Security management, including its goals, security assurance program, and security requirements, were explained in previous chapters. This chapter will discuss security architecture and design principles. For security architects and developers, building software on a mature security framework will greatly reduce not only security risks with industry best practices but also implementation efforts. Therefore, this chapter introduces the key security elements of a cloud service architecture and some mature security frameworks, which can be applied based on the scenario. We will also discuss GDPR and data protection techniques in this chapter.
We will cover the following topics in this chapter:
- Security architecture design principles
- Cloud service security architecture reference (ESAPI)
- Security framework (Shiro, encryption, validation...
