Cloud computing is about hardware-based services involving computing, network and storage capacities. These services are provided on-demand, hosted by the cloud provider and can easily scale up and down.

learn more… | top users | synonyms (1)

-2
votes
1answer
13 views

Cloud database access from raspberry [on hold]

I'm working on a project where I have to store data from a Raspberry (which will have a mobile broadband connection and it will be on a public place) to a PostgreSQL Database in the cloud (Don't know ...
0
votes
1answer
27 views

Deciphering data in cloud by a specific group

I need to encrypt some data and send it to cloud to be seen by a group. I don't know how to include the group characterization to let just group's members decrypt the data. Also, I want to know how ...
1
vote
0answers
16 views

How to know and disallow corporative Google Apps users to access third party apps with their corporative Google Apps accounts?

How can a security administrator of Google Apps for an organization that has linked @organization.com accounts to Google Apps to know and disallow that users use their users@organization.com accounts ...
0
votes
1answer
44 views

OpenVPN and running other services on same server

What security implications should I know about/look for when running OpenVPN on the same server as my network cloud controller and apt-cache-ng? I plan on using the same server to run apt-cacher-ng ...
3
votes
2answers
3k views

can I trust Boxcryptor closed source software? Encryption of files for cloud hoster

Boxcryptor https://www.boxcryptor.com is not Open Source. Can I trust this? Is it secure? No government backdoor? Because there is no alternative for OS X and iOS.
2
votes
2answers
84 views

Physical protection of your servers?

Here is a scenario. You are a small startup company that makes a video game. In your video game, you can exchange money for items. You are not dealing with the credit card/debit card directly but ...
24
votes
8answers
8k views

Can PHI be HIPAA compliant on a cloud?

I have read conflicting information on whether PHI can be stored and delivered on a cloud in a HIPAA compliant manner. I hear many people saying you cannot share infrastructure and be HIPAA compliant. ...
3
votes
1answer
146 views

How do Cloud Encryption Gateways and CASB work?

Cloud Encryption Gateways (CEG) and Cloud Access Security Brokers(CASB) are becoming popular to ensure the security and confidentiality of the data leaving to Cloud Service Providers. How do they ...
1
vote
0answers
17 views

Is a business associates contract required to use hosted R&D services? [closed]

I'm on the "configuration management" team which, among other things, means I'm responsible for R&D systems, like: source control, issue tracking, team collaboration (wiki), etc. These are not ...
0
votes
1answer
28 views

Sophos Safeguard detecting content of zip files being uploaded

Is it possible to use Sophos safeguard to detect when computers in the network upload certain files online when they are compressed in a zip file? (or 7z or similar). I've seen it is possible with ...
2
votes
1answer
91 views

Should I trust Grive2?

I am trying to run Google Drive on LUbuntu 64 bit, but since there isn't an official version yet, I was thinking to follow this tutorial. Since it's not an official software from Google, I am ...
0
votes
1answer
95 views

Securing communication over LAN in VPS provider [duplicate]

I'm curious about best practice when connecting from app to DB in a cloud provider. A quick rundown of our setup. We have 4 servers all on the same provider, in the same region running as VPS. Ngnix ...
1
vote
2answers
60 views

How do personal/private cloud products work?

On amazon.com I found some personal cloud NAS products and was wondering how some of them work. In this article the author discusses the My Cloud app and how it can be used from any internet ...
0
votes
2answers
1k views

Vulnerability of the open port

I'm installing service on the cloud machine and I was wondering on port vulnerabilities for my customers. My service which lives on server A (often on a customer site) needs to access server B ...
6
votes
1answer
64 views

Benefits of cloud based full disk encryption

Microsoft announced in May that it supported full disk encryption for VMs. They have recently merged a github branch into the Azure Powershell tools to enable this. The basic theory is that you ...
2
votes
2answers
41 views

Does ISO 27001 allow cloud based Spam/Malware filter solutions

We are currently switching over to Exchange 2013 and we are thinking about outsourcing the spam and malware filtering to Microsofts Exchange Online Protection. Its implemented by changing the MX ...
2
votes
0answers
22 views

What are the security implications when dealing with cloud on boarding services like Migrationwiz or Skykick?

There is a large push these days to move Email and communication to the cloud. Such as Google Apps, Office 365 or Hosted Exchange. Many company's hire partners to assist with these moves. Most ...
3
votes
3answers
627 views

Steps for building a good File Encryption on Android

I want to be able to build a good file encryption on android for a cloud app. The files used are mainly pdfs, pngs, docs, audio, video, etc (all sorts of files). Edit: My constrains are that it ...
3
votes
2answers
56 views

Reverse proxy or Public load balancer?

What would be the difference between putting in a load balancer or reverse proxy on the perimeter to send requests back to a system in our LAN? We don't want to have people NAT directly into the LAN, ...
-1
votes
2answers
48 views

Secure protocol for a backup server? [closed]

I want to make a back up system in my home, but I don't know I should use a FTP server or a TPC-based cloud server or a SSH-based server. Which method is best in security? I just want to upload and ...
0
votes
0answers
40 views

What is “Intentionally misleading Artificial Intelligence to create a misleading outcome” called?

I'm writing about a computer system that relies on Artificial Intelligence and the threats that this may include. One threat vector (for example) is to seed Bayesian AI with content to skew the ...
12
votes
9answers
18k views

Storing KeePass database in cloud. How safe?

It certainly would be more convenient to store my KeePass database on either S3, Dropbox, or better yet SpiderOak. My fear is having my cloud storage account compromised then having the credentials ...
2
votes
1answer
72 views

Can we determine how securely files are stored on a cloud storage service?

After asking two questions about the security of online cloud storage, it seems to me that we can only at best speculate as to the security practices of the hosting company, and believe what they tell ...
0
votes
0answers
13 views

How to interpret 'supplier relationship' in CSA CCM

The Cloud Security Alliance has developed a Cloud Control Matrix, which "provides fundamental security principles to guide cloud vendors and to assist cloud customers in assessing the overall ...
1
vote
2answers
126 views

How can a seamless cloud storage service be Zero-knowledge?

Cloud based storage services like Dropbox and Google Drive are a cause for concern when it comes to privacy. They store encryption keys for your files on their servers. Therefore, anyone who manage to ...
1
vote
0answers
153 views

Does Sookasa really make Dropbox more secure? [closed]

Sookasa is a service that integrates with Dropbox and claims to make your files more secure by seamlessly encrypting them. In their article Is Dropbox secure? 3 weaknesses you should know about, ...
5
votes
2answers
609 views

Should I password protect all my archives from cloud?

I am a student and I didn't care a lot about my passwords strength and my files until now. Now I am thinking about having a backup for all my files in cloud. Questions: Should I password protect ...
4
votes
2answers
72 views

Is it a good practice to use certificates as a mean of client identification in a cloud environment

My software system is running a cloud infrastructure where having Linux machines VPN into OpenVPN gateway is a setup requirement. Also, there may be cases when software on the aforementioned Linux ...
1
vote
1answer
38 views

How exactly should I interpret the term “Hybrid Cloud”?

The CISSP CBK definition says that a hybrid could is a mix of public and private. But what exactly does it mean? Is it more a conceptual idea:If you use both a public and a private your company is a ...
2
votes
3answers
805 views

Digital Ocean “Droplet” allgedly compromised for trivial, unpublicized website. Should I be worried abouty my own machine?

I got a message from D.O. about my Droplet saying they shut it down because there was a lot of outgoing traffic that looked like an attack. The site I had on that server was not very known at all. ...
-3
votes
3answers
183 views

Does MEGA cloud service say ALL the truth? [closed]

If this is not the right community for this question please inform me where to ask :-) I am talking about: encryption no enceyption key kept by MEGA and so on. I found many reviews confirming ...
6
votes
1answer
232 views

What is legally required to store HIPAA data in the “cloud”?

I was looking into storing SQL DB backups of a healthcare system in the cloud in the event of a disaster to be HIPAA compliant. The solution I came up with was to use Cloudberry backups. What I would ...
1
vote
2answers
108 views

Is Cryptree suitable for cloud storage?

I'm evaluating a cloud storage product. The marketing literature states it uses Cryptree. I pulled the paper and performed a quick read, but I don't see where Cryptree lends itself to confidentiality ...
4
votes
2answers
80 views

How to keep data private where software requires an online check

When software forces a user to verify online (phone home) before use, it creates an opportunity for private data created with this software to be physically connected to the Internet. This may not be ...
4
votes
4answers
3k views

How to mitigate SSL based DDoS attacks?

as you probably know the problem with SSL based DDoS attacks is, that the traffic cannot be analysed and filtered by a DDoS mitigation service provider such as Prolexic, Akamai, Radware, etc. without ...
-3
votes
2answers
81 views

Can an attacker or law enforcement compromise apps in Google Play so that when I update I install the compromised app?

What are the chances a third party could make changes to apps on Google Play that I have installed, so that when I next update I am compromised?
5
votes
3answers
223 views

Cloud Based WAF

I'm currently evaluating different approaches to implement a web application firewall (WAF) in our architecture. We need the WAF due to PCI DSS. I would prefer using a cloud based WAF (e.g. ...
0
votes
2answers
146 views

Forensic in Cloud environment

Let's assume that I have access to an EC2 instance (whether a private key for a Linux instance or the username and password for Windows instance), and I used a software like FTK Remote Agent to ...
4
votes
2answers
255 views

Is the same decryption key used for data on the server as locally with Lastpass?

Lastpass stores the password databases encrypted on the server. Does it give a database to anyone who asks? If no, then what authentication (i.e. password) is used? I use Lastpass on multiple devices ...
2
votes
1answer
84 views

Will two virtual machines running on the same physical host machine get the same value from /dev/random?

Will two virtual machines running on the same physical host machine get the same value from /dev/random if read over the same time period? Say that Virtual-machine-1 wants to generate its ssh host ...
-5
votes
1answer
92 views

Does Server Mistrust improve security? [closed]

By server mistrust, I mean the fully implemented lack of customer plaintext on a vendor's system, and lack of vendor access to customer plaintext. Specific case in question: Password and SSH key ...
6
votes
5answers
3k views

How unlikely is it that a Google Doc link is guessed?

Most (if not all) of us know that a Google Doc link looks something like this: https://docs.google.com/document/d/13P3p5bA3lslqEJT1BGeTL1L5ZrQq_fSov_56jT9vf0I/edit There are becoming several tools ...
5
votes
1answer
345 views

/dev/random in EC2 cloud

is /dev/random any good in AWS EC2 for use in making a shared key that will be passed over a secure channel? i am concerned that a launched instance would have not much entropy to begin with. what ...
0
votes
0answers
71 views

Software Defined Perimeter assumptions, properties, deployment scenarios

Since 2013, the Cloud Security Alliance has been working on an open protocol and open source code base for a "Software Defined Perimeter" (SDP). But the whitepaper at SDP Specification v1.0 : Cloud ...
9
votes
7answers
5k views

GPU powered Password cracking machine - buy metal or cloud?

As a IS consulting firm, we would like to have our very own password cracking machine. Great. Now, after some sketching and brain storming we concluded that GPU is the best way to go (contrary to CPU ...
7
votes
10answers
6k views

How can I share files with other individuals using the cloud in a secure way?

I would like to use a dropbox because it is easy and convenient. But I want to encrypt the files with the public key of the intended recipient, so he will be the only one who can access the data in ...
1
vote
1answer
257 views

Securing a VPS network with a VPN and a DMZ

I've got several VPS boxes (Digital Ocean boxes w/Ubuntu) that I would like to lock down from the outside world. I want to have several private boxes (web servers, db servers, puppet/master boxes ...
1
vote
1answer
235 views

Is CloudKit or iCloud suitable for storing PII?

iCloud is Apple's storage technology that copies data from one iPhone and shares it with every other device. CloudKit is a similar technology that allows (from what I can tell) the partial ...
0
votes
1answer
80 views

What security considerations should I take when planning do to Incident Response in my hybrid public cloud environment?

I am trying to compile a list of areas one should be aware of when doing Incident Response on public cloud environments, e.g. a hybrid public cloud, where some services are provisioned in local ...
2
votes
2answers
842 views

Is SpiderOak truly “zero-knowledge”?

I've recently changed SpiderOak password on computer A. Because I have SpiderOak installed on computer B as well, I thought I will have to update the password on it so the application can connect to ...