Please enable JavaScript.
Coggle requires JavaScript to display documents.
Securing the cloud, Applicattion Security, Data security - Coggle Diagram
Securing the cloud
-
Rules (AWS)
Allow or Deny rules : Rules check for info whether or not to allow traffic through certain ports, IP addresses, CIDR range
NAC (Network access control) - set of network policies that determine the level and the type of access granted to balance access and security
NACL (network access control list) - can limit or allow traffic into or out of VPCs subnets; can either allow deny; numbered by priority; stateless- inbound and outbound rules are evaluated by separate rules
Security Groups - serves as a virtual firewall at host level and contains rules about whether traffic can cross a network interface; function within the subnet; 5/instances, only allow traffic, stateful
Flow Logs - monitor traffic that crosses an individual network interface; log data directed to CloudWatch Logs service or Amazon S3 storage bucket
Traffic mirroring - similar to packet capture and analysis functions in Wireshark, deeper insight into captured traffic; info can be reverse-engineer a network attack and identify vulnerability; can be used to figure out root cause
-
Rules (AWS)
Network Virtual Appliances (NVA) - VM running in the perimeter network that controls traffic b/w the perimeter net. and other subnets
-
-
-
Network security group (NSG) - firewall-style protection at subnet level, 6 default rules: 3 for inbound traffic &3 for outbound traffic, cannot be removed or altered (can be overridden), stateful
Application Security Group (ASG) - allows microsegmentation according to application and workload type
Scanning tools - used to improve security by pointing out insecure ports, software, and firmware.
Ex- Nmap, Nessus, Metasploit
-
Network-based scan - scans devices connected to network to check configuration and identify security gaps.
Agent based scans - small apps (agents) are installed on devices to collect info and send it to a central analysis location
-
-
-
Applicattion Security
-
ADC (application delivery controller) - robust load balancer: granular traffic filtering, encryption handling to reduce load on servers, traffic shaping and monitoring technique
-
Data security
Security areas
Securing Protocols
SSL (Secure Sockets Layer) and TLS (Transport Layer Security - encrypted comm. over internet; New session created when connection is established, handshake protocol, OpenSSL to troubleshoot issues with SSL/TLS
DNS security - Authentication DNSSEC (DNS Security Extensions) - requires verification of DNS records
-
NTP (Network Time Protocol) - provides time synchronization across network; secured using NTS (Network Time Security)
DLP (data loss prevention) - provide protection for at rest, in use, in motion data
-