Book Image

OpenStack Cloud Security

By : Fabio Alessandro Locati
Book Image

OpenStack Cloud Security

By: Fabio Alessandro Locati

Overview of this book

Related Content you might be interested in

Current Title:

Small book image
OpenStack Cloud Security
Fabio Alessandro Locati
Jul, 2015 | 160 pages
No titles found
Table of Contents (14 chapters)
OpenStack Cloud Security
OpenStack Cloud Security
Credits
Credits
About the Author
About the Author
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
First Things First – Creating a Safe Environment
First Things First – Creating a Safe Environment
Access control
The CIA model
The principles of security
Data center security
Server security
The importance of logs
The people aspect of security
Summary
2
OpenStack Security Challenges
OpenStack Security Challenges
Private cloud versus public cloud security
The different kinds of security threats
The possible attacks
The OpenStack structure
Future components
Summary
3
Securing OpenStack Networking
Securing OpenStack Networking
The Open Systems Interconnection model
TCP/IP
Architecting secure networks
Generic Routing Encapsulation (GRE)
Flat network versus VLAN versus GRE in OpenStack Quantum
Design a secure network for your OpenStack deployment
Virtual Private Network as a Service (VPNaaS)
Summary
4
Securing OpenStack Communications and Its API
Securing OpenStack Communications and Its API
Encryption security
Symmetric encryption
Asymmetric encryption
Symmetric/asymmetric comparison and synergies
Hashing
Public key infrastructure
Cipher security
Designing a redundant environment for your APIs
Secure your OpenStack API with TLS
Enforcing HTTPS for future connections
Summary
5
Securing the OpenStack Identification and Authentication System and Its Dashboard
Securing the OpenStack Identification and Authentication System and Its Dashboard
Identification versus authentication versus authorization
Identification
Authentication
Authorization
Session management
Federated identity
Configuring OpenStack Keystone to use Apache HTTPd
Setting up Keystone as a Identity Provider
Configuring Shibboleth
Summary
6
Securing OpenStack Storage
Securing OpenStack Storage
Different storage types
Backends
Security
Securing OpenStack Swift
Summary
7
Securing the Hypervisor
Securing the Hypervisor
Various types of virtualization
Hypervisors
Baremetal
Containers
Docker
Linux Containers
Criteria for choosing a hypervisor
Hardening the hardware management
sVirt – SELinux and virtualization
Hardening the host operative system
Summary
Index
Index

Encryption security

One of the most important things about encryption is security. This can seem to be obvious, but it's not.

Tip

Different encryption techniques and algorithms have different security levels and could be susceptible to different attacks.

Previous Section
End of Section 2
Next Section