Cloud computing is about hardware-based services involving computing, network and storage capacities. These services are provided on-demand, hosted by the cloud provider and can easily scale up and down.
0
votes
1answer
302 views
Is Intel AESNI supported by Xen in VPS/Cloud hosting environments? [closed]
I'm having trouble determining whether when using a hosting company that uses Xen virtualization and Intel processors with AESNI embedded encryption, I would have access to AESNI (i.e., is it an ...
2
votes
2answers
398 views
Securing a Ubuntu system on Amazon Web Services
I'm in the process of setting up a Ubuntu server on Amazon Web Services / EC2, which will need to host the following:
A relatively simple Java-based website (using the Noir framework)
A Java-based ...
4
votes
2answers
419 views
Amazon EC2 security compared to a standalone server
Lets say I want to run a out-of-the-box instance on Amazon EC2 and on my own standalone server. I don't run anything on them, just let them idle by themselves. What is the relative level of security ...
4
votes
2answers
289 views
Using intranet SSO to access sites hosted on public cloud
We are thinking to move some of our intranet sites to public cloud.
Is there any way to keep using company SSO to authorize access to those sites from the company intranet?
1
vote
1answer
1k views
Are there any reviews or user experiences with Secretsync?
I haven't been able to find much in the way of professional reviews for Secretsync - http://getsecretsync.com/ss/
But i'm wondering how it compares to Boxcryptor and Truecrypt. How secure is ...
1
vote
0answers
94 views
What are the major security concerns in cloud computing? [duplicate]
Possible Duplicate:
What are security issues which are specific to cloud computing?
What are the major security concerns in cloud computing? From the point of view of a user that is using ...
3
votes
1answer
146 views
Do any cloud storage system offer an append-only mode for buckets, directories, etc.?
I'm curious what cloud storage systems offer an append only mode, especially open source ones. In particular, would any cloud storage systems support the following workflow :
Anonymous users may ...
8
votes
4answers
345 views
Does OpenID, SAML pose a threat to Tor's anonymity? How can I protect from a compromised .exit node?
This is a thought experiment on the interaction between Tor, OpenID and one (or more) compromised nodes in the secure path. I'm focused on how to use technology in a way that adds value to a secure ...
9
votes
5answers
1k views
Risks with Amazon S3 and costs
I have little security knowledge and looking at image hosting for a startup:
Considering S3 doesn't allow you to set a cap on costs, how likely is it that someone could flood S3 with requests for my ...
2
votes
1answer
420 views
What browsers support encryption or decryption using local certificates, or smartcard readers?
I am working on a cloud-based solution and I would like to encrypt / decrypt the data locally using either a SmartCard or local Machine certificate. I'm hoping to do this in Javascript, but may ...
10
votes
2answers
769 views
CloudFlare benefits or drawbacks
Anyone running a webserver would agree, security can be a hustle and tedious job. Recently I came across a service claiming to help with that -- CloudFlare.com. There's plenty of benefits listed on ...
5
votes
2answers
674 views
Export laws on the cloud (key size)
Do the U.S. export laws around AES-256 apply to applications hosted in the cloud?
3
votes
1answer
161 views
Can wildcard certificates hide/obscure the hostname in a TLS connection?
I'm trying to increase security for my cloud-based / multi-tenant environment. I'm considering having clients access an obscure URL such as GUID.myCloud.com. I will then respond to that guid-based ...
3
votes
3answers
934 views
Google App Engine Security
I am writing a master thesis concerning security of certain applications, and as a part of it I want to write a web app on Google App Engine and test how secure it is.
Does anyone know if there was ...
0
votes
0answers
99 views
Google App Engine Security [duplicate]
Possible Duplicate:
Google App Engine Security
I am writing a master thesis concerning security of certain applications, and as a part of it I want to write a web app on Google App Engine ...
19
votes
1answer
1k views
Has anyone achieved PCI compliance on AWS?
All the FAQs, documents and statements published by AWS aside, did any Level 1 merchant or service provider actually achieve PCI compliance on AWS yet? We're evaluating moving some of our services to ...
1
vote
3answers
2k views
Dropbox vulnerability details
Dropbox (the online cloud storage provider) was recently in the news for some security and privacy vulnerabilities. What was the problem, and what has been done to resolve it?
2
votes
1answer
585 views
iOS/Android authentication and security
Here is what I am trying to do and can anyone provide some best practice advice for authentication and security?
Each user will have their own private database on the cloud. He will have his local ...
5
votes
1answer
645 views
How to operate a honeypot in the cloud?
Just finished reading "Honeypot on home network to help me learn", and the top-voted/selected answer that suggest deploying a honeypot to the cloud, but the answer does not say how to do it; also, ...
3
votes
1answer
577 views
Peer review of C# cryptography for Azure Table security
Edit: Update - I am researching how to implement AES with authentication in an efficient way for this project. If you have the time I'd appreciate your skill in finding the best implementation for ...
6
votes
1answer
420 views
How do I learn Cryptographic/Mathematical notation
I asked a question earlier where it was recommended that I describe my issue using standard cryptography notation.
How do I learn this notation and how to convey my approach?
How can I annotate this ...
5
votes
2answers
363 views
What is more secure: Many subdirectories, or many subdomains?
I have 3 websites that could be configured as a "VirtualApplication" in servicedefinition.csdef:
www.mydomain.net/enroll
www.mydomain.net/admin
www.mydomain.net/
... or I can configure them as a ...
2
votes
2answers
400 views
What CSS is considered Safe or Unsafe within a multi tenant website?
I'm reading the Azure Patterns and Practices multi-tenant guidance and in there it says
Cascading style sheets Behaviors are
one feature that the Surveys site will
not support.
What CSS ...
2
votes
2answers
170 views
How does LiveID work? Is there any documentation on the LiveID provisioning site msm.live.com?
I'm trying to learn details on how LiveID works, when compared to other federation technologies.
To be honest, I'm a bit overwhelmed by all the options at https://msm.live.com/ and want to understand ...
2
votes
2answers
82 views
When would you support the storage of Security & Application event logs in the Cloud?
Under what conditions would you be comfortable storing server log data residing in a secure facility, off-premises?
When would you consider a SaaS /hosted solution and what value add should that ...
