Introduction

The OpenStack Security Guide is the result of a five day sprint of collaborative work of many individuals. The purpose of this document is to provide the best practice guidelines for deploying a secure OpenStack cloud. It is designed to reflect the current state of security within the OpenStack community and provide frameworks for decision making where listing specific security controls are not feasible due to complexity or other environment specific details.

• Acknowledgements
• Why and how we wrote this book
  • Objectives
  • How
• Introduction to OpenStack
  • Cloud types
  • OpenStack service overview
• Security boundaries and threats
  • Security domains
  • Bridging security domains
  • Threat classification, actors and attack vectors
• Selecting supporting software
  • Team expertise
  • Product or project maturity
  • Common Criteria
  • Hardware concerns