VMware VCLOUD REQUEST MANAGER 1.0.0 Guide de l'utilisateur télécharger pdf (Page 35)

Technical white paper

Cloud Security Alliance

The Cloud Security Alliance is a not-for-profit-organization that provides guidance, education, and promotes best practices

for security in cloud computing. The Cloud Security Alliance’s mission statement is:

“To promote the use of best practices for providing security assurance within cloud computing, and provide education on

the uses of cloud computing to help secure all other forms of computing.”

In accordance with their mission statement, the Cloud Security Alliance publishes security guidance and a cloud controls

matrix to address security concerns in cloud computing.

The HP ArcSight products address several areas that are outlined in the security guidance document.

The Cloud Security Alliance guidance document, Security Guidance for Critical Areas of Focus in Cloud Computing, defines 14

domains for operating in a cloud environment and provides recommendations on how to securely operate in those domains.

Each domain addresses a specific area of concern with respect to security and cloud computing. The HP ArcSight products

address areas of concern in the Cloud Security Alliance Domains listed below:

Domain 5– Information Management and Data Security

5.4.1 Locations and Access

5.6.5 Database and File Activity Monitoring

Domain 6 – Interoperability and Portability

6.3.2 Portability Recommendations (logging)

6.3.3 Recommendations for Different Cloud Models – log traces

Domain 9 – Incident Response

9.3.2 Detection and Analysis

9.3.3 Data Sources

9.3.4 Forensic and Other Investigative Support for Incident Analysis

9.3.5 Containment, Eradication, and Recovery

Domain 10 – Application Security

10.2 Authentication, Authorization, and Compliance – Application Security Architecture in the Cloud

10.3 Identity Management

10.5 Monitoring Applications in the Cloud

10.5.1 Application Monitoring in the Cloud

10.6.3 Architecture Recommendations

Domain 14 – Security As A Service

14.4.7 Security Information & Event Management (SIEM)

14.7.7 SIEM SECaaS Requirements

SECASS Category 7 – Security Information and Event Management Implementation Guidance

https://cloudsecurityalliance.org/research/secaas/

The Cloud Security Alliance Security Control Matrix contains a list of controls that identify and describe security controls that

are applicable to cloud computing. The security controls in Table 1 can be addressed with the HP ArcSight solution.

1 2 ... 30 31 32 33 34 35 36 37 38 39

Pas de commentaire

VMware VCLOUD REQUEST MANAGER 1.0.0 Guide de l'utilisateur Page 35