Iaas Availability Management : Iaas Providers Availability Considerations

UNIT 9 P3- EXPLAIN the key components required for client workstations to connect to a network and access network resources

Customers also need take the responsibility of updating new versions and maintenances (Eamonn, 2015). The responsibility of CSPs is to provide a cloud infrastructure for customer self-service themselves, also provides training handbook or guidance for help and support. The most popular IaaS example is Amazon Web Services also called AWS.

purposes of this paper, only PaaS and SaaS will be discussed. According to the Chief

Organizations use the Cloud in a variety of different service models (SaaS, PaaS, IaaS) and deployment models (Private, Public, Hybrid). There are a number of security issues/concerns associated with cloud computing but these issues fall into two broad categories: Security issues faced by cloud providers (organizations providing software-, platform-, or infrastructure-as-a-service via the cloud) and security issues faced by their customers.In most cases, the provider must ensure that their infrastructure is secure and that their clients’ data and applications are protected while the customer must ensure that the provider has taken the proper security measures to protect their information.

Mandatory Access Control (MAC) uses a hierarchy approach to control access to resources, such as data files. The system administrator is responsible for the settings in a MAC environment. All access to resource objects is controlled by the operating system based on setting configured by the system administrator. With MAC it is not possible for users to change the access control for any resource. Mandatory Access Control starts with security labels, which contain two types of information and are assigned to all resource objects on the system. The two types of information are classification, such as confidential or top secret and a category, which is basically an indication of the project or department to which the object is available, or an indication of the management level.

An employee’s supervisor must request for role-based access to e-PHI using the employee’s job descriptions. IT Department provides restricted role-based access to a client’s network environment/e-PHI and reviews audit logs and information systems activities as needed to monitor the appropriate workforce member is logging into the client environment at any given time.

This cloud model promotes availability and is composed of five essential characteristics, three service models, and four deployment models” (NIST 2009).

The purpose of access control, and the rights and privileges is to give users and objects associated data and records in the database. Objects are tables, views, rows and columns. The goal of this design is to manage and secure database and assigning such as user name and password. Management procedures include reading, insert, update and delete or execute stored procedures. In fact, some models such as access control in mandatory access control (MAC), Discretionary Access Control (DAC) and the role of building access control (RBAC). Each one of them has some qualities. And mandatory access control (MAC) means decisions are made by the central authority, but they cannot change the access for individual owner of the object and the owner's rights.

The following groups (ShopFloor), (HumanResources), (ShopFloor, Manger), and (HumanResources, Manger) will be created with designated acces contols. (ShopFloor, Manger) and (HumanResources, Manger) groups has a common inherited object which is Manger. Access control will be granted based on the two groups needing to access the same object.

“New users are assigned access based on the content of an access request. The submitter must sign the request and indicate which systems the new user will need access to and what level of access will be needed. A manager’s approval is required to grant administrator level access.”

This research is aimed at conducting a comparative study of the different access control models and report on them. The prescribed text mentions Role Based Access Control in chapter 5 but does not give details on this model and does not provide information on the other access control models. Hence this report seeks to explain the different access control models and compare them based on an analysis of academic literature.

Access control requires unique user identification, emergency access procedure, automatic log-off, and encryption and decryption of data. In order to maintain confidentiality, integrity and availability of data, it is important to control access to the information system. Controls prevent unauthorized users from accessing the system and/or altering data. They also prevent authorized users from making unauthorized changes to data. Some common examples are User-based, Role-based and Context-based access control with the strongest security on Context-based access control.

The safety and security of the WWTC’s physical space and assets is a shared responsibility of all members of the WWTC community. To meet this obligation, WWTC has established Access Control policy provisions to address the design, administration and management of Access Control systems and measures to ensure their integrity. Access Control privileges are determined and assigned by WWTC administrators based on the specific needs and requirements of WWTC and the key/card holder.

Cloud computing security is a set of control based technologies and policies that must follow certain rules in order to protect applications, data and any information associated with cloud computing. It is known to provide excellent services but is still not supported by organizations due to privacy issues that includes security and privacy protection. As they obstruct the managers as well as the

Abstract - Cloud computing is architecture for providing computing service via the internet on demand and pay per user access to a pool of shared resources namely networks, storage, servers, services and applications, without physically acquiring them. So it saves managing cost and time for organizations. Cloud security is becoming a key differentiator and competitive edge between cloud providers.