Cloud computing is about hardware-based services involving computing, network and storage capacities. These services are provided on-demand, hosted by the cloud provider and can easily scale up and down.

learn more… | top users | synonyms (1)

3
votes
3answers
172 views

Are cloud-based collaboration tools “safe”?

I've tried to bring in collaboration tools at my company such as Evernote, Dropbox, OneNote, GoogleDocs etc. at our company but am finding it tough to get people on board. We use Sharepoint to store ...
0
votes
1answer
282 views

HIPAA compliant on Azure cloud? [closed]

We are using WebRoles to host our api, Table storage to persist PHI and Blob Storage to persist MRIs and CT images. What is required to become HIPAA Compliant? -- Edit 2014-02-17 -- I just want to ...
9
votes
7answers
2k views

Encrypt Virtual Machine in the cloud

I am no expert when it comes to security in virtualized environments. However a problem I always saw is: What happens if the host OS gets hacked and an attacker gains administrative privileges? How ...
5
votes
3answers
604 views

How did the spammers get this address?

A few months ago I configured a test mail server on Amazon AWS, all legit. I used a new address to my catchall-domain (something similar to, but not exactly, ...
0
votes
1answer
68 views

Why is no cloud allowed in this brief? [closed]

I couldn't find a better place on StackExchange for this question, but please point me in the right direction if there is a better place for it. My company is bidding for some work, and in the ...
1
vote
2answers
246 views

What are the security risks associated with storing passwords on the internet?

With products such as LastPass that store encrypted passwords on remote servers, what are the associated risks that aren't applicable to locally stored and encrypted passwords? If something is ...
2
votes
2answers
974 views

Does setting up a DMZ for a home consumer “cloud” appliance make sense?

Some of you may have seen/hard of Western Digital's MyCloud NAS solution for home networks. This comes with a proprietary app suite for mobile devices and workstations alike. This allows the consumer ...
0
votes
2answers
181 views

How much safe is “the cloud” ? What is the simplest and safest approach in storing everyday personal data?

You use multiple computers in work, home and mobile devices (android, ipad). You want to share your files between devices and you use physical sources: an SD card, dvds, a usb stick etc. with every ...
0
votes
1answer
134 views

Any issues with this security design for cloud storage? Server doesn't even need to know password to log someone in

I've created an algorithm I think I'm going to use for a cloud storage service I'm developing- if there are no issues or vulnerabilities with it. It's this along with TLS and forward secrecy ...
2
votes
0answers
42 views

Advanced research in securing development environment when offered via remote access

With this question I am looking for a direction or suggestions towards advanced research that might be going on currently in designing remote access environments for the development environment(DE) ...
2
votes
3answers
1k views

How to mitigate SSL based DDoS attacks?

as you probably know the problem with SSL based DDoS attacks is, that the traffic cannot be analysed and filtered by a DDoS mitigation service provider such as Prolexic, Akamai, Radware, etc. without ...
1
vote
2answers
226 views

PCI-DSS - key-based shell access to internal servers?

In the following PCI 2.0 requirement, I am not sure how to interpret computer access to internal machines (not remotely accessible): Requirement 8: Assign a unique ID to each person with computer ...
2
votes
2answers
79 views

ICO compliance and Google Cloud SQL

I have a basic simple question for which I couldn't find anywhere. Is is possible to use Google Cloud SQL services and still retain the regulations from ICO and other similar requirements? I ...
2
votes
3answers
284 views

Protecting personal documents in cloud

I want to keep my personal documents in cloud e.g. Dropbox. But I want some of my documents be encryted and password protected, such that: 1. even if my Dropbox gets hacked, those documents still have ...
3
votes
1answer
2k views

What is the best practice for storing a secret on the cloud?

This post on Securing Java Application Data for Cloud Computing offers a good introduction to using a Java KeyStore for securing encrypted data in the cloud. It neglects, however, to answer the ...
1
vote
1answer
225 views

Which cloud providers can be used for the simulation of DDoS attacks? [closed]

Cloud providers have a great infrastructure to perform DDoS simulations. You can get thousands of virtual machines with different IP addresses, fully customizable with the tools you need for testing. ...
-3
votes
2answers
339 views

How to check if my files were uploaded via cloud storage?

I've had an employee leaving the other day and he's told people in the business that he might have taken some sensitive information. It's likely to be via cloud storage (e.g. Dropbox, Box, Evernote, ...
6
votes
6answers
16k views

It is safe to store photos and documents on skydrive / google cloud services?

I have over 20GB of photos and documents stored on my hard disk without a backup. I'm thinking about saving all of them in a cloud service such as Microsoft Skydrive or google cloud, but I'm wondering ...
0
votes
2answers
336 views

encrypted cloud storage with partial local copy

Is there a cloud storage solution with the following features: partially copied locally. Not fully like dropbox so it can be larger than the local disk. Not fully in the cloud but just a local disk ...
-2
votes
1answer
150 views

US Export Laws (Encryption Cloud Service) [closed]

Okay - so I have been extensively looking into US export/import laws relating to encryption software (5D992), however I have a few questions about the laws and their applicability. So, the laws ...
7
votes
1answer
784 views

AWS VPC - should connections between instances be over SSL?

Say I have a few EC2 instances in an AWS VPC network, each assigned its own private address for the subnet at creation. Say one of them is a DB, and another one some kind of web app talking to the DB. ...
6
votes
2answers
1k views

What are the security risks of the Service Bus, and how do you mitigate them?

The Service Bus is software that can be installed on Windows or rented on Azure and allows someone to relay SOAP/WCF information over the internet in the form of a XML over HTTPS payload. One risk ...
6
votes
3answers
1k views

Safe implementation of sharing encryption secrets (username, password) in the cloud

I'm building a multi-tenant (cloud) environment that needs to push out (or make available for download) configuration files for agents (background services) that receive this information. One of the ...
0
votes
1answer
69 views

Performance issues while applying encryption at host or guest level?

One of the security expert here suggested me to apply encryption at guest(virtual machine) level rather than applying at host level with good reason. Before applying that I want to know what can be ...
0
votes
1answer
139 views

Which one is best, host or guest encryption?

Can anyone please tell me which option is better, I mean whether I should encrypt my data at virtual machine level or guest level in cloud? I tried to investigate it but did not find best solution so ...
7
votes
3answers
608 views

Can cloud based password managing services be trusted?

I'm a big time user of cloud based password managing services like LastPass. But in the light of recent revelations like various government backdoors in popular sites, programs like prism, etc. I'm ...
2
votes
1answer
262 views

How are IaaS Virtual Machines Isolated?

I am currently examining Hypervisor firewalls for my graduate thesis, but I unfortunately don't have a lot of experience with IaaS environments. How are IaaS Virtual Machines network isolated from ...
0
votes
2answers
713 views

Vulnerability of the open port

I'm installing service on the cloud machine and I was wondering on port vulnerabilities for my customers. My service which lives on server A (often on a customer site) needs to access server B ...
0
votes
1answer
144 views

opening up Active directory to cloud services?

We are testing SPAM/Virus cloud solutions and they can read active directory users and groups to help with users set-up and configuration. All they need from me is a user name, a password and the ...
2
votes
1answer
119 views

Security of data distributed to different cloud providers

This is an purely educational question: Suppose we have different cloud storage providers. Imagine a files as a stream of bits and we save each 'th byte on the ( module )'th cloud provider's storage ...
21
votes
7answers
7k views

Can PHI be HIPAA compliant on a cloud?

I have read conflicting information on whether PHI can be stored and delivered on a cloud in a HIPAA compliant manner. I hear many people saying you cannot share infrastructure and be HIPAA compliant. ...
2
votes
1answer
149 views

Secure Development Environment for University dealing with private data

We are a development team within a state public university. Much of our development deals with working with private student and employee data. Some applications push data from internal databases out ...
-2
votes
1answer
126 views

Pedometer with strong privacy (no data in cloud, local analysis software, no iOS) [closed]

I wish to do 10,000 steps a day. Now searching for an accurate pedometer. I don't wish a cloud solution, data must be local and a nice analysis software. What do you recommend me? I am using a Mac.
2
votes
1answer
482 views

How secure is a static site hosted on Amazon S3?

I'm thinking about separating the static content from the dynamic content, and put the main www domain with the static content on Amazon S3. The main reason I want to do this is security. This site ...
8
votes
4answers
2k views

What Partial Homomorphic Encryption implementations exist and how do I leverage them?

It appears that only Partial Homomorphic Encryption(P.H.E.) is practical for modern day (2011) use. However I'm having difficulty locating libraries (FOSS or otherwise) that enable me to leverage ...
4
votes
2answers
295 views

Evernote hacked - precautions?

On March 2, 2013, the digital note taking system Evernote was hacked. Evernote has forced new passwords and have released new updates to Windows, Windows phone and iOS of their client software. ...
0
votes
1answer
99 views

Mechanisms to detect service abuse in the cloud

I want to ask if it is possible to detect the abuse of a service in the cloud. How can the SaaS provider be sure that the client does not use the service for criminal acts? For example how can Google ...
0
votes
5answers
1k views

Can I scan with nmap from cloud services? [closed]

Can i conduct nmap scanning from cloud services (i.e AWS)? i am looking to do external scanning for my company and want to set up something that will be quick, efficient, and cheap. I dont want to ...
2
votes
3answers
244 views

Evaluating Cloud Provider Security

I am trying to make a judgement call on a cloud provider's security. This is what I know : Provider A - PRGMR.COM (not very well known but competent and reliable) Is very transparent - seeks ...
4
votes
4answers
1k views

How unlikely is it that a Google Doc link is guessed?

Most (if not all) of us know that a Google Doc link looks something like this: https://docs.google.com/document/d/13P3p5bA3lslqEJT1BGeTL1L5ZrQq_fSov_56jT9vf0I/edit There are becoming several tools ...
1
vote
1answer
222 views

What does key, key pair and signature mean here?

I was reading How are possible uses for X.509 (SSL) certificates denoted? on IT SE. It begins with: X.509 certificates can be used for servers, clients, email, code signing and more ...
3
votes
5answers
2k views

Building a Security Training Simulation environment

My university is keen to build a security training simulation environment/platform and it will be a good learning experience for students. I Googled around to find out how it is built, but I only ...
2
votes
3answers
359 views

What are the security implications of Digital Lifeboat (or other p2p storage solutions)

From Digital Lifeboat's about us section Our solution is a distributed storage cloud service. Digital Lifeboat will compress and encrypt each file selected for backup. We then process your ...
7
votes
7answers
4k views

GPU powered Password cracking machine - buy metal or cloud?

As a IS consulting firm, we would like to have our very own password cracking machine. Great. Now, after some sketching and brain storming we concluded that GPU is the best way to go (contrary to CPU ...
3
votes
3answers
114 views

Are mail-servers removed from security concerns in contrast with cloud storage?

I have meet people and even businesses that are against using the cloud for data storage invoking security risks. In the same time they seem perfectly fine using email services (usually from obscure ...
0
votes
2answers
110 views

Security in the breaking cloud? Storage Wars?

If access to a cloud server instance that stores personal/important information is lost or removed by the provider, is my data protected? Can the provider access my data and copy it, distribute, or ...
3
votes
1answer
502 views

How do I configure Terminal Server (and clients) for use over untrusted Wifi networks?

Suppose a client wants to directly connect to Terminal Server exposed to the Internet, without a VPN, ... what software & settings is needed to properly protect against WiFi based attacks? ...
2
votes
1answer
234 views

What security risks are involved with sending data over the internal network on Rackspace Cloud servers?

What are the risks involved with sending unencrypted data over the internal network with Rackspace Cloud Servers? Assume the interfaces use iptables to filter IPs and ports so they only accept data ...
2
votes
1answer
214 views

smart AND secure cloud document archive

I am thinking of creating a cloud-based document archive. The intention is to make it impossible for the system to read the users' files, and be more than just a storage provider. Looking at this ...
8
votes
2answers
179 views

Cloud-specific standards and regulations

Not specific to any particular industry or requirements, but in general - are there currently commonly accepted standards regarding cloud-based applications? I* am developing a system that will be ...