Download or read book Cloud Native Software Security Handbook written by Mihir Shah and published by Packt Publishing Ltd. This book was released on 2023-08-25 with total page 372 pages. Available in PDF, EPUB and Kindle. Book excerpt: Master widely used cloud native platforms like Kubernetes, Calico, Kibana, Grafana, Anchor, and more to ensure secure infrastructure and software development Purchase of the print or Kindle book includes a free PDF eBook Key Features Learn how to select cloud-native platforms and integrate security solutions into the system Leverage cutting-edge tools and platforms securely on a global scale in production environments Understand the laws and regulations necessary to prevent federal prosecution Book DescriptionFor cloud security engineers, it’s crucial to look beyond the limited managed services provided by cloud vendors and make use of the wide array of cloud native tools available to developers and security professionals, which enable the implementation of security solutions at scale. This book covers technologies that secure infrastructure, containers, and runtime environments using vendor-agnostic cloud native tools under the Cloud Native Computing Foundation (CNCF). The book begins with an introduction to the whats and whys of the cloud native environment, providing a primer on the platforms that you’ll explore throughout. You’ll then progress through the book, following the phases of application development. Starting with system design choices, security trade-offs, and secure application coding techniques that every developer should be mindful of, you’ll delve into more advanced topics such as system security architecture and threat modelling practices. The book concludes by explaining the legal and regulatory frameworks governing security practices in the cloud native space and highlights real-world repercussions that companies have faced as a result of immature security practices. By the end of this book, you'll be better equipped to create secure code and system designs.What you will learn Understand security concerns and challenges related to cloud-based app development Explore the different tools for securing configurations, networks, and runtime Implement threat modeling for risk mitigation strategies Deploy various security solutions for the CI/CD pipeline Discover best practices for logging, monitoring, and alerting Understand regulatory compliance product impact on cloud security Who this book is forThis book is for developers, security professionals, and DevOps teams involved in designing, developing, and deploying cloud native applications. It benefits those with a technical background seeking a deeper understanding of cloud-native security and the latest tools and technologies for securing cloud native infrastructure and runtime environments. Prior experience with cloud vendors and their managed services is advantageous for leveraging the tools and platforms covered in this book.

Download or read book Security for Cloud Native Applications written by Eyal Estrin and published by BPB Publications. This book was released on 2024-03-26 with total page 288 pages. Available in PDF, EPUB and Kindle. Book excerpt: Your practical handbook for securing cloud-native applications KEY FEATURES ● An overview of security in cloud-native applications, such as modern architectures, containers, CI/CD pipeline, and so on. ● Using automation, such as infrastructure as code and policy as code, to achieve security at scale. ● Implementing security, from encryption and secrets management to threat management. DESCRIPTION Security for cloud-native applications is an overview of cloud-native application’s characteristics from a security point of view, filled with best practices for securing services based on AWS, Azure, and GCP infrastructure. This book is a practical guide for securing cloud-native applications throughout their lifecycle. It establishes foundational knowledge of cloud services and cloud-native characteristics. It focuses on securing design approaches like APIs, microservices, and event-driven architectures. Specific technologies like containers, Kubernetes, and serverless functions are covered with security best practices. The book emphasizes integrating security throughout development using CI/CD pipelines and IaC tools. It explores policy as code for enforcing security policies and immutable infrastructure for enhanced security posture. Key management and threat detection strategies are also covered. Finally, the book offers a practical example and resources for further learning. By the end of the book, the reader will be able to design and secure modern applications using the public cloud scale, managed services, automation, and built-in security controls. WHAT YOU WILL LEARN ● How to secure modern design architectures from APIs, event-driven architectures, and microservices. ● How to secure applications using containers and the Kubernetes platform. ● How to secure applications using serverless/function-as-a-service. ● How to implement key and secrets management as part of cloud-native applications. ● How to implement the 12-factor application methodology and immutable infrastructure in cloud-native applications. WHO THIS BOOK IS FOR This book is for security professionals, software development teams, DevOps and cloud architects, and all those who are designing, maintaining, and securing cloud-native applications. TABLE OF CONTENTS 1. Introduction to Cloud Native Applications 2. Securing Modern Design Architectures 3. Containers and Kubernetes for Cloud Native Applications 4. Serverless for Cloud Native Applications 5. Building Secure CI/CD Pipelines 6. The 12-Factor Application Methodology 7. Using Infrastructure as Code 8. Authorization and Policy as Code 9. Implementing Immutable Infrastructure 10. Encryption and Secrets Management 11. Threat Management in Cloud Native Applications 12. Summary and Key Takeaways

Download or read book Practical Cloud Native Security with Falco written by Loris Degioanni and published by "O'Reilly Media, Inc.". This book was released on 2022-08-10 with total page 227 pages. Available in PDF, EPUB and Kindle. Book excerpt: As more and more organizations migrate their applications to the cloud, cloud native computing has become the dominant way to approach software development and execution. Protecting modern, cloud native applications from threats requires the ability to defend them at runtime, when they're most vulnerable to attacks. This practical guide introduces you to Falco, the open source standard for continuous risk and threat detection across Kubernetes, containers, and the cloud. Falco creator Loris Degioanni and core maintainer Leonardo Grasso bring you up to speed on threat detection and show you how to get Falco up and running, plus advanced topics such as deploying Falco in production and writing your own security rules. You'll learn how to: Leverage runtime security in cloud native environments Detect configuration changes and unexpected behavior in the cloud Protect containers, Kubernetes, and cloud applications using Falco Run, deploy, and customize Falco Deploy, configure, and maintain Falco in a production environment Improve your compliance

Download or read book Cloud Native Application Protection Platforms A Guide to Cnapps and the Foundations of Comprehensive Cloud Security written by Russ Miles and published by O'Reilly Media. This book was released on 2024-03-29 with total page 0 pages. Available in PDF, EPUB and Kindle. Book excerpt: Cloud native security isn't a game for individual players. It requires team collaboration with a platform that can help cloud security engineers, developers, and operations people do their best work. That's what the cloud native application protection platform (CNAPP) delivers. With this practical guide, you'll learn how CNAPP can help you consolidate security through DevSecOps across cloud native technologies, practices, and application lifecycles. Through real-life attack scenarios, authors Russ Miles, Taylor Smith, and Steve Giguere help you explore how CNAPP not only mitigates multidimensional threats, but also reduces complexity and helps your team stay one step ahead of attackers. CNAPP provides a holistic approach to your cloud native development across identities, workloads, networks, and infrastructure. You'll explore: Threats to different parts of the cloud native stack, including pipelines, supply chains, infrastructure, workloads, and applications What CNAPP is and how it enables the context-sharing and collaboration necessary to secure your applications from development to runtime How to assess your own attack surface from a code and runtime standpoint How to identify blind spots in your existing cloud native security coverage How to leverage CNAPP to achieve a holistic, collaborative security environment

Download or read book Cloud Native Security Cookbook written by Josh Armitage and published by "O'Reilly Media, Inc.". This book was released on 2022-04-21 with total page 516 pages. Available in PDF, EPUB and Kindle. Book excerpt: With the rise of the cloud, every aspect of IT has been shaken to its core. The fundamentals for building systems are changing, and although many of the principles that underpin security still ring true, their implementation has become unrecognizable. This practical book provides recipes for AWS, Azure, and GCP to help you enhance the security of your own cloud native systems. Based on his hard-earned experience working with some of the world's biggest enterprises and rapidly iterating startups, consultant Josh Armitage covers the trade-offs that security professionals, developers, and infrastructure gurus need to make when working with different cloud providers. Each recipe discusses these inherent compromises, as well as where clouds have similarities and where they're fundamentally different. Learn how the cloud provides security superior to what was achievable in an on-premises world Understand the principles and mental models that enable you to make optimal trade-offs as part of your solution Learn how to implement existing solutions that are robust and secure, and devise design solutions to new and interesting problems Deal with security challenges and solutions both horizontally and vertically within your business

Download or read book Practical Cloud Security written by Chris Dotson and published by O'Reilly Media. This book was released on 2019-03-04 with total page 195 pages. Available in PDF, EPUB and Kindle. Book excerpt: With their rapidly changing architecture and API-driven automation, cloud platforms come with unique security challenges and opportunities. This hands-on book guides you through security best practices for multivendor cloud environments, whether your company plans to move legacy on-premises projects to the cloud or build a new infrastructure from the ground up. Developers, IT architects, and security professionals will learn cloud-specific techniques for securing popular cloud platforms such as Amazon Web Services, Microsoft Azure, and IBM Cloud. Chris Dotson—an IBM senior technical staff member—shows you how to establish data asset management, identity and access management, vulnerability management, network security, and incident response in your cloud environment.

Download or read book Azure Security Handbook written by Karl Ots and published by . This book was released on 2021 with total page 0 pages. Available in PDF, EPUB and Kindle. Book excerpt: Did you know that the most common cloud security threats happen because of cloud service misconfigurations, not outside attacks? If you did not, you are not alone. In the on-premises world, cybersecurity risks were limited to the organization's network, but in the era of cloud computing, both the impact and likelihood of potential risks are significantly higher. With the corresponding advent of DevOps methodology, security is now the responsibility of everyone who is part of the application development life cycle, not just the security specialists. Applying the clear and pragmatic recommendations given in this book, you can reduce the cloud applications security risks in your organization. This is the book that every Azure solution architect, developer, and IT professional should have on hand when they begin their journey learning about Azure security. It demystifies the multitude of security controls and offers numerous guidelines for Azure, curtailing hours of learning fatigue and confusion. Throughout the book you will learn how to secure your applications using Azure's native security controls. After reading this book, you will know which security guardrails are available, how effective they are, and what will be the cost of implementing them. The scenarios in this book are real and come from securing enterprise applications and infrastructure running on Azure. What You Will Learn Remediate security risks of Azure applications by implementing the right security controls at the right time Achieve a level of security and stay secure across your Azure environment by setting guardrails to automate secure configurations Protect the most common reference workloads according to security best practices Design secure access control solutions for your Azure administrative access, as well as Azure application access This book is designed for cloud security architects, cloud application developers, and cloud solution architects who work with Azure. It is also a valuable resource for those IT professionals responsible for securing Azure workloads in the enterprise. Karl Ots is a cloud and cybersecurity leader with more than a decade of experience in Microsoft Azure security. He has worked with large enterprises in fields such as technology, manufacturing, and finance. Karl is recognized as a Microsoft Regional Director, a patented inventor, a LinkedIn Learning instructor, and a Microsoft Azure MVP. He holds the Azure Security Engineer, SABSA Foundation SCF, and CISSP certifications. Karl is a frequent speaker on cloud security topics at global conferences such as Microsoft Ignite or (ISC)2 Security Congress. He hosts the Cloud Gossip podcast.

Download or read book Cloud Security Handbook written by Eyal Estrin and published by Packt Publishing Ltd. This book was released on 2022-04-14 with total page 456 pages. Available in PDF, EPUB and Kindle. Book excerpt: A comprehensive reference guide to securing the basic building blocks of cloud services, with actual examples for leveraging Azure, AWS, and GCP built-in services and capabilities Key FeaturesDiscover practical techniques for implementing cloud securityLearn how to secure your data and core cloud infrastructure to suit your business needsImplement encryption, detect cloud threats and misconfiguration, and achieve compliance in the cloudBook Description Securing resources in the cloud is challenging, given that each provider has different mechanisms and processes. Cloud Security Handbook helps you to understand how to embed security best practices in each of the infrastructure building blocks that exist in public clouds. This book will enable information security and cloud engineers to recognize the risks involved in public cloud and find out how to implement security controls as they design, build, and maintain environments in the cloud. You'll begin by learning about the shared responsibility model, cloud service models, and cloud deployment models, before getting to grips with the fundamentals of compute, storage, networking, identity management, encryption, and more. Next, you'll explore common threats and discover how to stay in compliance in cloud environments. As you make progress, you'll implement security in small-scale cloud environments through to production-ready large-scale environments, including hybrid clouds and multi-cloud environments. This book not only focuses on cloud services in general, but it also provides actual examples for using AWS, Azure, and GCP built-in services and capabilities. By the end of this cloud security book, you'll have gained a solid understanding of how to implement security in cloud environments effectively. What you will learnSecure compute, storage, and networking services in the cloudGet to grips with identity management in the cloudAudit and monitor cloud services from a security point of viewIdentify common threats and implement encryption solutions in cloud servicesMaintain security and compliance in the cloudImplement security in hybrid and multi-cloud environmentsDesign and maintain security in a large-scale cloud environmentWho this book is for This book is for IT or information security personnel taking their first steps in the public cloud or migrating existing environments to the cloud. Cloud engineers, cloud architects, or cloud security professionals maintaining production environments in the cloud will also benefit from this book. Prior experience of deploying virtual machines, using storage services, and networking will help you to get the most out of this book.

Download or read book Cloud Security Handbook for Architects written by Ashish Mishra and published by Orange Education Pvt Ltd. This book was released on 2023-04-18 with total page 368 pages. Available in PDF, EPUB and Kindle. Book excerpt: A comprehensive guide to secure your future on Cloud KEY FEATURES ● Learn traditional security concepts in the cloud and compare data asset management with on-premises. ● Understand data asset management in the cloud and on-premises. ● Learn about adopting a DevSecOps strategy for scalability and flexibility of cloud infrastructure. ● Choose the right security solutions and design and implement native cloud controls. DESCRIPTION Cloud platforms face unique security issues and opportunities because of their evolving designs and API-driven automation. We will learn cloud-specific strategies for securing platforms such as AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure, and others. The book will help you implement data asset management, identity and access management, network security, vulnerability management, incident response, and compliance in your cloud environment. This book helps cybersecurity teams strengthen their security posture by mitigating cyber risk when "targets" shift to the cloud. The book will assist you in identifying security issues and show you how to achieve best-in-class cloud security. It also includes new cybersecurity best practices for daily, weekly, and monthly processes that you can combine with your other daily IT and security operations to meet NIST criteria. This book teaches how to leverage cloud computing by addressing the shared responsibility paradigm required to meet PCI-DSS, ISO 27001/2, and other standards. It will help you choose the right cloud security stack for your ecosystem. Moving forward, we will discuss the architecture and framework, building blocks of native cloud security controls, adoption of required security compliance, and the right culture to adopt this new paradigm shift in the ecosystem. Towards the end, we will talk about the maturity path of cloud security, along with recommendations and best practices relating to some real-life experiences. WHAT WILL YOU LEARN ● Understand the critical role of Identity and Access Management (IAM) in cloud environments. ● Address different types of security vulnerabilities in the cloud. ● Develop and apply effective incident response strategies for detecting, responding to, and recovering from security incidents. ● Establish a robust and secure security system by selecting appropriate security solutions for your cloud ecosystem. ● Ensure compliance with relevant regulations and requirements throughout your cloud journey. ● Explore container technologies and microservices design in the context of cloud security. WHO IS THIS BOOK FOR? The primary audience for this book will be the people who are directly or indirectly responsible for the cybersecurity and cloud security of the organization. This includes consultants, advisors, influencers, and those in decision-making roles who are focused on strengthening the cloud security of the organization. This book will also benefit the supporting staff, operations, and implementation teams as it will help them understand and enlighten the real picture of cloud security. The right audience includes but is not limited to Chief Information Officer (CIO), Chief Information Security Officer (CISO), Chief Technology Officer (CTO), Chief Risk Officer (CRO), Cloud Architect, Cloud Security Architect, and security practice team. TABLE OF CONTENTS SECTION I: Overview and Need to Transform to Cloud Landscape 1. Evolution of Cloud Computing and its Impact on Security 2. Understanding the Core Principles of Cloud Security and its Importance 3. Cloud Landscape Assessment and Choosing the Solution for Your Enterprise SECTION II: Building Blocks of Cloud Security Framework and Adoption Path 4. Cloud Security Architecture and Implementation Framework 5. Native Cloud Security Controls and Building Blocks 6. Examine Regulatory Compliance and Adoption path for Cloud 7. Creating and Enforcing Effective Security Policies SECTION III: Maturity Path 8. Leveraging Cloud-based Security Solutions for Security-as-a-Service 9. Cloud Security Recommendations and Best Practices

Download or read book Cloud Native Architecture and Design written by Shivakumar R Goniwada and published by Apress. This book was released on 2021-10-01 with total page 716 pages. Available in PDF, EPUB and Kindle. Book excerpt: Build enterprise-grade cloud-native systems and learn all about cloud-native architecture and design. This book provides extensive in-depth details of patterns, tools, techniques, and processes with plenty of examples. Cloud Native Architecture and Design begins by explaining the fundamentals of cloud-native architecture and services, what cloud principles and patterns to use, and details of designing a cloud-native element. The book progresses to cover the details of how IT systems can modernize to embrace cloud-native architecture, and also provides details of various enterprise assessment techniques to decide what systems can move and cannot move into the cloud. Architecting and designing a cloud-native system isn’t possible without modernized software engineering principles, the culture of automation, and the culture of innovation. As such, this book covers the details of cloud-native software engineering methodologies, and process, and how to adopt an automated governance approach across enterprises with the adoption of artificial intelligence. Finally, you need your cloud-native applications to run efficiently; this section covers the details of containerization, orchestration, and virtualization in the public, private, and hybrid clouds. After reading this book, you will have familiarity with the many concepts related to cloud-native and understand how to design and develop a successful cloud-native application. Technologies and practices may change over time, but the book lays a strong foundation on which you can build successful cloud-native systems. What You Will Learn Discover cloud-native principles and patterns, and how you can leverage them to solve your business problems Gain the techniques and concepts you need to adapt to design a cloud-native application Use assessment techniques and tools for IT modernization Apply cloud-native engineering principles to the culture of automation and culture of innovation Harness the techniques and tools to run your cloud-native applications and automate infrastructure Operate your cloud-native applications by using AI techniques and zero operation techniques Who This Book Is For Software architects, leaders, developers, engineers, project managers, and students.

Download or read book Cloud Security written by Ronald L. Krutz and published by John Wiley & Sons. This book was released on 2010-08-31 with total page 1 pages. Available in PDF, EPUB and Kindle. Book excerpt: Well-known security experts decipher the most challenging aspect of cloud computing-security Cloud computing allows for both large and small organizations to have the opportunity to use Internet-based services so that they can reduce start-up costs, lower capital expenditures, use services on a pay-as-you-use basis, access applications only as needed, and quickly reduce or increase capacities. However, these benefits are accompanied by a myriad of security issues, and this valuable book tackles the most common security challenges that cloud computing faces. The authors offer you years of unparalleled expertise and knowledge as they discuss the extremely challenging topics of data ownership, privacy protections, data mobility, quality of service and service levels, bandwidth costs, data protection, and support. As the most current and complete guide to helping you find your way through a maze of security minefields, this book is mandatory reading if you are involved in any aspect of cloud computing. Coverage Includes: Cloud Computing Fundamentals Cloud Computing Architecture Cloud Computing Software Security Fundamentals Cloud Computing Risks Issues Cloud Computing Security Challenges Cloud Computing Security Architecture Cloud Computing Life Cycle Issues Useful Next Steps and Approaches

Download or read book Securing Cloud Native Apps written by Michael Anderson and published by No Starch Press. This book was released on 2024-06-25 with total page 0 pages. Available in PDF, EPUB and Kindle. Book excerpt: A no-fluff guide to implementing best practices for securing cloud native services. This book teaches you best practices for building a scaled cloud native security program, with a focus on microservices security. You’ll be guided through every step of developing and deploying security infrastructure in a cloud native software development environment, using modern, cutting-edge security tenets. In later chapters, you’ll put all of these skills together in a case study from the author’s first-hand experience as engineers and technical managers. This vendor-agnostic book relies on open source software and in-house tools you can scale up or down for your own organization’s requirements. Along the way, you’ll learn to: Perform threat monitoring to understand the security properties and risks of cloud native environments Implement secure authorization and authentication with cloud native patterns Use runtime monitoring to catch and stop attacks Implement secrets management and build secure network and services meshes Think like a security engineer at scale to effectively plan secure designs Each chapter provides step-by-step explanations of vital concepts, practical examples, common security mistakes, and quizzes to test your knowledge. Whether you’re a one-person security team or part of a larger organization,, this book equips you with the skills to build a scaled cloud native security program.

Download or read book Kubernetes Security and Observability written by Brendan Creane and published by "O'Reilly Media, Inc.". This book was released on 2021-10-26 with total page 195 pages. Available in PDF, EPUB and Kindle. Book excerpt: Securing, observing, and troubleshooting containerized workloads on Kubernetes can be daunting. It requires a range of considerations, from infrastructure choices and cluster configuration to deployment controls and runtime and network security. With this practical book, you'll learn how to adopt a holistic security and observability strategy for building and securing cloud native applications running on Kubernetes. Whether you're already working on cloud native applications or are in the process of migrating to its architecture, this guide introduces key security and observability concepts and best practices to help you unleash the power of cloud native applications. Authors Brendan Creane and Amit Gupta from Tigera take you through the full breadth of new cloud native approaches for establishing security and observability for applications running on Kubernetes. Learn why you need a security and observability strategy for cloud native applications and determine your scope of coverage Understand key concepts behind the book's security and observability approach Explore the technology choices available to support this strategy Discover how to share security responsibilities across multiple teams or roles Learn how to architect Kubernetes security and observability for multicloud and hybrid environments

Download or read book Policy as Code written by Jimmy Ray and published by O'Reilly Media. This book was released on 2024-07-30 with total page 0 pages. Available in PDF, EPUB and Kindle. Book excerpt: In today's cloud native world, where we automate as much as possible, everything is code. With this practical guide, you'll learn how policy as code (PaC) provides the means to manage the policies that guide our responses as well as the systems we maintain--Kubernetes, cloud security, software supply-chain security, infrastructure-as-code, and microservices authorization, among others. Author Jimmy Ray, a developer advocate on the Amazon Web Services Kubernetes team, provides a practical approach to integrating PaC solutions into your systems, with plenty of real-world examples and important hands-on guidance. DevOps and DevSecOps engineers, Kubernetes developers, and cloud engineers will understand how to choose and then implement the most appropriate solutions. Understand PaC theory, best practices, and use cases for security Learn how to choose and use the correct PaC solution for your needs Explore PaC tooling and deployment options for writing and managing PaC policies Apply PaC to DevOps, IaC, Kubernetes, and AuthN/AuthZ Examine how you can use PaC to implement security controls Verify that your PaC solution is providing the desired result Create auditable artifacts to satisfy internal and external regulatory requirements

Download or read book Handbook of Cloud Computing written by Borko Furht and published by Springer Science & Business Media. This book was released on 2010-09-11 with total page 638 pages. Available in PDF, EPUB and Kindle. Book excerpt: Cloud computing has become a significant technology trend. Experts believe cloud computing is currently reshaping information technology and the IT marketplace. The advantages of using cloud computing include cost savings, speed to market, access to greater computing resources, high availability, and scalability. Handbook of Cloud Computing includes contributions from world experts in the field of cloud computing from academia, research laboratories and private industry. This book presents the systems, tools, and services of the leading providers of cloud computing; including Google, Yahoo, Amazon, IBM, and Microsoft. The basic concepts of cloud computing and cloud computing applications are also introduced. Current and future technologies applied in cloud computing are also discussed. Case studies, examples, and exercises are provided throughout. Handbook of Cloud Computing is intended for advanced-level students and researchers in computer science and electrical engineering as a reference book. This handbook is also beneficial to computer and system infrastructure designers, developers, business managers, entrepreneurs and investors within the cloud computing related industry.

Download or read book Defensive Security Handbook written by Lee Brotherston and published by "O'Reilly Media, Inc.". This book was released on 2024-06-26 with total page 372 pages. Available in PDF, EPUB and Kindle. Book excerpt: Despite the increase of high-profile hacks, record-breaking data leaks, and ransomware attacks, many organizations don't have the budget for an information security (InfoSec) program. If you're forced to protect yourself by improvising on the job, this pragmatic guide provides a security-101 handbook with steps, tools, processes, and ideas to help you drive maximum-security improvement at little or no cost. Each chapter in this book provides step-by-step instructions for dealing with issues such as breaches and disasters, compliance, network infrastructure, password management, vulnerability scanning, penetration testing, and more. Network engineers, system administrators, and security professionals will learn how to use frameworks, tools, and techniques to build and improve their cybersecurity programs. This book will help you: Plan and design incident response, disaster recovery, compliance, and physical security Learn and apply basic penetration-testing concepts through purple teaming Conduct vulnerability management using automated processes and tools Use IDS, IPS, SOC, logging, and monitoring Bolster Microsoft and Unix systems, network infrastructure, and password management Use segmentation practices and designs to compartmentalize your network Reduce exploitable errors by developing code securely

Download or read book Guide to Security Assurance for Cloud Computing written by Shao Ying Zhu and published by Springer. This book was released on 2016-03-09 with total page 229 pages. Available in PDF, EPUB and Kindle. Book excerpt: This practical and didactic text/reference discusses the leading edge of secure cloud computing, exploring the essential concepts and principles, tools, techniques and deployment models in this field. Enlightening perspectives are presented by an international collection of pre-eminent authorities in cloud security assurance from both academia and industry. Topics and features: · Describes the important general concepts and principles of security assurance in cloud-based environments · Presents applications and approaches to cloud security that illustrate the current state of the art · Reviews pertinent issues in relation to challenges that prevent organizations moving to cloud architectures · Provides relevant theoretical frameworks and the latest empirical research findings · Discusses real-world vulnerabilities of cloud-based software in order to address the challenges of securing distributed software · Highlights the practicalities of cloud security, and how applications can assure and comply with legislation · Includes review questions at the end of each chapter This Guide to Security Assurance for Cloud Computing will be of great benefit to a broad audience covering enterprise architects, business analysts and leaders, IT infrastructure managers, cloud security engineers and consultants, and application developers involved in system design and implementation. The work is also suitable as a textbook for university instructors, with the outline for a possible course structure suggested in the preface. The editors are all members of the Computing and Mathematics Department at the University of Derby, UK, where Dr. Shao Ying Zhu serves as a Senior Lecturer in Computing, Dr. Richard Hill as a Professor and Head of the Computing and Mathematics Department, and Dr. Marcello Trovati as a Senior Lecturer in Mathematics. The other publications of the editors include the Springer titles Big-Data Analytics and Cloud Computing, Guide to Cloud Computing and Cloud Computing for Enterprise Architectures.