2022/01/31 by Grant Dasher, Dasher, Grant, Ines Envid +3
Computer Science · #Cloud Data Security Solutions #Cryptography and Security (cs.CR) #Digital and Cyber Forensics #Distributed #FOS: Computer and information sciences #Networking and Internet Architecture (cs.NI) #Parallel #Security and Verification in Computing #and Cluster Computing (cs.DC) #cs.CR #cs.DC #cs.NI
paper · pdf · doi:10.48550/arxiv.2201.13010
arxiv created 2022/01/31 · openalex publication_date 2022/01/31 · arxiv updated 2022/02/01 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
This paper explores three approaches for protecting cloud application data planes to prevent unauthorized access to the application and its data and to prevent unwanted data exfiltration. Through an exploration of various concrete security architectures, we focus on (1) Cloud Security Perimeters to provide a boundary around data and infrastructure in the cloud that provides a line of defense both to improper access to sensitive information and the exfiltration of that information, (2) Cloud Landing Points to provide a safe integration point between parts of your cloud applications and on-premises applications to communicate through, and (3) Zero Trust security architectures that are built on the principles of defense in depth and least-privilege access. Using these approaches together provides critical protection for services and applications as they transition from traditional on-premises network security to the Cloud security architectures, and then to potentially Zero Trust security architectures.