Cloud Security Solutions and Services

Question:

Often if an organization does not specialize in information security it is best that the organization hires the services of another company that will provide them with cloud services along with security protocols. What do you call this company (NOTE: Answer must be expressed in its acronym). 

Summary:

We need to provide an acronym (short form made from the initials of the name) for a company that provides cloud services and security to other organizations.

Correct Answer:

Acronym: CSSS

Full form: Cloud Security Solutions and Services.

Explanation:

A cloud provider is a company that offers some component of cloud computing (storing and accessing data through the internet, instead of the hard disk)-typically Infrastructure, Software, or a Platform to other businesses or individuals. Cloud providers are often referred to as cloud service providers.

It is the same concept as to how a house owner pays for a necessary thing such as electricity or gas. The companies must pay only for cloud services they use.

 

SERVICES PROVIDED BY CLOUD PROVIDERS:

Infrastructure as a Service (IaaS):

            They provide the foundation for the computing environment. It provides,

• • • This service offers computer architecture and infrastructure.
    • All computing environments in the virtual environment so that multiple users can access them, resources include data storage, virtualization, servers, and networking.
    • Most vendors are responsible for managing the above resources.
    • Users will be responsible for handling other resources such as applications, data, runtime, and middleware.

 

Users of IaaS: Sysadmins

IaaS providers:

• • • Amazon Web Services EC2.
    • Gogrid
    • Rackspace.com

 

Software as a Service (SaaS):

It provides,

• • • On-demand service
    • Pay per use of application software to users.
    • Independent platform.
    • Don’t need to install the software on the pc.
    • Runs a single instance of the software.
    • Available for multiple end-users.
    • Cheap cloud computing.
    • Accessible via a web browser.

 

Users of SaaS: End-users

SaaS providers:

• • • Google ecosystem such as Gmail, Google docs, Google drive.
    • Microsoft office 365
    • HR Help desk
    • Customer relationship management services such as Salesforce.

 

Platform as a Service (PaaS):

This service is made up of a programming language execution environment like an operating system, a web server, or a database. PaaS users developers. It provides,

• • • encapsulate the environment, where users can build compile, and run their programs without worrying about the underlying infrastructure.
    • In this model you manage the data and the application resources, all other resources are managed by the vendor.

 

PaaS providers:

• • • Amazon Web Services elastic Beanstalk.
    • Google app engine
    • Windows Azure
    • Heroku

 

Now we will know about the security provided by the cloud.

Cloud security is the process of protecting cloud-based data, applications, and infrastructure from cyberattacks. The cloud service providers provide only the services and not the security, the security is provided by the cloud security services. Cloud security tools are provided by either the CSP are the customers, which includes

1. CWPPS– Cloud workload protection platforms that consistently protect workloads like VMs, applications, or data.

2. CASBs– cloud access security brokers, which serve as the gatekeeper between customers and cloud services.

3. CSPM– cloud security posture management, which is a group of products and services that monitor cloud security and compliance issues.

4. SASE– Secure access service edge, a cloud security model that unifies network and security tools in one management console.

 

This service is offered through a group of firewalls, applications, VPN controls, software-based tools, policies. The companies which offer these security and computing services are known as cloud security solutions and services.

 

Some of these examples of companies are:

DataDog, HackerOne, Intruder, Cipher, Sophos, HyTrust, ProofPoint, etc.

 

Also, read Python3 How can I improve my code follow the instruction?