How to effectively secure IaaS and PaaS environments