Part 16 - Cloud Computing

Video Activity

This section covers the topic of cloud computing for the CISSP exam. Cloud computing is all the rage right now, but as we'll see by the conclusion of this lesson: what comes around, goes around. In a nutshell, could computing is concerned with providing services and platforms over the internet. The three main types we examine in this section are: S...

Join over 3 million cybersecurity professionals advancing their career
Sign up with

Already have an account? Sign In »

12 hours 41 minutes
Video Description

This section covers the topic of cloud computing for the CISSP exam. Cloud computing is all the rage right now, but as we'll see by the conclusion of this lesson: what comes around, goes around. In a nutshell, could computing is concerned with providing services and platforms over the internet. The three main types we examine in this section are: SaaS (Software as a Service), PaaS (Platform as a Service), and IaaS (Infrastructure as a Service). SaaS, as its name implies, provides hosted applications (software) to remote clients. A popular example is MS Office365. This is what is known as a "pay-as-you-go" model. It provides such advantages as reduced cost and greater accessibility since accessing the software is not bound to any one device. Another advantage that is worth noting is that hosted apps relieve the user of managing updates and patches. This is certainly nothing to sneeze at if you've had to spend time downloading, installing, and restarting Windows in order to manage updates on your own system! PaaS is primarily targeted at software developers and is designed to provide a context for developing software. This offloads the responsibility of installing platforms such as .Net, etc. as well as the middleware required for complex systems development. PaaS also has the ability to host applications for use by external customers as well as hosting intranet apps for use within an organization. IaaS is typically used to host storage solutions for saving data to the cloud for backup and disaster recovery. DNS services are another example of IaaS. You're using IaaS if you have a Dropbox or MS OneDrive account. We wrap up this section by pointing out that cloud computing is in effect, using someone else's computer, much like a form of outsourcing. When we mentioned at the outset that what comes around, goes around, we were making reference to the old days when green-screen terminals and mainframe computers roamed the earth. This model has evolved into the thin client model which we now have with cloud computing. Finally, with cloud computing, also comes risk in the form of having no direct control. The good news is that Cybrary is proud to announce a new certification training course in cloud security, so stay tuned!

Video Transcription
All right, let's go and take a look at Cloud Computing. And of course, Cloud computing is the big buzzword of the last couple of years. And the ideas, of course, we're gonna offer software and offer service is and platforms through providers on the Internet as opposed to hosting them locally.
So the 1st 1 to talk about is software as a service
and with software of the service. You know, the idea behind cloud computing is to reduce costs and to make elements more accessible, as opposed to, you know, having to be at the office or bound to a specific location to access your mail. You're this. You're that your your applications and so on.
So Software's the service is, you know, an example of that might be office 3 65 for instance.
So I know many people that use Microsoft office every single day. I, however, use it once a month when I'm trying to fill out invoices. So why should I have to say, pay the same price that somebody that uses it every day?
So I log on, I access word or excel or whatever application that I need. I use it for the time period I need, and then I'm out. So I get a pay as I go
benefits. So we refer to that as elasticity. The more you needed, the more you pay. But then, if the next month you needed very little, you pay less. Also, because I'm accessing it on an Internet provider server, I can access my version of Microsoft Word wherever
you know, I've got computers at home of the computer at the office, I get a laptop that I travel with.
So being able to access that software without having to buy a license to put down five or six different computers, that's very beneficial as well. So you know when I say files.
Ah, the default is to save them to the cloud so that those files are accessible wherever I go. And that's the default setting with Office 3 65 So that software's a service. You can certainly see the benefits,
you know. One other benefit. All mentioned there is We know that applications air frequently having updates and required security patches and so on. I don't have to worry about any of that. It's a user because the office ah environment is being hosted another server, and that's where the system gets updated and patch.
We also get that benefit of using a thin client, so I no longer have to worry about the requirements for the software because my system isn't the one that's actually running the software.
If this sounds a whole light a lot like going back to the days of having terminals on desktops and having a mainframe computer world, the central processing happens. Yeah, a lot of thin clung. It really goes back to those days
now the next platform as a service p. A s. And this was originally designed specifically for software developers to give them sort of a context in which to design software. And it's really kind of extended extended beyond that in the application hosting.
And you know, if you think about it, if I'm gonna offer
my employees intranet applications, there has to be, you know, the front end software. There's middleware back in database. My developers have to go through all of these foods but dot net framework or some other framework, and there's a lot of activity that has to happen
and not just inward facing for
my intranet, but also to make applications available to my customers to make it easier for them to buy products or offer suggestions or whatever that may be. So platform is the service is all about application. Hosting the last infrastructure as a service I A s
would be about hosting service is that I normally have in my internal network
out on the Web. You know, if I've been using cloud infrastructure for 20 years, you know, if you've ever e mailed yourself a file so you could have it at home as well as at work or because it was an important file and you knew, Yeah, who wouldn't lose it?
That's infrastructures of service. So that in that means we're using storage out. You know, that's normally part of our files system. Er our file ah, storage infrastructure now saving material to the cloud back up that means and disaster recovery by storing things in the cloud
Theoneste Service's or whatever those service's may be.
You know, ultimately, the ideas were having the same service is we're just having them provided from the Internet instead of a local location. And I do love the cloud and I see the tremendous benefits.
But any time we get through this new phrase your new buzz, that buzz word or this new ideology about how this is gonna change everything,
he always say, things come around, what comes around goes around. We just seemed, you know, like I said, we're right back at the spot where we started with having terminals on her desktop and accessing a central computer. In some ways, when we look at 10 clients and I actually have a little bumper sticker about the cloud, it says there is no cloud.
It's really just someone else's computer.
And I think that really kind of brings it down to Earth. This idea,
we kind of just outsourcing stuff. And we know that as we outsource, we don't eliminate our risk. Sometimes you take on more risk because you don't have the direct control.
So one of the things that I think is need is I S C Square has just produced a new certification on cloud computing security and Sigh Berry will be presenting. That is my perfect. I'll be the one teaching that class
and that will be coming up in the next month, two months or so, So really looking forward to that
Up Next

Our free online CISSP (8 domains) training covers topics ranging from operations security, telecommunications, network and internet security, access control systems and methodology and business continuity planning.

Instructed By