downgrade permissions-policy: interest-cohort=() HTTP/2 301 server: nginx date: Sat, 02 Aug 2025 22:42:42 GMT content-length: 0 x-archive-orig-content-length: 0 location: https://web.archive.org/web/20100105181531/https://my.safaribooksonline.com/9780596806453?portal=oreilly x-archive-orig-server: SWS + Microsoft-HTTPAPI/2.0 x-archive-orig-date: Tue, 05 Jan 2010 18:15:31 GMT x-archive-orig-connection: close x-archive-orig-set-cookie: Safari=cookieversion=2&portal=oreilly&key=&sessionid=267414a8-0f65-4954-b795-aab091ad0ec8&ref=Undefined&oref=http%3a%2f%2foreilly.com%2f; Path=/; Domain=safari.oreilly.com cache-control: max-age=1800 memento-datetime: Tue, 05 Jan 2010 18:15:31 GMT link: ; rel="original", ; rel="timemap"; type="application/link-format", ; rel="timegate", ; rel="first memento"; datetime="Tue, 05 Jan 2010 18:15:31 GMT", ; rel="memento"; datetime="Tue, 05 Jan 2010 18:15:31 GMT", ; rel="next memento"; datetime="Thu, 21 Oct 2010 09:42:59 GMT", ; rel="last memento"; datetime="Tue, 30 Aug 2011 14:01:09 GMT" content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: archive.org web.archive.org web-static.archive.org wayback-api.archive.org athena.archive.org analytics.archive.org pragma.archivelab.org wwwb-events.archive.org x-archive-src: TLA-20100105175706-00407-ia360917-c/TLA-20100105180637-00396-ia360906.us.archive.org.warc.gz server-timing: captures_list;dur=0.628592, exclusion.robots;dur=0.024075, exclusion.robots.policy;dur=0.011884, esindex;dur=0.012124, cdx.remote;dur=46.519859, LoadShardBlock;dur=1001.450071, PetaboxLoader3.resolve;dur=986.922778, PetaboxLoader3.datanode;dur=236.788610, load_resource;dur=242.915813 x-app-server: wwwb-app218 x-ts: 301 x-tr: 1320 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0 x-location: All x-rl: 0 x-na: 0 x-page-cache: MISS server-timing: MISS x-nid: DigitalOcean referrer-policy: no-referrer-when-downgrade permissions-policy: interest-cohort=() HTTP/2 302 server: nginx date: Sat, 02 Aug 2025 22:42:42 GMT content-type: text/plain; charset=utf-8 content-length: 0 x-archive-redirect-reason: found capture at 20110812055209 location: https://web.archive.org/web/20110812055209/https://my.safaribooksonline.com/9780596806453?portal=oreilly server-timing: captures_list;dur=0.609633, exclusion.robots;dur=0.029249, exclusion.robots.policy;dur=0.015676, esindex;dur=0.011977, cdx.remote;dur=8.414380, LoadShardBlock;dur=293.742342, PetaboxLoader3.datanode;dur=152.762281, PetaboxLoader3.resolve;dur=128.811117 x-app-server: wwwb-app218 x-ts: 302 x-tr: 331 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0 x-location: All x-rl: 0 x-na: 0 x-page-cache: MISS server-timing: MISS x-nid: DigitalOcean referrer-policy: no-referrer-when-downgrade permissions-policy: interest-cohort=() HTTP/2 200 server: nginx date: Sat, 02 Aug 2025 22:42:44 GMT content-type: text/html; charset=utf-8 x-archive-orig-content-length: 118914 x-archive-orig-expires: Mon, 05 Apr 1970 03:12:07 GMT x-archive-orig-server: SWS + Microsoft-HTTPAPI/2.0 x-archive-orig-cache-control: private x-archive-orig-p3p: CP="CAO DSP COR LAW CUR ADMi DEVi PSAi IVAi IVDi CONo HISi TELo OUR IND UNI" x-archive-orig-date: Fri, 12 Aug 2011 05:52:10 GMT x-archive-orig-connection: close x-archive-orig-set-cookie: Safari=cookieversion=2&cookie-monster=false&portal=oreilly&key=&sessionid=38b3ba85-f8da-4050-85f2-1faafc30755e&ref=Undefined&oref=%2f; Path=/; Domain=my.safaribooksonline.com x-archive-orig-set-cookie: cookie-monster=true; Path=/; Expires=Thu, 12 Aug 2021 05:52:10 GMT x-archive-guessed-content-type: text/html x-archive-guessed-charset: utf-8 memento-datetime: Fri, 12 Aug 2011 05:52:09 GMT link: ; rel="original", ; rel="timemap"; type="application/link-format", ; rel="timegate", ; rel="first memento"; datetime="Fri, 12 Aug 2011 05:52:09 GMT", ; rel="memento"; datetime="Fri, 12 Aug 2011 05:52:09 GMT", ; rel="last memento"; datetime="Fri, 12 Aug 2011 05:52:09 GMT" content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: archive.org web.archive.org web-static.archive.org wayback-api.archive.org athena.archive.org analytics.archive.org pragma.archivelab.org wwwb-events.archive.org x-archive-src: WIDE-20110812050836-crawl416/WIDE-20110812054347-00232.warc.gz server-timing: captures_list;dur=0.716625, exclusion.robots;dur=0.026817, exclusion.robots.policy;dur=0.011774, esindex;dur=0.013264, cdx.remote;dur=19.911958, LoadShardBlock;dur=1173.247989, PetaboxLoader3.datanode;dur=1094.834395, PetaboxLoader3.resolve;dur=167.879658, load_resource;dur=120.676395 x-app-server: wwwb-app218 x-ts: 200 x-tr: 1505 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0 x-location: All x-rl: 0 x-na: 0 x-page-cache: MISS server-timing: MISS x-nid: DigitalOcean referrer-policy: no-referrer-when-downgrade permissions-policy: interest-cohort=() content-encoding: gzip

Content Tabs

• Home
• Subscribe
• Free Trial

• Category Map
• My Quick Links
  • Books
  • Video
  • Rough Cuts
  • Short Cuts
  • Tools

Search:criteria:Entire SiteBook/Video TitlesShort CutsRough Cuts

Sign In

• Cloud Security and Privacy

• By: Tim Mather; Subra Kumaraswamy; Shahed Latif

• Publisher: O'Reilly Media, Inc.

• Pub. Date: September 22, 2009

• Print ISBN-13: 978-0-596-80276-9

• Pages in Print Edition: 336

• Amazon.com® Reviews

• Subscriber Rating: [2 Ratings] Subscriber Reviews

• Overview
• Table of Contents
• Extras
• Search This Book
• Help

Amazon.com Reader Reviews • Subscriber Reviews • Browse Similar Topics

Overview

Other Readers Also Read...

Cloud Computing and SOA Convergence in Your Enterprise: A Step-by-Step Guide
by David S. Linthicum

Top Sellers in this Category

Hacking: The Art of Exploitation, 2nd Edition
by Jon Erickson

Social Engineering: The Art of Human Hacking
by Christopher Hadnagy

Mastering VMware vSphere™ 4
by Scott Lowe

Malware Analyst's Cookbook and DVD: Tools and Techniques for Fighting Malicious Code
by Michael Hale Ligh; Steven Adair; Blake Hartstein; Matthew Richard

The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws
by Dafydd Stuttard; Marcus Pinto

You may regard cloud computing as an ideal way for your company to control IT costs, but do you know how private and secure this service really is? Not many people do. With Cloud Security and Privacy, you'll learn what's at stake when you trust your data to the cloud, and what you can do to keep your virtual infrastructure and web applications secure. Ideal for IT staffers, information security and privacy practitioners, business managers, service providers, and investors alike, this book offers you sound advice from three well-known authorities in the tech security world. You'll learn detailed information on cloud computing security that-until now-has been sorely lacking.

• Review the current state of data security and storage in the cloud, including confidentiality, integrity, and availability

• Learn about the identity and access management (IAM) practice for authentication, authorization, and auditing of the users accessing cloud services

• Discover which security management frameworks and standards are relevant for the cloud

• Understand the privacy aspects you need to consider in the cloud, including how they compare with traditional computing models

• Learn the importance of audit and compliance functions within the cloud, and the various standards and frameworks to consider

• Examine security delivered as a service-a different facet of cloud security

Subscriber Reviews

Average Rating:  Based on 2 Ratings

"Cloud Security and Privacy, 1st Edition" - by angel Lambertt on 03-JUN-2010
Reviewer Rating:
I need this books to review
Report as Inappropriate

Browse Similar Topics

Top Level Categories:
Information Technology & Software Development

Sub-Categories:
Information Technology & Software Development > Networking
Networking > Security
Information Technology & Software Development > Operating Systems & Server Administration
Operating Systems & Server Administration > Virtualization

Some information on this page was provided using data from Amazon.com®. View at Amazon >

Table of Contents

 

Copyright

Preface

Section P.1. Who Should Read This Book

Section P.2. What’s in This Book

Section P.3. Conventions Used in This Book

Section P.4. Using Code Examples

Section P.5. Safari® Books Online

Section P.6. How to Contact Us

Section P.7. Acknowledgments

Download Chapter
1 TokenChapter 1. Introduction

Section 1.1. “Mind the Gap”

Section 1.2. The Evolution of Cloud Computing

Section 1.3. Summary

Download Chapter
1 TokenChapter 2. What Is Cloud Computing?

Section 2.1. Cloud Computing Defined

Section 2.2. The SPI Framework for Cloud Computing

Section 2.3. The Traditional Software Model

Section 2.4. The Cloud Services Delivery Model

Section 2.5. Cloud Deployment Models

Section 2.6. Key Drivers to Adopting the Cloud

Section 2.7. The Impact of Cloud Computing on Users

Section 2.8. Governance in the Cloud

Section 2.9. Barriers to Cloud Computing Adoption in the Enterprise

Section 2.10. Summary

Download Chapter
1 TokenChapter 3. Infrastructure Security

Section 3.1. Infrastructure Security: The Network Level

Section 3.2. Infrastructure Security: The Host Level

Section 3.3. Infrastructure Security: The Application Level

Section 3.4. Summary

Chapter 4. Data Security and Storage

Section 4.1. Aspects of Data Security

Section 4.2. Data Security Mitigation

Section 4.3. Provider Data and Its Security

Section 4.4. Summary

Download Chapter
1 TokenChapter 5. Identity and Access Management

Section 5.1. Trust Boundaries and IAM

Section 5.2. Why IAM?

Section 5.3. IAM Challenges

Section 5.4. IAM Definitions

Section 5.5. IAM Architecture and Practice

Section 5.6. Getting Ready for the Cloud

Section 5.7. Relevant IAM Standards and Protocols for Cloud Services

Section 5.8. IAM Practices in the Cloud

Section 5.9. Cloud Authorization Management

Section 5.10. Cloud Service Provider IAM Practice

Section 5.11. Guidance

Section 5.12. Summary

Download Chapter
1 TokenChapter 6. Security Management in the Cloud

Section 6.1. Security Management Standards

Section 6.2. Security Management in the Cloud

Section 6.3. Availability Management

Section 6.4. SaaS Availability Management

Section 6.5. PaaS Availability Management

Section 6.6. IaaS Availability Management

Section 6.7. Access Control

Section 6.8. Security Vulnerability, Patch, and Configuration Management

Section 6.9. Summary

Download Chapter
1 TokenChapter 7. Privacy

Section 7.1. What Is Privacy?

Section 7.2. What Is the Data Life Cycle?

Section 7.3. What Are the Key Privacy Concerns in the Cloud?

Section 7.4. Who Is Responsible for Protecting Privacy?

Section 7.5. Changes to Privacy Risk Management and Compliance in Relation to Cloud Computing

Section 7.6. Legal and Regulatory Implications

Section 7.7. U.S. Laws and Regulations

Section 7.8. International Laws and Regulations

Section 7.9. Summary

Download Chapter
1 TokenChapter 8. Audit and Compliance

Section 8.1. Internal Policy Compliance

Section 8.2. Governance, Risk, and Compliance (GRC)

Section 8.3. Illustrative Control Objectives for Cloud Computing

Section 8.4. Incremental CSP-Specific Control Objectives

Section 8.5. Additional Key Management Control Objectives

Section 8.6. Control Considerations for CSP Users

Section 8.7. Regulatory/External Compliance

Section 8.8. Other Requirements

Section 8.9. Cloud Security Alliance

Section 8.10. Auditing the Cloud for Compliance

Section 8.11. Summary

Download Chapter
1 TokenChapter 9. Examples of Cloud Service Providers

Section 9.1. Amazon Web Services (IaaS)

Section 9.2. Google (SaaS, PaaS)

Section 9.3. Microsoft Azure Services Platform (PaaS)

Section 9.4. Proofpoint (SaaS, IaaS)

Section 9.5. RightScale (IaaS)

Section 9.6. Salesforce.com (SaaS, PaaS)

Section 9.7. Sun Open Cloud Platform

Section 9.8. Workday (SaaS)

Section 9.9. Summary

Download Chapter
1 TokenChapter 10. Security-As-a-[Cloud] Service

Section 10.1. Origins

Section 10.2. Today’s Offerings

Section 10.3. Summary

Download Chapter
1 TokenChapter 11. The Impact of Cloud Computing on the Role of Corporate IT

Section 11.1. Why Cloud Computing Will Be Popular with Business Units

Section 11.2. Potential Threats of Using CSPs

Section 11.3. A Case Study Illustrating Potential Changes in the IT Profession Caused by Cloud Computing

Section 11.4. Governance Factors to Consider When Using Cloud Computing

Section 11.5. Summary

Download Chapter
1 TokenChapter 12. Conclusion, and the Future of the Cloud

Section 12.1. Analyst Predictions

Section 12.2. Survey Says?

Section 12.3. Security in Cloud Computing

Section 12.4. Program Guidance for CSP Customers

Section 12.5. The Future of Security in Cloud Computing

Section 12.6. Summary

Download Chapter
1 TokenAppendix A. SAS 70 Report Content Example

Section A.1. Section I: Service Auditor’s Opinion

Section A.2. Section II: Description of Controls

Section A.3. Section III: Control Objectives, Related Controls, and Tests of Operating Effectiveness

Section A.4. Section IV: Additional Information Provided by the Service Organization

Download Chapter
1 TokenAppendix B. SysTrust Report Content Example

Section B.1. SysTrust Auditor’s Opinion

Section B.2. SysTrust Management Assertion

Section B.3. SysTrust System Description

Section B.4. SysTrust Schedule of Controls

Download Chapter
1 TokenAppendix C. Open Security Architecture for Cloud Computing

Section C.1. Legend

Section C.2. Description

Section C.3. Key Control Areas

Section C.4. Examples

Section C.5. Assumptions

Section C.6. Typical Challenges

Section C.7. Indications

Section C.8. Contraindications

Section C.9. Resistance Against Threats

Section C.10. References

Section C.11. Control Details

Download Chapter
1 TokenGlossary

Colophon

Index

Extras

The publisher has provided additional content related to this title.

Description	Content
Visit the catalog page for Cloud Security and Privacy	Catalog Page
Visit the errata page for Cloud Security and Privacy	Errata

---

About Safari Books Online • Terms of Service • Gift Subscriptions • Privacy Policy • Contact Us • Corporate Licenses • Help • Accessibility |

Copyright 2011Safari Books Online. All rights reserved.