Infrastructure as a Service (IaaS)
customers securely configure, manage, and deploy the virtual environment running their applications. "security of the operating systems, middleware, runtime, application , and data
CSP:
only securing the physical computers running the virtual environment.