Implementacija sustava upravljanja informacijskom sigurnošću za računarstvo u oblaku

professional thesis

• Title (english): Implementation of information system security management in cloud computing
• Author: Gordan Daut-Kaiser
• Mentor: Nikola Hadjina (mentor)
• Committee member: Gordan Gledec (predsjednik povjerenstva)
• Committee member: Nikola Hadjina (član povjerenstva)
• Committee member: Krešimir Fertalj (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; (Department of Applied Computing); Zagreb
• Defense date and country: 2013-12-04, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Specijalistički rad započinje opisom osnovnih principa rada računarstva u oblaku, tipova oblaka i s osvrtom na tri modela isporuke usluga (IaaS, PaaS, SaaS) koje računarstvo u oblaku pruža. Prikazani su standardi i organizacije kojima je u fokusu sigurnost računarstva u oblaku. Sadržava prikaz novih ranjivosti i prijetnji koji slijede iz karakteristika računarstva u oblaku, te onih koje se mijenjaju ili nestaju u odnosu na postojeće standarde sigurnosti. Posebno je razrađena implementacija ISMS sustava bazirana na ISO 27k porodici standarda na razini računarstva u oblaku i komparacija ove implementacije u odnosu na onu za standardne računarske sustave. Prikazan je primjer procjene rizika i implementacije kontrola prema ISO 27K standardu na jednostavni zamišljeni sustav koji koristi SaaS model isporuke usluga u javnom obliku računarstva u oblaku.

Abstract (english)

Thesis starts with basic principles description of cloud computing, clouds types and overview of tree service delivery models in cloud computing. Standards and organizations focused on security issues in cloud computing are presented. It consists of new, cloud computing specific vulnerabilities and threats review, including those that change or disappear related to existing security standards. Especially is developed implementation of ISMS based on ISO standards 27k family at cloud computing level and comparison of this implementation compared to the one for the standard computer systems. Shows an example of a risk assessment and implementation of control according to ISO standard 27K to simple designed a system that uses the SaaS service delivery model in public cloud computing.

• Keywords: računarstvo u oblaku; tipovi računarskih oblaka; IaaS; PaaS; SaaS; ISMS sustav
• Keywords (english): cloud computing; clouds types; IaaS; PaaS; SaaS; ISMS system
• Language: croatian
• URN:NBN: urn:nbn:hr:168:621151
• Study programme: Title: Specialist study programme in information security; Study programme type: university; Study level: postgraduate specialist; Academic / professional title: Specijalist informacijske sigurnosti (Specijalist informacijske sigurnosti)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2022-10-11 11:08:02