Collecting data in one place and classifying it

[relemedf5w023]

With SaaS, full control over the system lies with the cloud provider, from physical access to the hardware infrastructure to application programs. Security functions in the projection on the user are reduced to ensuring the reliability of the data provided to the cloud and monitoring the correctness of the algorithms when working with them.

Access control and data protection
Ensuring security for cloud applications typically breaks down into the following parts:

· access control;

· account management;

· control and management of privileged users.

With IaaS, account management and access control are the responsibility of the users themselves. This is because the provider only controls access to the physical infrastructure and virtual configurations. What is inside is outside of its control.

In PaaS and SaaS, the responsibilities change. While access control remains on the user's side, ensuring the security of program interfaces (API) and auditing events in the system are the responsibility of the provider. Account management functions, including control over the actions of privileged users, are assigned to both parties - the provider and the user.

The implementation of data security functions is often associated with the following mandatory operations:


· encryption and masking of data;

· monitoring data changes and control over file activity;

· control over access to data;

· secure destruction of data.

In IaaS, the responsibility for data protection mexico mobile database with the user. When using the PaaS model, the provider is obliged to take the necessary measures to ensure reliable protection of databases. To do this, it uses available tools that provide activity monitoring and access protection. The user is assigned control over the authenticity of the content and the integrity of the data.

Application security and hardware infrastructure control
SaaS establishes a shared responsibility for application security. The client company is required to monitor the security of its data and its transmission, while the cloud provider is tasked with ensuring the security of the application being used.

Application security control includes:

· taking into account the necessary requirements at the design stage and ensuring control over the source code;