Forensics with the Cloud Part 1

00:01

very welcome. Back to the course of the last video, we wrapped our discussion on database forensics.

00:07

In this video, we're gonna talk about the different types of cloud computing.

00:11

So just a quick pre assessment question here. Hybrid is a type of cloud environment. Is that true? Riffles?

00:18

All right, so that was true. We'll talk about a hybrid environment in just a little bit.

00:24

So the cloud. So why do we care about the cloud? Right? What is this cloud thing we keep hearing about? So, essentially, the cloud is you're putting your data on somebody else's computers for lack of better words.

00:34

So what are some of the benefits? Why don't companies use this? Well, elasticity. Right. So I can scale my company up or down. So if I need more resource is Michael certainly scale up and down. So think of like a tax firm, for example, you know, during tax season here in the United States, like the early part of the year,

00:49

basically January, you know, to April, You know, if I'm a tax firm, I need to scale up, right, because I'm gonna have a lot of people coming to get their taxes done. But then, like in June or July, you know, the summertime. I don't really need that right, cause it's not tax season. You know, there are some, you know, the businesses that do taxes you're around. But for the most part, the big push of taxes

01:07

is early part of the year, so I don't need that many. Resource is. So

01:11

the cloud allows a small company like that to scale up or down

01:14

reliability. Right. So, you know, I, you know, like Amazon gives me x number of up time guaranteed based on my subscription. So if one of their data centers goes down,

01:25

it's not a big deal, right? Because they've got another one running my stuff as well. So

01:29

has an organization, especially like any commerce company. It allows you to actually stay up and keep that up time and maintain your business

01:37

cost, right? So as things were done in scale like cloud computing, the cost goes down so you can get ah, low cost foragers. As a smaller company, it could save you a lot of money.

01:47

A n'est document that covers cloud is gonna be SP 800 at 1 45 now You don't need to know that for the ch EF eye exam, but is it is a good document to go take a look at

02:00

some concerns in the cloud are gonna be things like security for obvious reasons, right? You're putting information on someone else's computers and you don't necessarily have control over that as well as compliance issues, right? So tying into the security aspect, if they're not maintaining years the security and letting your data gets stolen, then you may have some compliance issues that your company actually is responsible for

02:21

different types of cloud computing. So infrastructure is a service platform is a service and software as a service.

02:29

So first, our infrastructure as a service, as the name implies, you know, So all the networking, the data storage, virtual ization, you know, computing power. You know, all this stuff is, you know is well, not computing power, But you're networking stuff like that. All this stuff is basically outsourced, right? So you're outsourcing that for your company

02:46

to the cloud, you know, to the cloud service provider.

02:49

Advantages of that and laws for scalability as well as you know, allows you to take advantage of smaller company allows you to take advantage of computing power. That's available for the cloud

03:00

platform is the service. So

03:01

is generally east for, you know, software development. So the provider provides, you know, the storage, the middle where the operating system etcetera, etcetera. So it allows you to scale up or down on a particular software development project, you know, And so that's the main event of it.

03:17

Software as a service s. So you know, this is gonna be your on demand application. So think of things like, you know, Google docks or, you know, any type of ah

03:24

generalized thing you interact with on a daily basis, dry. So feel like you're not Netflix subscription. Your who, Lou. You know, even watching like YouTube. Even though that's you know, unless you have, like, YouTube TV, it's not a paid thing.

03:38

Um, but if you have, like, Netflix or something like that, this is gonna be a software as a service model where they pay, you know, you pay like a monthly fee, and you get X number of stuff, right?

03:49

So some of the advantages for you as as a organization doing like a software, the service you know. So if you're using a particular thing like Like one thing I like to use is is called Click funnels. Eso click funnels allows you to build out different Web pages stuff like that pretty easily. So their software as a service, right? So I pay a monthly fee,

04:08

and then I can build all these different things.

04:10

So some of the advantages you don't have to sit there and patch it right. Do you also don't have to worry about version control? Is your updating patches on and then compatibility? Right? So the software's of service generally works everywhere. So no matter what's browser you log into, you can still access your stuff

04:27

so different types of cloud models. So we have public, private community and hybrid, as we mentioned in the pre assessment question

04:33

Public Cloud.

04:34

So this is again gonna be things that is available for public use. So you know things like your Gmail or Yahoo mail, etcetera, etcetera. Just I have to be email. It could be anything that's available for public use.

04:47

Private cloud.

04:48

It's gonna be a single tenant environment is what is called. Essentially, this is a company using in a quote a quote unquote internal cloud s O for sensitive information so usually takes some authentication. So, like you use the neighbor password A cz well is hopefully some multi factor authentication there were send you like a text with a special code that you have to type in.

05:08

This is advances for security and compliance. If you remember, we talked about our possible security and compliance issues with the cloud. So this one's advantage in the aspect of weaken generally control the security a little better and maintain better compliance.

05:23

Community cloud. So this is for organizations that have a similar interests of whether that interest is revolved around, you know, compliance or policies, you know? So this is just companies that have a similar interest so they can share this community cloud

05:39

Then, of course, hybrid cloud is just a combination of any of these most commonly seen with, like a combination of a public and private cloud,

05:47

different types of cloud computing threats. So things like data breach. Her law serves kind of the most common threat using the clouded to do attacks. So we'll talk about that in the next video. Insecure AP eyes are interfaces share technology issues. So the cloud environment Excuse me? The community cloud environment, insider threats as well is privilege escalation

06:08

and the different types of Claude attacks. And you just you just want to be familiar with We're not gonna deep dive into any of these. So I'm just gonna kind of go through him here

06:15

says in John is session hijacking. As the name implies, attacker takes over recession, you know, session riding, which especially this cross. I request forgery in the cloud sequel injection. And everyone should be familiar with that. By now, D. N s attacks soap or wrapping attacks, wrapping around the soap side channel attacks and then de DOS attacks as well.