Uma visão da gestão do processo de identificação e autenticação entre domínios de segurança na computação em nuvem

• Autor(a) principal: Varela, Patrick de Macedo
• Data de Publicação: 2017
• Tipo de documento: Trabalho de conclusão de curso
• Idioma: por
• Título da fonte: Repositório Universitário da Ânima (RUNA)
• Texto Completo: https://repositorio.animaeducacao.com.br/handle/ANIMA/10957
• topic: Nuvem; Segurança da informação; Gestão de identidade; Token; RBAC

Cloud computing is about the ability to store data on shared servers anywhere in the world through the internet. This concept is based on grid computing and had its first appearance in history in 1961 with then-Professor John McCarthy using the Mainframe. The main advantage of cloud computing is its scalability, since services can be contracted according to the demand of the institution, eliminating the need to have a Data Center in the company itself, however, it creates a gap in identity management when The control leaves the internal environment of the company. In this sense, a proposal is presented that aims to manage the process of identification and authentication in private clouds, based on the principles of role-based access control (RBAC) and a policy deny all the assets contained in the cloud, that is, all Data stored in the cloud has its access blocked, being allowed access only those users whose function has the privilege of access. Being that the main component of identity management is the use of security Token technology that contains all the security information of the management system and the user-friendly permissions. With the adoption of security policies appropriate to the risks inherent to the organization, implementation and implementation of a cloud identification and authentication process management system, it is possible to mitigate the risks and increase the levels of security of the company's data.