29 November 2011
Cloud Computing Security v3
The Cloud Security Alliance (CSA) has restructured and re-written its flagship document Security Guidance for Critical Areas of Focus in Cloud Computing.
The application security domain (one of twelve) focuses on:
- Secure Software Development Life Cycle (SDLC)
- Authentication, authorisation, compliance — application security architecture in the cloud
- Identity and the consumption of identity as it relates to cloud application security
- Entitlement processes and risk-based access management as it relates to cloud encryption in cloud-based applications
- Application authorization management (policy authoring/update, enforcement)
- Application penetration testing for the cloud (general practices and nuances specific to cloud-based applications)
- Monitoring applications in the cloud
- Application authentication, compliance, and risk management and the repercussions of multi-tenancy and shared infrastructure
- The difference between avoiding malicious software and providing application security.
Posted on: 29 November 2011 at 00:47 hrs
Comments are filtered automatically and should appear shortly after they been checked.