Week 4 Posting - Cloud Networking

This week, the class covered cloud networking, which involves appropriating IP address spaces in cloud networks, identifying cloud stacks, and configuring network interfaces in the cloud. For me, I found incorporating the OSI model to the Cloud Stack Theoretical model benefits me by learning how to manage and organize the information. Layer 1 is the physical layer. This layer includes servers, cables, hardware, etc. Layer 2 is the virtualization layer. This layer emphasizes the virtualization software and hardware. Layer 3 is the network layer. This layer focuses on managing resources, costs, security, and other services. Layer 4 is the OS layer. This layer is centered around data storage, data processing and workloads. Lastly, layer 5 is the application layer. This layer is for the traditional lower-layer functions. The cloud service provider is responsible for monitoring the physical and virtualization layer (West, 2022, p. 132).

West, J. (2022b). CompTIA Cloud+ Guide to Cloud Computing. Course Technology.

Week 3 Posting - Migration to the Cloud

 

            Data transfer is the procedure of migrating data from location A to location B. In the case for cloud computing, it’s the motion of moving data to and from a storage environment. This week, we learned about cloud migration and its functionalities. One terminology I want to bring up is the methodologies of transferring data and the different types of data transfer: public internet, private connection, and offline transfer.

Public internet enables minimal and slow data migrations. Private connections low latency, high availability and increased bandwidth since the user is not competing for connections. One drawback I learned is a private connection often requires a long-term dedicated contract with a specific ISP. Lastly, offline transfer is transferring encrypted data onto a storage device and physically migrating it to the cloud service provider. This could mean package delivery (West, 2022, pp.90-92).

West, J. (2022b). CompTIA Cloud+ Guide to Cloud Computing. Course Technology.

Week 2 Posting - Virtual Hardware

Virtual network interface controllers or vNICs physically and virtually connect the virtual machine to other neighboring machines (West, 2022, p. 46). These are the links that enables the host to connect to VMs. Throughout my research, I learned about three common network configurations: bridged, NAT (network address translation), and Host-only mode.

Bridged mode is known to be the easiest route regarding accessibility for VM to connect to a network since it uses the host’s physical network adapters. NAT mode is useful if the user needs to keep their virtual machines private and away from the public eye. NAT is best suited for testing the waters. Lastly, the host-only mode is basically a one-way road. WMs can share data with each other but they cannot communicate with other nodes beyond the host (West, 2022, p. 47).

 

References:

West, J. (2022b). CompTIA Cloud+ Guide to Cloud Computing. Course Technology.

Week 1 Posting - Introduction to Cloud Computing

Hello friends! I’ve had this blog for a long time, and I am excited to starting blogging about my experiences with BSIT 400 Cloud Computing and Governance class. When it comes to cloud computing, I have no experience on the professional field (yet) but I am willing to learn more about the functionalities and backbone of a cloud infrastructure and how businesses and organizations benefit from utilizing its features. When it comes to the daily and casual lifestyle, there are several cloud services we use that we don’t realize. After reading researching about cloud services, I came across an article from MarcoNet that listed a good amount of cloud services that we use daily. One thing I want to point out is file-sharing. This feature can be used in both professional and casual settings. Google Drive is an example of a well-known file-sharing service where the user can share their personal photos to their loved ones. To add to that, Google Drive can be used in a business setting where associates can exchange and share documents on specific projects and sensitive files. Cloud computing is an excellent concept that helps individuals and organizations with daily activities.

Marco. (2023, November 27). 7 cloud services you use every day without even realizing

it. Marco. https://www.marconet.com/blog/cloud-based-services-you-use-every-day-without-even-realizing-it

Week 9 Posting - Incident Response Process and Procedures, Indicators of Compromise, and Basic Digital Forensics Techniques

 Regarding independent contractors, I am in the gray area. Hiring experienced contractors to deal with IR activities hold a lot of benefits. They’ve had experienced dealing and handling certain incidents. It saves money as well since it’s the contractor’s responsibility to use their own equipment and taxes. However, it’s game over not necessarily) when a contractor is injured during the job. Liability is a hot topic whenever they’re injured on site and the employers has to deal with the situation. Another thing is that Each company should have their own incident response worker(s) to combat any dire situations that pose as a threat to company reputation or productivity. It’s good to involve outside power to intervene and help with the situation. But it is better off to have someone in the company who has access to all related applications and tools to fix and augment the issue.

Week 8 Posting - Automation Concepts and Technologies

 Cyber Security automation has a massive upside, improving accuracy and efficiency while reducing the amount of redundancy and incidence.  However, I am leaning more to disagreeing with cyber security automation “leveling” the playing field. We still need sys and network admins to monitor and maintain said programs. The amount of risk and consequences still persist. Attackers are always on the clock and they won’t be waiting for the automated security to keep up with them. Matter of fact, I wouldn’t be surprised if they manipulate the defenses. How do we, as users, know if we’re under attack when the automated security doesn’t react or report any breach? Lastly, I want to point out is the “human error” into utilizing an AI focused defense system, which the automated system itself depends on the sys admin’s configuration ability. One misstep or mistake can be catastrophic (not too dramatic).

Week 7 Posting - The Importance of Proactive Threat Hunting

Attack vectors

A feared and respected general does not necessarily rush into the battlefield with no plans in their arsenal. In order for a successful attack against their enemies, they need to plan ahead, optimize their current resources and understand the playground. Likewise, most attackers usually have an attack vector in their bag. This is a method of obtaining access to a network or system illegally. These attackers have different ways to approach them, whether it’s through malware, vulnerability exploitation, social engineering or insiders (Chapman & Maymi, p.339, 2020). Malware now days are becoming more polymorphic, meaning they adapt to their environments while on the move to infecting the system. Regarding vulnerability exploitation, zero-day attacks prove to be a massive blow to defenders and threat hunters since no one will be aware or notice any breach that occurs. Social engineering is tricking users and targets into revealing their personal and sensitive information. Because of this manipulative act, attackers will plant their malware into the network. Lastly, an insider can be anyone, which is one of the trickiest assignments for a threat hunter to exploit. This could be a former or current employee. They are literally in the network and it’s hard to figure out whether they’re doing suspicious activities or not.

 

References:

Chapman, B., & Maymi, F. (2020). CompTIA CySA+ Cybersecurity Analyst Certification All-in-One Exam Guide, Second Edition (Exam CS0-002). McGraw Hill Professional.