Securing the Cloud
ABSTRACT
This paper will review cloud technology utilized to support the Intelligence Community and will specifically address the National Security Agency’s research into vulnerabilities and risks related to cloud-based systems. Current implementation plans will be discussed for a multi- agency private cloud architecture that is under development. The paper will also review security challenges for a cloud architecture and will address specific technologies, such as data tagging, digital policy management, encryption, identity and access management, and auditing, along with intrusion detection and prevention.
AUTHORS
Information Assurance Directorate National Security Agency
Diana Parr is a Cybersecurity Technical Leader for the National Security Agency (NSA). She supports the NSA Information Assurance mission as a cybersecurity advocate to senior leadership within NSA, as well as diplomatic and intelligence agencies. She has worked on projects involving computer network attacks against government and diplomatic systems, cloud computing vulnerabilities, nuclear command and control protection, and other information assurance issues. She also served in technical management roles involving data center management, help desk operations, and software development, both while working for NSA’s Technology Directorate and in a previous assignment with the Office of the Director of National Intelligence (ODNI). She is the recipient of two national intelligence awards for service and leadership in the intelligence community. Prior to joining the federal government, Ms. Parr worked in private industry for 20 years, including four years working for software companies in Silicon Valley. Ms. Parr has an M.A. in Strategic Security Studies from the National Defense University in Washington, D.C., with concentrations in International Security Studies and Homeland Security Strategy and Leadership. She also holds a bachelor of science degree in Information Systems Management from the University of Maryland Baltimore County (UMBC).
Published In
Journal of Information Warfare
The definitive publication for the best and latest research and analysis on information warfare, information operations, and cyber crime. Available in traditional hard copy or online.
Quick Links
Archive
