Premium Essay

Increasing Attacks on Cloud Platforms

In:

Submitted By plulu
Words 1310
Pages 6
STUDENT NUMBER: 066275
CLOUD COMPUTING SECURITY TERM PAPER TWO
Living with Increasing Attacks on Cloud Computing Platforms
Cloud Computing is an on demand, flexible and cost friendly delivery platform that has provided IT consumers and organizations services such as networks, storage, servers and applications over the Internet. Its importance is increasing as a large number of industrial and technological communities are rapidly adopting it.
The benefits such as low cost and convenience of cloud computing services have significantly changed our day to days activities, however, there are numerous security issues facing cloud computing making it difficult to maintain data security and privacy, support data and service availability and demonstrate compliance. These issue also make cloud vulnerable to exploitation by attackers.
The three cloud services models used today are Software as a Service (SaaS), Platform as a Service (PaaS) and Infrastructure as a Service (IaaS).Iaas provides the most dynamic functionality since it is based as the underlying layer in cloud. It widens the resilience for users to design a practical environment that includes virtual machines running with different operating systems. This may pose as a vulnerability since an attacker could lease these virtual machines, analyze their configurations, find their vulnerabilities, and attack other customers’ virtual machines within the same cloud. Brute force and Distributed denial of service (DDoS) attacks could also take place in Iaas as it provides a platform for use of virtual machines.
Data loss is major security risk of the three cloud computing service models. In SaaS, consumers and business data is stored at a data center, in PaaS, application developers use data to test software integrity during the system development life cycle and in IaaS cloud models, data is stored in the drives of virtual

Similar Documents

Free Essay

Android

...iOS” The competition between Google Android and Apple iOSis one of the most talked after wars in mobile gadget platforms. The Google Android platform is increasingly becoming dominant in the smartphones and tablets market. Nokia, a once leading company in the mobile phone market is slowly entering the smartphone market with a new range of Lumia smartphones powered by Windows 8 mobile as it phases out its range of Symbian powered smartphones. Equally, Motorola Mobility is trying to gain a share of the market by increasing its product portfolio of smartphones in the Droid family. The Android Operating System powers the Droid range of smartphones. Samsung is by far the largest mobile manufacturing company in the world with a full range of Android powered smartphones in the Galaxy family. The recent entry of the Samsung Galaxy SIII heightened the competitive advantage of the Android Software Platform based on the Android 4.0 (Ice Cream Sandwich) software. With HTC,Blackberry OS, and Microsoft Mobile as a distant competitors, the war is clearly not between mobile phone manufacturers but the war is between software manufacturers, and in this case,Apple iOS and Google Android (Katie, 2012). Currently, the competition between Apple iOS and Google Android is so close such that it becomes difficult to tell the superior operating system (Ian, 2011). Undeniably, each mobile platform has its strengths and weaknesses. Advantages of Android OS over Apple iOS For Consumers Devices running the Android...

Words: 1828 - Pages: 8

Premium Essay

Cloud Computing

...CLOUD COMPUTING NAME: INSTITUTION: Question 1. What is the most appropriate Cloud Deployment model (or combination) for BPI (Public, Private, Community, or Hybrid)? One of the main things that we need to understand in the process of selecting the appropriate cloud development model for BPI is to understand what cloud deployment is all about. Cloud has been used for a while now and as business and security comes, it is predicted to be rising faster as years come by. The ubiquitous term cloud refers to anything that is being delivered today through the internet and in simple terms, cloud is where one can rent technology and information services on the internet through the providers. Most companies are today turning their focus on leveraging the cloud so as to cut down their capital expenditure and this is the same case with BPI which is looking for a better way to control its operating cost, therefore there is a high need for BPI to seek cloud adoption. It is vital to understand that cloud sometimes come with security risks for the IT department, which can turn out to be severely expensive for BPI to deal with, based on the current financial stress that the company is experiencing. Therefore, it is very vital for BPI to understand its requirements as it opts to a deployment model that is available on cloud. There are four different types of deployment models and these are: the private cloud, the public cloud, the hybrid cloud and the community cloud. BPI is a multinational company...

Words: 3290 - Pages: 14

Free Essay

123456

...The competition between Google Android and Apple iOSis one of the most talked after wars in mobile gadget platforms. The Google Android platform is increasingly becoming dominant in the smartphones and tablets market. Nokia, a once leading company in the mobile phone market is slowly entering the smartphone market with a new range of Lumia smartphones powered by Windows 8 mobile as it phases out its range of Symbian powered smartphones. Equally, Motorola Mobility is trying to gain a share of the market by increasing its product portfolio of smartphones in the Droid family. The Android Operating System powers the Droid range of smartphones. Samsung is by far the largest mobile manufacturing company in the world with a full range of Android powered smartphones in the Galaxy family. The recent entry of the Samsung Galaxy SIII heightened the competitive advantage of the Android Software Platform based on the Android 4.0 (Ice Cream Sandwich) software. With HTC,Blackberry OS, and Microsoft Mobile as a distant competitors, the war is clearly not between mobile phone manufacturers but the war is between software manufacturers, and in this case,Apple iOS and Google Android (Katie, 2012). Currently, the competition between Apple iOS and Google Android is so close such that it becomes difficult to tell the superior operating system (Ian, 2011). Undeniably, each mobile platform has its strengths and weaknesses. Advantages of Android OS over Apple iOS For Consumers Devices running the...

Words: 2155 - Pages: 9

Premium Essay

Cloud Security Planning

...Cloud Security Planning Abstract Cloud systems as new online storage and computing systems provide great potentials to all businesses and organizations of creating new approach of storage and computing; cloud system guarantee that all your files and valuable data can be accessed and recovered from anywhere in the world, providing a new meaning of technology. Unfortunately and as to what happen with all emerging technologies there are new threats, risks, breaches, and problems arise with such technologies. They are considered challenges that vary from configuration problems to security breaches to harmful attacks; which may cost the company large losses and in some time financial disasters. In this case study we will try to identify the major threats that may affect the cloud security negatively which can be divided into three major categories: 1. Attackers and threats: where the attacks are no longer limited by breaching the data on someone’s personal computer. It became larger wider and involves more organized crimes. 2. Developed Structure technologies: the amount of data and information used today provides great challenges to system engineers and security designers to visualize and utilize their system to isolate and protect the data on them. 3. Regularity environment challenges: Most companies and IT departments are facing great challenges to meet the laws, legal requirements and consistency acquiescence especially with growth of demand on cloud systems. ...

Words: 2955 - Pages: 12

Premium Essay

Secured Authenticated Framework for Mobile Clouding

...Authenticated Framework for Mobile Clouding VARRI MURALI KRISHNA(213CS1143) DEPARTMENT OF COMPUTER SCIENCE 1. Abstract Cloud computing is creates many challenges in the information technology world every day. In present situations use of resources using mobile phones becomes one of the essential things for everybody. The demands of the user in internet increasing day by day. But every wireless hand held devices don't have that much of resource availability and required facility. So, cloud computing is a better solution to give support resource consuming applications. If the mobiles are integrated with the cloud then user can get more facilities with resources required and big storage space for storing his private data. With addition to the benefits of cloud, there is a chance to face the security and privacy issues of the user data. This paper discuss important concepts of cloud computing and general security issues happened in mobile side as well as cloud and also describes basic idea of Kerberos. The aim of this paper is to propose the strong authenticated framework when mobiles are connected to cloud. We have proposed the improvement in the mobile cloud based framework for better security and privacy. Keywords: mobile cloud computing applications, security of data, Kerberos 2. Introduction and literature survey Rapid development in the mobile devices and cloud computing has creating some attention to everyone in the IT industry. Consider the development of security in almost...

Words: 2780 - Pages: 12

Premium Essay

Project 7000

...Cloud Computing Praveen Reddy, Polam Wilmington University SEC-6040 1. Introduction Cloud computing is the term that describes about the computer related services through the internet. As technology developments are increased significantly, many individuals and businesses are interested to use software and hardware services that are managed by third parties at remote locations (Mirzaei, 2008). The term “ cloud “ can be truly understandable how the cloud can be a value to an organization by providing various services like online data storage, social networking, online business applications and webmail’s etc. because, the cloud computing allows access to information and computer related resources from any location that has network connection (Mirzaei, 2008). 2. Components of Cloud Computing: 2.1 Cloud Client: Clients play a key role in providing access for users to client devices which consists of computer software and hardware that depends on cloud computing for application delivery. And also there are several applications which are designed specifically for delivery of cloud services and it is essentially useless without the application. For example which can include devices like computers, mobile phones and applications like operating systems, browsers etc (Nichols, 2011). The cloud client has three different types, they are * Mobile clients. * Thick clients (Nichols, 2011). * Thin clients (Most popular) (Nichols, 2011). 2.2 Distributed Servers:...

Words: 1587 - Pages: 7

Premium Essay

Cloud Computing Security

...Cloud Computing Security Mohamed Y. Shanab, Yasser Ragab, Hamza nadim Computing & Information Technology AAST Cairo, Egypt {myshanab, yasseritc, hamzanadim }@gmail.com Abstract-- In the past two decades, data has been growing in a huge scale making it almost impossible to store, maintain and keep all data on premises , thus emerged the idea of cloud computing and now it’s becoming one of the most used services used by firms, organizations and even governments. But its security risks are always a concern and a major setback. In this paper we talk about those risks and the most feared ones and what are the latest techniques to overcome them, we also discuss a solution on cloud computing based on a fully homomorphic encryption Key Words -- Cloud computing , Cloud computing security, Challenges, Privacy, Reliability, Fully homomorphic encryption. interaction. This cloud model promotes availability and is composed of five essential characteristics, three service models, and four deployment models." [1] II. TOP BENEFITS OF CLOUD COMPUTING  Achieve economies of scale. increase volume output or productivity with fewer people. Your cost per unit, project or product plummets. Reduce spending on technology infrastructure. Maintain easy access to your information with minimal upfront spending. Pay as you go (weekly, quarterly or yearly), based on demand. Globalize your workforce on the cheap.People worldwide can access the cloud, provided they have an Internet connection....

Words: 4691 - Pages: 19

Premium Essay

Nt1310 Unit 3 Assignment 1

...Sharing: Distributed system users has the ability to use any component (hardware, software or piece of data) anywhere in the system. The access to the system is being controlled by suitable resource manager that provides naming scheme and controls concurrency depending on sharing models describing how resources are provided, used and interact with each other. • Openness: It has to do with the system ability of the system components to publish their interfaces in details, intergrade with new components and function efficiently on a variety of processors. • Concurrency: Distributed systems components processes are running concurrently depending on suitable coordination mechanisms • Scalability: The ability to serve more users preserving or increasing its performance levels. • Fault Tolerance: The system has to be available even if one or more components fail. • Transparency: All kind of system users perceives it as a simple one rather than a set of components working on the same goal. Distributed systems definition and characteristics emerge three main elements that are shared by their users: • Resources: Resource sharing is the state that available hardware and software is accessible from system’s users. User access is controlled by suitable modules called resource managers. The scope of these modules is to efficiently assign resources to users. Resources managers use a system model to describe resources and a scheduler to control desired allocations. System model provides real time...

Words: 3083 - Pages: 13

Premium Essay

Cloud Hooks: Security and Privacy Issues in Cloud Computing

...Proceedings of the 44th Hawaii International Conference on System Sciences - 2011 Cloud Hooks: Security and Privacy Issues in Cloud Computing Wayne A. Jansen, NIST Abstract In meteorology, the most destructive extratropical cyclones evolve with the formation of a bent-back front and cloud head separated from the main polar-front, creating a hook that completely encircles a pocket of warm air with colder air. The most damaging winds occur near the tip of the hook. The cloud hook formation provides a useful analogy for cloud computing, in which the most acute obstacles with outsourced services (i.e., the cloud hook) are security and privacy issues. This paper identifies key issues, which are believed to have long-term significance in cloud computing security and privacy, based on documented problems and exhibited weaknesses. • applications can be developed upon and deployed. It can reduce the cost and complexity of buying, housing, and managing hardware and software components of the platform. Infrastructure-as-a-Service (IaaS) enables a software deployment model in which the basic computing infrastructure of servers, software, and network equipment is provided as an on-demand service upon which a platform to develop and execute applications can be founded. It can be used to avoid buying, housing, and managing the basic hardware and software infrastructure components. 1. Introduction Cloud computing has been defined by NIST as a model for enabling convenient, on-demand...

Words: 7808 - Pages: 32

Premium Essay

Cloud Computing and Risk Accessment

...Cloud Computing Benefits, risks and recommendations for information security Rev.B – December 2012 2 Cloud Computing Benefits, risks and recommendations for information security Document History Date December 2009 Version 1.0 Modification Initial Release, Rev.A Author Daniele Catteddu, Giles Hogben Thomas Haeberlen Lionel Dupré December 2012 2.0 Rev.B About ENISA The European Network and Information Security Agency (ENISA) is a centre of network and information security expertise for the EU, its member states, the private sector and Europe’s citizens. ENISA works with these groups to develop advice and recommendations on good practice in information security. It assists EU member states in implementing relevant EU legislation and works to improve the resilience of Europe’s critical information infrastructure and networks. ENISA seeks to enhance existing expertise in EU member states by supporting the development of cross-border communities committed to improving network and information security throughout the EU. More information about ENISA and its work can be found at www.enisa.europa.eu. Contact details This report has been edited by: Lionel Dupré, Thomas Haeberlen For contacting ENISA or for general enquiries about this report, please use the following details: Email: resilience@enisa.europa.eu Internet: http://www.enisa.europa.eu Cloud Computing 3 Benefits, risks and recommendations for information security Legal notice Notice...

Words: 12166 - Pages: 49

Premium Essay

Nt1330 Unit 3 Assignment 1

...The easiest way for them to gain access to the confidential data on the network is by bluffing a person , making him to handover the secret keys and it is not just by writing a clever piece of code. The phishing attacks are increasing these days, as fake official messages and websites, or communications would appear just like coming from the trusted sources on the network. The hackers are trained experts who will gain access to the destination servers. Most of the time hackers target very high level executives in order to steal and utilize their data for various malicious activities on the network. If the data is related to CEO of an XYZ company, it can be easily hacked, whereas it is still easier to hack data related to other people on the network. In order to avoid these types of attacks we need a security product which is capable of performing real-time monitoring of malicious data with the feature of preventive blocking capabilities of these malicious traffic on the...

Words: 2324 - Pages: 10

Premium Essay

Cyber Security and Its Challenges to Society

...Cyber Bullying 10 Causes of Cyber-crime 10 History of Cyber-crime 10 Cyber-crime in Modern Society 11 Categories of Cyber-crime 11 Individual: 12 Property: 12 Government: 12 How to Tackle Cyber-crime 12 RECENT SURVEY ISSUES ON CYBER SECURITY TRENDS 14 Mobile Devices and Apps 14 Social Media Networking 14 Cloud Computing 14 Protect systems rather Information 15 New Platforms and Devices 15 Everything Physical can be Digital 15 Survey Questions 16 Conclusion 16 Cyber Security and its Challenges to Society Introduction: Over the past several years, experts and policy makers have expressed increasing concerns about protecting internet from cyber-attacks—deliberate attempts by unauthorized persons to access. Many experts expect the number and severity of cyber-attacks to increase over the next several years. The act of protecting internet, computer systems and their contents has come to be known as cyber security. Abroad and arguably somewhat fuzzy concept, cyber security can be a useful term but tends to defy precise definition. It usually refers to one or more of three things: * A set of activities and other measures intended to protect—from attack, disruption, or other threats—computers,...

Words: 3707 - Pages: 15

Premium Essay

Mobile Cloud Computing

...CHAPTER 1 : INTRODUCTION Mobile devices allow users to run powerful applications that take advantage of the growing availability of built-in sensing and better data exchange capabilities of mobile devices. As a result, mobile applications seamlessly integrate with real-time data streams and Web 2.0 applications, such as mashups, open collaboration, social networking and mobile commerce. The mobile execution platform is being used for more and more tasks, e.g., for playing games; capturing, editing, annotating and uploading video; handling finances; managing personal health, micro payments, ticket purchase, interacting with ubiquitous computing infrastructures. Even mobile device hardware and mobile networks continue to evolve and to improve, mobile devices will always be resource-poor, less secure, with unstable connectivity, and with less energy since they are powered by battery. Mobile devices can be seen as entry points and interface of cloud online services. Mobile devices (e.g., smartphone, tablet pcs, etc.) are increasingly becoming an essential part of human life as the most effective and convenient communication tools not bounded by time and place. Mobile users accumulate rich experience of various services from mobile applications (e.g., iPhone apps, Google apps, etc.), which run on the devices and/or on remote servers via wireless networks. The rapid progress of mobile computing (MC) becomes a powerful trend in the development of IT technology as well as commerce...

Words: 5635 - Pages: 23

Premium Essay

Cloud Computing

...Cloud Computing: Moving Riordan into the Future Sean Mahany, Claude Bartee, and Michael Robles CIS/207 3/12/2014 Vikram Chowdiah Cloud Computing In essence cloud computing is what most companies today use, it is the way of the future. It will allow all of Riordan’s manufacturing facilities to work more cohesively and share services via a web server. Cloud computing will also allow Riordan to get all of their applications up and running faster and more smoothly. It will also reduce the environmental damage due to the decrease of power cloud computing requires. The unpredictable and sometimes fluctuating business demand will enable the IT department of Riordan to rapidly adjust resources. The system will improve the ability to manage the cloud computing services more easily. Although companies that provide the cloud service usually use a “pay as you go model” which in turn can have unexpectedly high and increasing charges if the administrators do not adapt to the prices of using the Cloud services. With the service, multiple users can access and edit their data without having to pay for licenses for certain applications they normally would have to use without the Cloud service. The implantation of the service requires less IT trained employees, so that would decrease the amount of training Riordan would have to spend to train their employees in IT. The maintenance aspect is easier due to the fact the service does not need to be installed on each user’s computers...

Words: 1726 - Pages: 7

Premium Essay

Sap Cloud

...Alleviating malicious insider in Cloud through Offensive Decoy Technology BITS ZG628T: Dissertation By ARUN PRASATH M S (2013HT13268) Dissertation work carried out at L&T Info Tech LTD, Chennai BIRLA INSTITUTE OF TECHNOLOGY & SCIENCE PILANI (RAJASTHAN) November 2015 i Alleviating malicious insider in Cloud through Offensive Decoy Technology BITS ZG628T: Dissertation By ARUN PRASATH M S (2013HT13268) Dissertation work carried out at L&T Info Tech LTD, Chennai Submitted in partial fulfillment of M.Tech. Software Systems degree Programme Under the Supervision of Matthew Jones, Senior Software Engineer, L&T Info Tech, Chennai BIRLA INSTITUTE OF TECHNOLOGY & SCIENCE PILANI (RAJASTHAN) November 2015 ii CERTIFICATE This is to certify that the Dissertation entitled Alleviating malicious insider in cloud through offensive decoy technology and submitted by ARUN PRASATH M S having ID-No. 2013HT13268 for the partial fulfillment of the requirements of M.Tech. Software Systems degree of BITS, embodies the bonafide work done by him/her under my supervision. Signature of the Supervisor Place: Chennai Date: 31.10.2015 Matthew Jones, Senior Software Engineer, L&T Info Tech, Chennai iii Birla Institute of Technology & Science, Pilani Work-Integrated Learning Programmes Division First Semester 2015-2016 BITS ZG628T: Dissertation ABSTRACT BITS ID No. : 2013HT13268 NAME OF THE STUDENT : ARUN PRASATH MS EMAIL ADDRESS ...

Words: 7788 - Pages: 32