Cloud Security - CIA Triads
The CIA Triad in Cloud Computing
The CIA Triad is the foundational framework for information security. In cloud computing, its importance is amplified because security is managed through a shared responsibility model between the provider and the customer.
1. Confidentiality
Confidentiality ensures that sensitive data is accessed only by authorized users. In the cloud, this is the primary defense against data breaches.
- Encryption: Protecting data "at rest" (stored in databases) and "in transit" (moving across the internet).
- Identity and Access Management (IAM): Using granular permissions to ensure users only access what they need.
- Virtual Private Clouds (VPC): Isolating network traffic from the public internet.
2. Integrity
Integrity ensures that data is accurate, complete, and has not been tampered with or modified by unauthorized parties.
- Digital Signatures & Hashing: Using algorithms like SHA-512 to verify file consistency.
- Version Control: Keeping track of changes in cloud storage to revert to a "known good" state if data is corrupted.
- Object Locking: Preventing data from being deleted or overwritten for a specific period.
3. Availability
Availability ensures that systems and data are accessible to authorized users whenever they are needed.
- Redundancy: Storing data across multiple "Availability Zones" so service remains up if one center fails.
- DDoS Protection: Using cloud-native tools to absorb traffic attacks that would otherwise crash a server.
- Disaster Recovery: Automating the process of restoring services after a critical failure.