本書以獨特而系統的方式討論了云的安全和隱私方面以及相關的云取證。云計算是一種新興的革命性技術，它一直在改變人們的生活和工作方式。但是，隨著云計算和相關服務的不斷發展，安全和隱私已成為一個關鍵問題。本書由該領域頂級專家撰寫，集中討論了云的安全性和隱私性，以及云數據、應用程序和服務的數字取證。本書前半部分可使讀者對云安全的背景有全面的了解，這將有助于他們進入本書后半部分的數字調查、指導和建議。本書第一部分包括云基礎架構的安全性，數據的機密性，云IaaS中的訪問控制，云安全和隱私管理，黑客攻擊和對策，風險管理和災難恢復，審計和合規和安全服務（SaaS）；第二部分包括云取證的模型、挑戰和方法，云中的網絡恐怖主義，云中的數字取證過程和模型，數據采集，數字證據管理、演示和法庭準備，數字證據分析和取證服務（FaaS）。本書可作為信息系統、信息技術、計算機和網絡取證以及計算機科學領域高級本科生和研究生的學習參考書，也可供安全專業人員、數字取證從業者和云服務提供商參考使用。
List of Contributorsxv
Part ⅠCloud Securityand Privacy
Introduction to the Cloud and Fundamental Security and Privacylssues of the Cloud
Hassan Takabi and Mohammod GhasemiGol
1．1 Introduction
1．2 Cloud Computing and Securitylssues
1．3 Identity Securityin the Cloud
1．4 Information Securityin the Cloud
1．4．1 Confidentiality
1．4．2 Integrity
1．4．3 Availability
1．4．4 Accountability
1．4．5 Nonrepudiation
1．4．6 Key Considerations in Information Security
1．4．7 Information Security Analysis in Some Clouds
1．5 Cloud Security Standards
1．6 Conclusion
References
2 Cloudlnfrastructure Security
Mohammad Ghasemi Go
2．1 Introduction
2．2 Infrastructure Securityin the Cloud
2．2．1 Infrastructure Security： The Network Level
2．2．1．1 Network-LeveI Mitigation
2．2．2 Infrastructure Security： The Host Level
2．2．2．1 SaaS and PaaS Host Security
2．2．2．2 IaaS Host Security
2．2．3 Infrastructure Security： The Application Level
2．2．4 Hypervisor Securityin the Cloud
2．3 Infrastructure Security Analysis in Some Clouds
2．3．1 Force URL
2．3．2 Amazon AWS
2．3．3 Google App Engine
2．3．4 Microsoft Azure
2．4 Protecting Cloud Infrastructure
2．4．1 Software Maintenance and Patching Vulnerabilities
2．4．2 The Technology Stack
2．4．3 Disaster Recovery
2．4．4 Monitoring and Defending Infrastructure
2．4．5 Incident Response Team
2．4．6 Malicious Insiders
2．5 Conclusion
References
3 Confidentiality of Data in the Cloud： Conflicts Between Security and Cost
Nathalie Boracaldo and Joseph Glider
3．1 Introduction．
3．2 Background
3．3 Confidentiality： Threats and Adversaries
3．4 Achieving Data Confidentiality in Cloud Storage Systems
3．4．1 Cryptographic Solutions
3．4．1．1 Stage Encryption
3．4．1．2 End-to-End Encryption
3．5 Reducing Cloud Storage System Costs through Data-Reduction
Techniques
3．6 Reconciling Data Reduction and Confidentiality
3．6．1 Existing Techniques
3．7 Trusted Decrypter
3．7．1 Overview
3．7．2 Secure Data-Reduction Operations
3．7．2．1 Preliminaries
3．7．2．2 Detailed Secure Data-Reduction Operations
3．7．2．3 Write Requests
3．7．2．4 Read Requests
3．7．2．5 Rekeying Requests
3．7．2．6 File Deletion
3．7．2．7 Offboarding Requests
3．7．2．8 Secure Data Deletion
3．7．3 Securing the CriticaI Module
3．7．4 Security Analysis
3．7．4．1 Data Confidentiality
3．7．4．2 Data Confidentiality in the Presence of Deduplication
3．7．4．3 Security Impact of Different Technologies
3．7．5 TD Overhead and Performance Implications
3．8 Future Directions for Cloud Storage Confidentiality with Low Cost
……
Part Ⅱ Cloud Forensics
新書資訊