Preface. Architecture of Cloud Platforms. Emerging Threats and Threat Modeling. Penetration Testing for Cloud Platform. DevSecOps in Cloud. Cloud Governance, Risks and Compliance. Designing Secure Cloud. Security Automation: AI and ML in Cloud Security. Incident Response in Cloud. Case Studies in Cloud Security. References. Index.?
?
This book offers a hands-on guide to cloud security from both offensive and defensive perspectives. It explores real-world threats like phishing, data exfiltration, and zero-day exploits, while equipping professionals with tools for?threat modeling, DevSecOps, and penetration testing.?
?
The book reviews the zero-trust model that deviates from the traditional definition of trust boundaries and validates all interactions in a cloud environment. The incident response life cycle is used to prepare for, identify, contain, and eradicate security threats in the cloud. It discusses how automation and autonomous cyber defense tools based on Artificial Intelligence and Machine Learning and techniques can help resourceconstrained security teams address cloud security at a scale. The book also elaborates upon some helpful case studies on the practical deployment of cloud security solutions, their limitations, and lessons learned based on case-studies experience in cloud security.
Ankur Chowdhary is a cybersecurity researcher and currently works as a Staff Security Engineer at 6sense Insights, Inc. He has over 10 years of experience in cybersecurity industry and has presented his research work at many leading conferences such as DEFCON. Ankur completed his PhD (2020) and M.S. (2015) in Computer Science with specialization in cybersecurity from Arizona State University. His research interests include Cloud Security, Software Defined Networks, and application of Arl£¾