Cloud securitySyllabus

Subject code

İF-2210y

Credits

5

Student workload

90

Semester

Autumn semester

Academic year

3

Subject type

Mandatory

Form of education

Full-time

Language of instruction

Azerbaijani

In-class hours

a) 30 saat - mühazirə b) 15 saat - seminar c) 15 saat - laboratoriya

Out-of-class hours

a) 40 saat – sərbəst iş b) 50 saat- layihə işi və ya məsləhət saatı

The subject provides students with the formation of theoretical knowledge and practical skills on the basics of cloud technologies and ensuring information security in cloud environments. within the scope of the subject, the characteristics of cloud services, differences from traditional IT services, security models and risks and vulnerabilities specific to cloud environments are studied. students are introduced to basic security mechanisms such as data encryption, authentication, access and authorization management, security monitoring, and incident detection and response. assessing and managing risks in cloud environments, backup and recovery strategies, and defining and enforcing security requirements are reviewed. principles of compliance with iso/iec 27001, GDPR and other international standards and requirements are also explored. the subject is aimed at developing the skills of building cloud security architecture, security strategy formulation and secure management of cloud environments in students.

• lecture
• laboratory work
• interactive discussion
• seminar
• presentations
• case study
• teamwork
• project-based learning
• problem-based learning

1. 1

   CLO 1: Cloud service principles provide an overview of the basic service provided and understand its differences, advantages and disadvantages from traditional services.

2. 2

   CLO 2: Able to provide theoretical and practical solutions to create simple solutions using the cloud and implement appropriate security measures.

3. 3

   CLO 3: Be able to explain serverless computing, its features and differences, and the responsibilities related to security issues in these services.

4. 4

   CLO 4: Knows the methods and criteria for measuring the scope of risks and gaps in the cloud.

5. 5

   CLO 5: Able to use network security tools in the cloud.

6. 6

   CLO 6: It is able to recognize the symptoms of data leakage in the cloud, track it, find its causes and prevent it.

1. 1.
   Introduction. cloud architectureLecture

   Within the subject, the basic concepts of cloud technologies and the general structure of cloud architecture are studied. cloud service models and their usage characteristics, as well as working principles of different cloud storage models are reviewed. the key features of cloud environments are explained, such as resource sharing, scalability, flexibility, and on-demand service delivery. it also examines the main components of cloud architecture and their interactions.

2. 2.
   Scope of cloud securityLecture

   Within the scope of the topic, the scope of cloud security and issues of ensuring security at different structural levels of the cloud environment are studied. the characteristics, interactions and security requirements specific to each level are reviewed at the infrastructure, metastructure, infostructure, and application structure levels. the principles of protecting data, services, management mechanisms and technological resources in the cloud environment are explained. also, the process model of cloud security and the systematic organization of security activities are examined.

3. 3.
   Security issues in the cloudLecture

   Within the framework of the topic, the main security issues arising in cloud environments and the principles of their management are studied. the main elements of the cloud security model and the role of these elements in protecting data, services and resources are reviewed. the security threats and risks inherent in the cloud environment are explained, as well as the main control mechanisms aimed at preventing them. it also examines the purpose of cloud security policy, its main components, and its role in the systematic application of security requirements.

4. 4.
   Risk management in the cloudLecture

   Within the framework of the topic, the principles of identifying, evaluating and managing information security risks in cloud environments are studied. the main cloud management tools used for the secure management of cloud resources and services and their functions are reviewed. approaches to the selection and application of security controls to reduce risks are explained. it also examines the trade-offs between security, cost, performance, flexibility, and ease of use in cloud risk management.

5. 5.
   Legal issues, contracts and electronic data disclosureLecture

   Within the framework of the topic, the main legal issues related to data storage and processing in cloud environments are studied. legal requirements related to contractual relationships, disclosure and submission of electronic data are reviewed when using cloud services. the application of data protection and privacy standards as well as GDPR requirements in cloud environments is explained. it also examines the importance of service level agreements (slas) in defining the security, availability, and responsibilities of the parties to cloud services.

6. 6.
   Compliance, auditing and data managementLecture

   Within the framework of the topic, the principles of compliance, auditing and secure data management in cloud environments are studied. the issues of ensuring compliance of cloud services with relevant legal, regulatory and security requirements are considered. the principles of planning, implementation of audit processes and management of audit results are explained. it also examines the information security life cycle, the security measures applied at all stages from data creation to storage, use, sharing, archiving and secure destruction.

7. 7.
   Management phase and continuity of operationsLecture

   Within the framework of the topic, the principles of security management and ensuring business continuity in cloud environments are studied. in the management stage of cloud services, the issues of defining security requirements, implementing control mechanisms and continuous monitoring of services are considered. risks that may affect business continuity, service interruptions, and emergency preparedness approaches are explained. business continuity and disaster recovery planning, backups, and resiliency of cloud services are also explored.

8. 8.
   Infrastructure securityLecture

   Within the framework of the topic, the principles of ensuring the security of the cloud infrastructure and its different features from traditional IT infrastructures are studied. issues of virtualization of cloud networks, secure management of connections between virtual network components and resources are considered. changes in network security approaches and new security requirements are explained with the transition to cloud technologies. it also examines changes in the vulnerability assessment process and appropriate assessment approaches in virtualized and dynamic cloud environments.

9. 9.
   Virtualization and containersLecture

   Within the subject, the basics of virtualization and container technologies in cloud environments are studied. virtualization techniques, the creation of virtual machines and the principles of sharing physical resources between different virtual environments are reviewed. the main differences between virtual machines and containers in terms of architecture, resource usage, and isolation characteristics are explained. the application of virtualization and container technologies in cloud infrastructures and the main issues to be considered in ensuring their security are also examined.

10. 10.
    Kubernetes securityLecture

    Within the framework of the topic, the architecture of kubernetes environments and the principles of securing containerized applications are studied. the main components of a kubernetes cluster, the management layer, worker nodes, pods and their interactions are reviewed. basic security mechanisms such as cluster access control, authentication and authorization, role-based access control (rbac), network policies, and privacy protection are explained. it also examines the security of container images, misconfigurations, vulnerability management, and continuous monitoring of kubernetes environments.

11. 11.
    Response to eventsLecture

    Within the framework of the topic, the main stages of the process of responding to security events and incidents in cloud environments are studied. approaches used for detection, initial assessment and analysis of security incidents are reviewed. the principles of identifying, limiting, eliminating the causes of the incident and restoring the systems are explained. also, issues of post-mortem analysis conducted after the incident, identification of the main causes and evaluation of the results to prevent similar incidents in the future are investigated.

12. 12.
    Application securityLecture

    Within the framework of the topic, the principles of secure development and management of applications in the cloud environment are studied. the application of the secure software development life cycle (ssdlc) to the cloud environment and the integration of security requirements into the phases of software planning, development, testing, deployment and operation are considered. the role of the infrastructure as code (iac) approach in automated creation and management of cloud infrastructure is explained. it also examines security risks that may arise in iac configurations and ensuring security throughout the application and infrastructure lifecycle.

13. 13.
    Data security in the cloudLecture

    Within the subject, the principles of data security in cloud environments are studied. issues of planning and safe management of data transfer to the cloud, protection of data integrity and confidentiality during transfer are considered. the main security mechanisms applied to protect data stored in the cloud (data at rest) from unauthorized access and data leaks are explained. principles of data encryption, access control, and secure storage are also explored.

14. 14.
    Managing users and identities for the cloudLecture

    Within the subject, the principles of user and identity management (identity and access management - iam) in cloud environments are studied. approaches to user identification, authentication, and authorization, as well as secure management of privileged user accounts, are reviewed. the application of access rights assignment, the principle of least privilege and role-based access control (rbac) mechanisms in the cloud environment is explained. it also explores the issues of managing user accounts, monitoring access rights, and securely managing permissions.

1. For critical areas of focus in cloud computing 2017 cloud security alliance – all rights reserved.
2. Cloud COMPUTING principles and paradigms edited by rajkumar buyya the university of melbourne and manjrasoft pty ltd., australia james broberg the university of melbourne, australia andrzej goscinski deakin university, australia
3. Cloud cybersecurity controls )ccc – 1: 2020
4. Chris dotson. practical cloud security handbook. packt publishing. 2024. 230 səh
5. 2.wiley.cloud security & compliance for dummies (2nd special ed.). 2022. 76 səh.
6. Cloud security alliance. security guidance v5. 2024 299 səh