Sec+ 2.2 Notes

Virtual machine (VM) escape refers to an unauthorized user taking control of a host machine through a VM.

Container virtualization isolates and protects applications from other parts of the system and uses fewer resources than a standard virtualized system.

Virtualization sprawl is a phenomenon that occurs when the number of VMs on a network reaches a point where the administrator can no longer manage them effectively.

A public cloud model is maintained by a cloud service provider. The provider makes shared resources available to the general public over the internet.

A private cloud is defined as computing services offered either over the internet or within a private internal network. Only certain authorized users can access private cloud infrastructure, such as employees in an organization. Resources are only for the organization. A little cloud within the cloud just for your organization.

A hybrid cloud model is an environment that uses a mix of public, community, and private cloud concepts with a single management platform.

A Community cloud is a collaborative effort in which infrastructure is shared between several organizations that share a common interest. For example, local public entities or locally clustered law firms might use a community cloud to save money.

A Software Defined Network (SDN) separates data and control planes in a network. It uses virtualization to route traffic to its intended destination, instead of using proprietary hardware.

A Virtual Private Network (VPN) extends a private network across a public network. It allows users to send and receive data from an internal network across a public network.

The Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system and provides secure key storage for full disk encryption.

A Hardware Security Module (HSM) is a device used to generate, maintain and store cryptographic keys. It can be an external device and can easily be added to a system. The HSM will maintain the integrity of the key.

Saas – Software as a Service. Rather than installing software on client machines, SaaS acts as software on demand.

Paas – Platform as a Service. This is a marketing term used to describe the offering of computer platforms in the cloud.

IaaS – Infrastructure as a Service. Rather than needing data centers businesses can contract for utility computing as needed. Think Microsoft Azure or AWS.