• Log In
  • Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

Security Architecture

MIS 5214 - Section 001 - David Lanter

Security Architecture

MIS 5214.001 ■ Spring 2023 ■ David Lanter
  • Homepage
  • Instructor
  • Syllabus
  • Schedule
    • First Half of the Semester
      • Unit 01 – Threat Environment
      • Unit 02 – System Security Plan
      • Unit 03 – Planning and Policy
      • Unit 04 – Cryptography
      • Unit 05 – Secure Networks
      • Unit 06 – Firewalls
      • Unit 07 – Mid-Term Exam
    • Second Half of the Semester
      • Unit 08 – Access Control
      • Unit 9 Host Hardening
      • Unit 10 Application Security
      • Unit 11 Data Protection
      • Unit 12 – Incident and Disaster Response
  • Deliverables
    • Assignments
    • Case Studies
      • Case Study 1 – A High Performance Computing Cluster Under Attack: The Titan Incident
      • Case Study 2 – Data Breach at Equifax
    • Participation
    • Team Project
  • Harvard Coursepack
  • Zoom Meeting

NIST 800 145 The NIST Definition of Cloud Computing

February 8, 2023 by David Lanter 25 Comments

Filed Under: 05 - Secure Networks Tagged With:

Reader Interactions

Comments

  1. Asha Kunchakarra says

    February 10, 2023 at 10:02 am

    Something interesting about this publication is the definition of the service models. There are three types of models, Software as a Service, Platform as a Service, and Infrastructure as a Service. This is extremely important in building applications and determining the type of security that would be best for the application. It also helps in terms of pricing because you are able to determine what fits best for your business and organization.

    Log in to Reply
    • Nishant Shah says

      February 10, 2023 at 8:28 pm

      There is a great benefit for organizations in utilizing SaaS as they would not need to hire developers to build and maintain the application. However, some companies that have been offering stand-alone versions of their products now force the customers to subscribe for the cloud-based versions for the “latest” features. From the individual customer’s perspective the recurring cost may not be justified as opposed to paying one-time license fee.

      Log in to Reply
  2. Aayush Mittal says

    February 10, 2023 at 11:54 am

    Resource pooling was an interesting topic to read and understand. It is one of the essential characteristics of cloud model. The provider’s computing resources are pooled to serve multiple consumers using a multi-tenant model, with different physical and virtual resources dynamically assigned and reassigned according to consumer demand. Some of the benefits includes:
    -> High Availability
    -> Load Balancing
    -> High Performance Computing
    -> If one client is over using the space assigned from that host, that virtual client is moved to another physical host.

    Log in to Reply
    • Abayomi Aiyedebinu says

      February 12, 2023 at 3:22 pm

      Hi Aayush,

      I agree with you one of the benefits of using cloud that makes it stand out is High Availability. High availability is all about keeping systems alive in case anything goes wrong. High availability is the quality of computing infrastructure that allows it to function even in the event of components failure.

      Log in to Reply
  3. Nishant Shah says

    February 10, 2023 at 8:16 pm

    It was interesting to read the characteristics of cloud computing. The five essential characteristics include on-demand self-service, rapid elasticity, resource pooling, broad network access and measured service. The on-demand self-service and measured service are couple of characteristics that distinguishes cloud computing from mere virtualization of resources.

    Log in to Reply
    • Mengqi Xiong says

      February 13, 2023 at 9:14 pm

      Hi Nishant,

      On-demand self-service and measured service are noteworthy features of how to distinguish cloud computing from traditional IT infrastructure. Allowing users to provision and manage their own computing resources as needed makes it easier for them to quickly access the computing resources they need when they need them.

      Log in to Reply
  4. Chinenye Marylyn Akinola says

    February 11, 2023 at 5:04 am

    Information on cloud computing is available in the NIST Definition of Cloud Computing publication. The document defines cloud computing as on-demand network access to a pool of adjustable computer resources that is shared. Additionally, it discusses the four deployment models, three service models, and five fundamental qualities. Private cloud under deployment models was one aspect that particularly caught my attention. A single company made up of several business units is given exclusive access to the cloud infrastructure. Virtualization, which provides prospects for lowering infrastructure costs, raising operational efficiency, and enhancing deployment flexibility, is a crucial component of a private cloud. The increased level of control provided to the company by a private cloud, which is only accessible by one enterprise, is one of its benefits. In this manner, organizations are able to modify and set up the environment in accordance with the computing requirements of a business.

    Log in to Reply
  5. Sunam Rijal says

    February 11, 2023 at 7:57 am

    The document aims to clarify the concept of cloud computing and provide a common understanding of its various components, including infrastructure, platform, and software as a service (SaaS). The definition covers five essential characteristics of cloud computing: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. The document also outlines the three service models of cloud computing: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). It is an important reference for organizations and individuals looking to understand the basics of cloud computing and its components.

    Log in to Reply
    • Frank Kofi Kpotivi says

      February 11, 2023 at 10:40 am

      Technology as a Service (IaaS). The consumer is given the power to set up processing, storage, networks, and other basic computer resources so that they can deploy and run any software, such as operating systems and apps. Although the consumer has no management or control over the underlying cloud infrastructure, they do have some limited influence over some networking components, operating systems, storage, and deployed applications (e.g., host firewalls)

      Log in to Reply
  6. Frank Kofi Kpotivi says

    February 11, 2023 at 10:38 am

    A shared pool of reconfigurable computing resources (such as networks, servers, storage, applications, and services) that can be quickly deployed and released with little administration work or service provider involvement is made possible by the cloud computing concept.
    There are three service models, four deployment methods, and five key criteria make up this cloud model.

    Log in to Reply
    • Pranavi Yadalam Sekhar says

      February 11, 2023 at 11:44 am

      Hi Frank,
      Yes, you’re right. Organizations can more easily deploy and release resources as needed thanks to the cloud computing system, which gives access to a pool of programmable computer resources that is shared. Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS), three cloud computing service models, let businesses decide how much management and control they want over their computing resources. Additionally, organizations have freedom in how they want to access and use these resources thanks to the four deployment strategies (public, private, hybrid, and community). A system is considered to be “cloud” if it meets the five essential characteristics of cloud computing (on-demand self-service, broad network access, resource pooling, quick flexibility, and measured service).

      Log in to Reply
  7. Pranavi Yadalam Sekhar says

    February 11, 2023 at 11:04 am

    I got to know about , cloud computing is a model of shared pool of configurable computing resources. This cloud computing having five essential characteristics:
    On demand self service
    Broad network access
    Resource pooling
    Rapid elasticity
    Measured service

    Service Models:
    SaaS: web browser, web based email
    PaaS: consumer will use programming languages, libraries, services,tools supported by provider
    IaaS: host firewalls

    Log in to Reply
    • Shadrack Owusu says

      February 14, 2023 at 11:27 am

      Comparing the three service models you mentioned, I believe the best way for any organization to know which model to choose will be based on what they need to accomplish. There are situations where one or a combination of two or more of the models (i.e. SaaS, PaaS, and IaaS) will be needed to address business needs.

      Log in to Reply
  8. Shepherd Shenjere says

    February 11, 2023 at 11:27 pm

    In simple terms cloud computing is the delivery of computing services including servers, storage, databases, networking, software, analytics, and intelligence—over the Internet (“the cloud”) to offer faster innovation, flexible resources, and economies of scale. NIST 800 145 did an enormous job by pointing out some of the service models they provide which includes Software as a Service, Platform as a Service and Infrastructure as a Service.

    Log in to Reply
  9. Mengqi Xiong says

    February 12, 2023 at 10:07 am

    Cloud computing is an evolving paradigm. the NIST definition describes essential aspects of cloud computing and is intended to broadly compare cloud services and deployment strategies, and to provide a benchmark for discussions ranging from cloud computing to how it can best be used. Rapid elasticity is an interesting point. Resources could be deployed and released elastically, sometimes automatically, so they can be scaled up and down quickly and on demand. To the client, the resources that can be accessed appear to be unlimited and can be purchased in any quantity at any time. In addition, the service could be measured. Cloud computing systems automatically control and optimize resource usage by using some metering capability associated with abstract information corresponding to the type of service. Resource usage can be monitored, controlled, and reported in order to provide transparency of service consumption to both the service provider and the customer.

    Log in to Reply
    • Abayomi Aiyedebinu says

      February 12, 2023 at 3:19 pm

      Hi Mengqi,

      I found the concept of cloud elasticity very interesting as well because cloud elasticity can be automatic, without need to perform capacity planning in advance of the occasion, or it can be a manual process where the organization is notified, they are running low on resources and can then decide to add or reduce capacity when needed.

      Log in to Reply
  10. Jill Brummer says

    February 12, 2023 at 2:01 pm

    I liked that, in the reading, the definitions were provided for the types of service models. SaaS (Software as a Service), PaaS (Platform as a Service) and IaaS (Infrastructure as a service). I often hear these terms and it was helpful to gain more of an understanding of what each service model entails.

    Log in to Reply
  11. David Vanaman says

    February 12, 2023 at 3:04 pm

    I am impressed that NIST’s definition of what constitutes a cloud was both very well defined in 2011 and that the definitions are flexible enough that they are still valid over a decade later. Not many standards are written so early in a technology’s emergence and remain essentially unchanged though a decade of rapid expansion and adoption.
    They types of cloud infrastructure could perhaps be updated with different names to reflect the say that the concept has matured. I don’t think private cloud ever took off as a concept, resources owned and operated by a single entity are still thought of in traditional IT terms, even if off-premise. The only community clouds that I am aware of taking off are government isolated clouds, such as the secure cloud, DoD cloud, etc. Publiuc cloud is, of course, where the majority of the focus of cloud went and what the average user thinks of when referring to cloud. Hybrid is always a catch-all term, but i don’t see much use of the concept. Clouds seem to keep sharply defined edges, either public or isolated.

    Log in to Reply
  12. Abayomi Aiyedebinu says

    February 12, 2023 at 3:15 pm

    I found one of the characteristics of cloud computing very interesting, Cloud Elasticity which is the property of a cloud to grow or shrink capacity for CPU, memory, and storage resources to adapt to the changing demands of an organization. Cloud Elasticity provides businesses and IT organizations the ability to meet any unexpected jump in demand, without the need to maintain standby equipment to handle that demand.

    Log in to Reply
    • Shepherd Shenjere says

      February 14, 2023 at 10:06 am

      Hello Abayomi,

      Great point Abayomi. Cloud Elasticity is one of the most commonly cloud computing characteristic talked about in the cloud arena.

      Log in to Reply
  13. Nicholas Foster says

    February 12, 2023 at 5:06 pm

    I found it incredible that they were able to summarize cloud computing in 3 pages. The layers of complexity that exist with cloud computing are contained within the 3 NIST pages outlined. Condensing it into 5 characteristics, three service models, and four deployment models. One of the key characteristics that makes cloud computing so versatile and widely adopted is rapid elasticity. The ability to scale up & down at a moment’s notice makes you really contemplate having on-prem if your environment doesn’t call for it. The cost savings to be able to shut off what you don’t use and then pay only for what you do and be able to just add more with minimal effort is quite a luxury. There are, however, drawbacks to this in that if you forget to scale down, you are being charged even when not in use.

    Log in to Reply
  14. Wei Zhang says

    February 12, 2023 at 5:40 pm

    The NIST Cloud Computing Definition document describes important aspects of cloud computing and provides a foundation for how to use cloud computing better. Cloud computing is a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources. The cloud model includes five essential characteristics, three service models, and four deployment models. the key point is the private cloud under the deployment model. The private cloud is a cloud computing environment that is used exclusively by a single organization consisting of multiple consumers, where all hardware and software resources are used exclusively and accessible only by a single customer. Private clouds combine many of the advantages of cloud computing — including resilience, scalability, and ease of service delivery — with access control, security, and resource customization for local infrastructure.

    Log in to Reply
  15. Elizaveta Ibeme says

    February 12, 2023 at 10:16 pm

    A point that caught my attention is that according to NIST’s definition of cloud computing, a private cloud solution could be owned/managed by the organization using the service, by a third party, or both simultaneously. Prior to reading this publication, it was my understanding that the term “hybrid cloud” would capture a situation in which the cloud solution is managed by both a third party and the organization. Reading this publication made me realize that a private cloud solution refers to a case in which all services are located in a single on or off premises location. On the other hand, in the case of a hybrid cloud solution, the organization splits the services between different types of cloud

    Log in to Reply
  16. Shadrack Owusu says

    February 14, 2023 at 10:39 am

    An interesting take for me about cloud computing is cloud deployment. The cloud deployment model identifies the specific type of cloud environment based on ownership, scale, and access, as well as the cloud’s nature and purpose. NIST lists four (4) deployment models namely private cloud, public cloud, community cloud, and hybrid cloud.
    Private cloud- The cloud infrastructure is provisioned for exclusive use by a single organization.
    Hybrid cloud. The cloud infrastructure is a composition of two or more distinct cloud infrastructures (private, community, or public).
    Public cloud. The cloud infrastructure is provisioned for open use by the general public.
    Community cloud. The cloud infrastructure is provisioned for exclusive use by a specific community of consumers from organizations that have shared concerns.

    Log in to Reply
  17. Samuel Omotosho says

    February 25, 2023 at 12:53 pm

    One of the key takeaways from this reading was a better understanding of cloud computing.
    I believe large companies (AWS and Google come to mind) sell cloud computing through the PaaS service model, and I’m curious what security measures they have in place to ensure that individuals do not abuse their resources.

    Log in to Reply

Leave a Reply Cancel reply

You must be logged in to post a comment.

Primary Sidebar

Weekly Discussions

  • 01 – Introduction (1)
  • 01 – Threat Environment (3)
  • 02 – System Security Plan (6)
  • 03 – Planning and Policy (7)
  • 04 – Cryptography (4)
  • 05 – Secure Networks (7)
  • 06 – Firewalls (5)
  • 08 – Access Control (7)
  • 09 – Host Hardening (5)
  • 10 – Application Security (5)
  • 11 – Data Protection (3)
Fox School of Business

Copyright © 2023 · Course News Pro on Genesis Framework · WordPress · Log in