>> Welcome back to the course. In the last video,
we wrapped up our discussion on database forensics.
In this video we're going to talk about
the different types of Cloud computing.
Just a quick pre-assessment question here.
Hybrid is a type of Cloud environment.
Is that true or false?
That one's true and we'll talk about
a hybrid environment in just a little bit.
So the Cloud. Why do we care about the Cloud.
What does this Cloud thing we keep hearing about it.
Essentially the Cloud is you're putting your data
on somebody else's computers for lack of better words.
What are some of the benefits?
>> Why do companies use this?
>> Well, elasticity.
I can scale my company up or down.
If I need more resources,
market certainly scale up and down.
Think of like a tax firm, for example,
during tax season here in
the United States like the early part of the year,
basically January to April.
If I'm a tax firm, I need to scale up because I'm going
to have a lot of people come in
>> and get their taxes done.
>> But then like in June or July,
summer time, I don't really need that.
Because it's not taxes and there are
some businesses that do taxes year-round.
But for the most part,
the big push if taxes is the early part of the year.
I don't need that many resources.
The Cloud allows a small company
like that to scale up or down.
Reliability. Like Amazon gives
me X number of up-time
guaranteed base of my subscription.
If one of their data centers goes down,
it's not a big deal, because
they've got another one running my stuff as well.
As an organization,
especially like an e-commerce company,
it allows you to actually stay up and keep
that up time and maintain your business.
Cost. As things are done in scale like Cloud computing,
the cost goes down.
You can get a low cost for Azure as a smaller company,
it can save you a lot of money.
NIST document that cover Cloud is
>> going to be SP800-145.
>> Now you don't need to know that for the CFA exam now,
but it's a good document, to go and take a look at.
Some concerns in the Cloud are going to be things like
security for obvious reasons.
You're putting your information
of someone else's computers.
You don't necessarily have control over that,
as well as compliance issues.
Tying into the security aspect,
if they're not maintaining the security
and lighten your data gets stolen,
then you may have some compliance issues that
your company actually is responsible for.
Different types of Cloud computing.
Infrastructure as a Service, Platform as a Service,
and Software as a Service.
Infrastructure as a service as the name
implies, all the networking,
the data storage virtualization, computing power.
All this stuff is not computing power,
but your networking stuff like that.
All this stuff is basically outsource,
you're outsourcing that for your company
to the Cloud service provider.
Advantages of that, it allows for
scalability as well as you
know allows you to take advantage of smaller company,
allows you to take advantage of
computing power that's available for the Cloud.
Platform as a Service.
This is generally used for software development.
The provider provides the storage,
the middleware, the operating system, etc.
It allows you to scale up or down on
a particular software development project.
That's the main advantage of it.
Software as a Service.
This is going to be your on-demand application.
Think of things like Google Docs or any type
of generalized thing you interact
>> with on a daily basis.
>> Like your Netflix subscription, you're Hulu,
even watching like YouTube,
even though unless you have like
YouTube TV, it's not a paid thing.
But if you have like Netflix or something like that,
this is going to be a software as a service model where
you pay at a monthly fee and you get X number of stuff.
Some of the advantages for
you as a organization doing a
>> Software as a Service.
>> If you're using a particular thing.
One thing I like to use is called Click Funnels.
Click Funnels allows you to build
>> out different webpages,
>> stuff like that pretty easily.
There are Software as a Service.
I pay a monthly fee and then
I can build out these different things.
Some of the advantages, you don't
have to sit there and patch it,
you also don't have to worry about
version control as you're
updating patches and then compatibility.
The Software as a Service generally works everywhere.
No matter which browser you log into,
you can still access your stuff.
Different types of Cloud Models.
We have public, private community in hybrid,
as we mentioned in the pre-assessment question.
Public Cloud.
This is again going to be things
that is available for public use,
things like your Gmail or Yahoo mail, etc.
It doesn't have to be e-mail,
it can be anything that's available for
public use. Private Cloud.
Let's go and be a single tenant environment
is what is called essentially
this is a company using "Internal Cloud."
For sensitive information.
Usually takes some authentication,
silicon username or password,
as well as hopefully some multi-factor authentication.
There were essentially like a text
with a special code that you have to type in.
This is adventitious for security and compliance.
If you remember, we talked about are
possible security and compliance issues with the Cloud.
This one's advantage in the aspect
of we can generally control the security a little
better and maintain better compliance. community cloud.
This is for organizations that have
a similar interests to whether that
interest is revolved around compliance or policies.
This is just companies that have
a similar interests so that
I can share this community cloud.
Then of course, hybrid Cloud is
just a combination of any of
these most commonly seen with
like a combination of a public and private Clouds.
Different types of Cloud computing threads.
Things like data breach or loss,
it's the most common threat.
Using the Cloud to do attacks.
We'll talk about that in the next video.
Insecure APIs or interfaces share technology issue.
The community Cloud environment,
insider threats as well as privilege escalation.
Then different types of Cloud attacks,
you'll just want to be familiar with.
We're not going to deep dive into any of these.
I'm just going to go through them here.
Session hijacking is a name
implies attacker takes over your session.
Session riding, which is basically
just cross-site request forgery in the Cloud.
SQL injection, everyone
should be familiar with that by now.
DNS attacks SOAP or wrapping around the SOAP,
side-channel attacks and then DDoS attacks as well.
This video, we'll just cover some different types of
Cloud computing in different types of Cloud attacks.
The next video we're going to talk about
different types of Cloud crime.