+
+
Security is defined as a set of mechanisms to protect sensitive data from vulnerable attacks and to guaranteeconfidentiality, integrity and authenticity of data.
+
+
+
Network security, in a cloud environment (IaaS, PaaS, and SaaS) OR Cloud of Things consists of the security of the underlying physical environment and the logical security controls that are inherent in the service or available to be consumed as a service.
+
+
+
+-
+
Physical environment security ensures access to the cloud service is adequately distributed, monitored, and protected by underlying physical resources.
+
+-
+
Logical network security controls consists of link, protocol, and application layer services.
+
+
+
+
+
In a cloud environment, a major part of network security is likely to be provided by virtual security devices and services, alongside traditional physical network devices.
+
+
+
Typically, the inspection and control of network traffic do not pass through physical interfaces where classical control devices can analyze or block them.
+
+
+
This is the reason why effective controls require the integration with the software layer - network security architecture, security gateways (firewalls, WAF, SOA/API), Security Products (IDS/IPS, Sub Tier Firewall, Security Monitoring and Reporting, Denial of Service (DoS) protection/mitigation, and secure “base services” like DNSSEC and NTP.
+
+