I would like to choose infrastructure as a service (IaaS) among major cloud service models.
IaaS is a common cloud computing service model that offers virtual servers, networking,
operating systems, and data storage on demand to enterprises. In IaaS service model, users
don’t have to own any hardware or manage its components. Management responsibility is
taken by service providers. Customers only must pay for the usage. Some examples of IaaS
providers are Amazon Web Services (AWS), Microsoft Azure and Google Compute Engine
(GCE).(
Regarding the issue of configuration of IaaS, configuration error is often experienced when
setting up a new cloud server. This happens when IT staffs from management team don’t
properly configure their authentication or security standards and leaves potentially sensitive
information vulnerable to unauthorized access. To solve this problem, users should double
check all security settings with new IaaS provider for cloud data protection (Henderson, 1). In
practical world, none of the system is completely safe. Some security challenges are also
found while operating IaaS.
Service Level Agreement (SLA) issues:(SLA includes contract definition, negotiation,
monitoring, and enforcement which guarantees the acceptable level of quality of service
(QoS). Agreement belongs to both parties. Any disagreement in SLA will leave a client
exposed to vulnerabilities since it will affect the system’s security.
Platform Virtualization Issues:Every virtual machine should stay in isolation without
being connected with other virtual disks, memory, or apps on the same host. In case virtual
machine and host connects, attackers might exploit some features and gain access to data
transfers. Sysadmin might be a good example of attackers.
Computer Hardware Issues:Even though service provider is responsible for keeping the
physical components secure all the time, 70 percent of attacks happen within the
organization. If by chance, attackers reach the machine then the possibility of denying service
by shutting the machine down and accessing the machine to steal or corrupt data might
happen (CISOMAG, 2).
(
References:
(
Richard Henderson.2019.8 IaaS Cloud Security Challenges You Should Be Aware Of.https://www.lastline.com
> blog > 8-iaas-cloud-security-ch....
(
CIS0MAG.2020.Security Challenges and Solutions of IaaS for Cloud Computing.https://cisomag.eccouncil.org
> pro-tips-things-to-reme....
