Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [cloud-computing]

Cloud computing is about hardware-based services involving computing, network and storage capacities. These services are provided on-demand, hosted by the cloud provider and can easily scale up and down.

Filter by
Sorted by
Tagged with
0 votes
0 answers
22 views

Firebase Cloud Messaging (FCM) what is the impact of a exposed or leaked fcm_token?

When an attacker obtains such a token (via a broken webapp or jailbroken mobile phone), what would be the consequences? Would it be possible for an attacker to obtain messages with sensitive info (...
Booger21's user avatar
0 votes
1 answer
47 views

How do AWS "Pod Identities" compare to (OIDC) IRSA?

In Kubernetes clusters, we often wish to provide temporary credentials to the containerised processes running in a particular pod, usually marked by associating the pod with a service account. ...
benjimin's user avatar
  • 165
0 votes
0 answers
43 views

Preserving network segmentation for cloud web app in a user friendly way

Assuming a team maintaining multiple simple cloud web apps with associated secret key stores. The control plane for the app needs to access secrets, and we don't want to expose the secret store on the ...
Petter Kvalvaag's user avatar
1 vote
0 answers
67 views

SrSecEng - how to optimize for future vision [closed]

I'd like to do Cloud, Security, and Programming, ideally in Python/Golang. To move from process automation towards asynchronous, distributed, autonomic systems. Security inspired by DevOps/SRE ...
just-doing-this-for-dark-mode's user avatar
1 vote
0 answers
87 views

Prevention of access to user data running on the cloud

I am building a web-based software as a service (SaaS) platform for engineering simulations that run on the cloud, and wish to prevent my access to user data by design. The user designs a 3D geometry (...
Coto TheArcher's user avatar
1 vote
1 answer
205 views

Why is TLS communication within a VPC important? [duplicate]

In this sense, I understand the encryption needed between say client and server and all communications that are external. But for a scenario where for all VMs are in the same VPC and not exposed to ...
Vipin Menon's user avatar
2 votes
1 answer
151 views

Which security measures are implemented by cloud platforms that permit submitting Python code to be executed remotely?

Which security measures are implemented by cloud platforms that permit submitting Python code to be executed remotely? I can think of a few examples: user access control resource allocation job queue ...
Radu M.'s user avatar
  • 123
2 votes
1 answer
190 views

How to avoid breaking end-to-end encryption while employing cloud-based DDoS protection?

I have a few websites and apps that I need to protect from DDoS attacks. These websites and apps are delivered by various servers that sit in several small data centers around the world. I'm thinking ...
hilltothesouth's user avatar
0 votes
2 answers
182 views

Does it make any sense to encrypt data to be uploaded to an already encrypted cloud such as NordLocker?

Let's suppose one wants so store valuable data (e.g. a Bitcoin seed) in an encrypted cloud such as NordLocker. Would it make any sense that such person encrypts this data (offline) first with his/her ...
Martel's user avatar
  • 123
2 votes
1 answer
134 views

TLS and MiTM Attacks Relevancy over Public Cloud (SDN) internal networks

Edit: To clarify, this question is all about whether we should insist on implementing TLS for internal communications over public cloud tenants as a man-in-the-middle risk reduction control, given the ...
NetworkNewbie's user avatar
0 votes
0 answers
97 views

What are the challenges when doing forensics on cloud storage services?

My class question: "What are the key challenges for cloud forensics on cloud storage such as Dropbox?" With what I've been told and what I generally understand, the question is basically ...
Thanos's user avatar
  • 111
0 votes
1 answer
1k views

Can a company using OneDrive for work detect the usage of a personal OneDrive account by an employee on a company machine?

My company is using OneDrive to store all our work files. I occasionally use my personal OneDrive account for personal matters on my work computer with security agents installed. Can a sysadmin detect ...
Vuiol999's user avatar
1 vote
3 answers
174 views

Job prospects for Red Teaming in cloud security?

I want to make my career in cyber security, but am confused which field to choose. According to this Burning Glass report, https://www.burning-glass.com/wp-content/uploads/2020/10/...
Aryan's user avatar
  • 21
2 votes
0 answers
95 views

Secure way to transfer all of my Dropbox files to my Koofr account

I want to securely Transfer my Dropbox files to Koofr. What's the best way to do this? Here some additional information: My Dropbox file are not encrypted. Koofr can connect directly to Dropbox. Do ...
Don Droga's user avatar
2 votes
1 answer
451 views

What happens to malicious traffic in a scrubbing center during a DDoS attack?

My understanding of a scrubbing center is when a DDoS is underway, all traffic gets routed to a scrubbing center where traffic is analyzed and all legitimate traffic is then sent to the targeted ...
Red Code's user avatar
1 vote
1 answer
667 views

Why do I need an IDS/IPS in a serverless cloud environment?

Following this question (Why do we need IDS/IPS if a firewall is present?) from a few years back, I am trying to take this subject to the cloud. Assuming that I have a fully "serverless" AWS ...
Nir Levy's user avatar
  • 111
0 votes
0 answers
199 views

Storing an encryption key securely

I am struggling with the question how to store a security key in a secure way. I have done some research and there are multiple options. Option 1) Storing the key on the same server (not recommended, ...
JavaForAndroid's user avatar
0 votes
0 answers
110 views

Security implications of using HTTP for service to service communication within the same host [duplicate]

What are the security implications of using HTTP only for IPC for services within the same host? In my case, I am using docker-compose to host two ASP.NET Core services within the same host in Azure. ...
Mariksel Azemaj's user avatar
0 votes
0 answers
102 views

Static Content Security

I have some static content HTML in a cloud storage space/ CDN. How can I serve this only to authenticated users? I am planning to use these static content on edx platforms. How can I securely ...
Dashin's user avatar
  • 1
0 votes
1 answer
177 views

What threats are mitigated by encrypted VPC connections?

We are running a virtual private cloud, in other words a vendor-hosted intranet. (In this case the vendor is AWS, but it could be Azure, Digital Ocean...) The intranet does not have public-facing ...
lofidevops's user avatar
  • 3,610
0 votes
0 answers
216 views

Using AWS: Is it possible to hide the traffic from amazon?

Assuming I use AWS to host a service with quite sensitive personal data, is it possible to hide traffic and stored data from amazon? I would assume the answer is no. I think I need to provide all the ...
Gamer2015's user avatar
  • 727
0 votes
1 answer
418 views

How does a cloud based application use a TPM to authenticate hardware devices?

I have heard about this, but not sure how it would work. I would imagine that when you register the device, the public RSA key burnt into the chip would be shared. That way, if the application sends a ...
Beginner's user avatar
0 votes
0 answers
118 views

Amazon Photo/Drive security documentation

I'm doing some research on Amazon drive/photo and I seem unable to find any security documentation on the subject. I'm aware that they are using AWS but I'm interested to learn more. Some people say ...
Arnes Kovacevic's user avatar
1 vote
0 answers
149 views

MFA authentication to O365 - remote workers users without mobile phone. Which secure solution? [closed]

We are deploying O365 in my company (Teams, Sharepoint, Exchange online, Office suite). In order to connect outside our network (remote workers especially during this pandemic), we've implemented MFA ...
Will0093's user avatar
0 votes
1 answer
448 views

Python desktop application: storing cloud database passwords

I am currently building a Python desktop application in PyQt/PySide which will be compiled to .exe. I am planning to use the Azure SQL database and a remote file storage (like S3). An issue arises ...
Georgiy Santonov's user avatar
1 vote
3 answers
2k views

Does domain resolve to CDN (Cloudfront) IP and not the actual web-app server?

If a web-app is using cloudfront as CDN, what happens if I ping the domain? Am I pinging the cloudfront endpoint? Or the web-app server? Why is it DNS resolution resolves to different IPs in this case?...
Bryan's user avatar
  • 21
0 votes
0 answers
32 views

secure deletion in virtual machines [duplicate]

when we securely delete a volume in a machine which is installed in a virtual machine or docker, for example by overwriting 7 times or more, we securely delete the data in virtual disk (in guest) and ...
alex's user avatar
  • 1
1 vote
0 answers
219 views

Can I use Snort to detect multiple VLANs over site to site VPN?

I am studying options to check traffic over multiple VLANs using a Snort cloud machine, since the normal Snort installation requires to get local network and local VLAN information. I thought to use ...
Ahmad Abuhasna's user avatar
1 vote
0 answers
140 views

Is using randomized filenames a good way to secure data stored in a product like S3?

If I want to use a S3 clone to host something somewhat sensitive (probably digitalocean, since it's cheapest and probably has a perfectly good quality), is it sensible to do it this way: https://...
john01dav's user avatar
  • 225
2 votes
3 answers
183 views

Is using a dedicated IP for AWS dev access secure enough?

I'm about to launch my first ever SaaS product on AWS and am thinking through security. I have my main server, which is obviously public on :80 and :443, and then I have a bunch of other infra that I ...
ilmoi's user avatar
  • 123
0 votes
0 answers
115 views

What are reasonable level of security for a interal-use organization application hosted on the cloud?

I'm working on an small web application (Flask). The application is only for distributed internal usage, e.g. only users with credentials created by the organization will have access to the services ...
Francky_V's user avatar
  • 103
1 vote
1 answer
227 views

Should I store data on my computer

Over the few months I have used two piece of software on my computer Microsoft Office Google Chrome I can access all my files on OneDrive through Microsoft office without having to save anything on ...
MrJoe's user avatar
  • 809
1 vote
1 answer
125 views

Become a Cloud Security analyst [closed]

What learning path would you recommend for someone interesting in focussing on the Cloud Security side and considering remote work in the future? Many thanks
Prinz's user avatar
  • 11
0 votes
1 answer
149 views

What (aside from the law) prevents cloud-hosting owners from eavesdropping on servers/code?

Given a server hosted on a cloud platform, what would stop the cloud platform owner from stealing the server's data and/or code? As far as I can tell, a motivated cloud owner could retrieve the data ...
Asker's user avatar
  • 101
1 vote
1 answer
1k views

Model for multi-tenant data encryption where the application owners or cloud providers cannot see decrypted data

Consider an application in which users will install on-premise agents which communicate with a cloud hosted service (aws in this case). The users can interact with the cloud service to configure and ...
Neil's user avatar
  • 153
22 votes
2 answers
4k views

How critical is encryption-at-rest for public cloud hosted systems?

I work as a solutions architect for web-based systems on AWS. As part of this role, I often respond to Information Security questionnaires. Nearly all questionnaires request information about data ...
jdog's user avatar
  • 345
1 vote
0 answers
141 views

What ways are there to securely connect different sites/branches? [closed]

I'm somewhat new to the field, but I have been tasked with coming up with the best way to connect remote customer sites to our two main offices. The data sent across from the customer to the main ...
infosecnovice's user avatar
1 vote
0 answers
339 views

Student Project Ideas using Openstack [closed]

I am a student at University and have completed all on my CompSci courses and am getting started in my concentration, security. What I want to do for my project is create and monitor a secure cloud ...
AsapHogFtw's user avatar
1 vote
0 answers
149 views

Does Snowflake Data Sharing add any real security?

Snowflake is a cloud database like Google BigQuery or Amazon Redshift. Unlike them, however, it markets a "Secure Data Sharing" feature. They go to some effort (including a full "Data ...
Seamus Abshere's user avatar
1 vote
2 answers
430 views

Are password managers still effective on a cloud PC (virtual machine)?

I have recently started using a cloud gaming service. It provides me with control of a 'remote PC' (actually a virtual machine running in their data centre) accessed through an app or VNC console. The ...
Matthew's user avatar
  • 162
0 votes
0 answers
106 views

Is it possible to make a remote server part of VPN so that only machines within a domain network can access the server?

First, let me describe the problem I am trying to solve. I have a domain-based network. My Source Control server resides on this network. This meant only devices connected to the network (part of ...
devanalyst's user avatar
3 votes
1 answer
192 views

When we should choose Virtual Private Cloud(VPC)?

Assume we build an application that has internal components (or microservices) on GCP (or AWS, Azure...). I guess there are 2 main security options: use VPC to protect internal communications. ...
wu555's user avatar
  • 31
-1 votes
1 answer
130 views

Privacy: why do I have to delete an account instead of simply no longer using it?

I try to avoid big internet companies (big tech) and try to find decentralized and/or open source alternatives. I use a password manager with unique usernames and generated, complex passwords. A lot ...
Sybil's user avatar
  • 1,469
1 vote
0 answers
3k views

Concerns about Fing scanner [closed]

For years I have been using the Fing iOS app to scan my home network to check for unknown devices. The iOS apps is nice and self contained, so I never worried much about its own security. I recently ...
Carlos N's user avatar
  • 111
3 votes
1 answer
1k views

Symmetric vs asymmetric encryption for backup files uploaded to cloud storage

I want to encrypt my server's backups and upload them to cloud storage (e.g. dropbox, google drive). I understand the basics with symmetric (single passphrase-secured key) and asymmetric (public/...
lonix's user avatar
  • 445
0 votes
1 answer
401 views

Using unique per-session gpg keys to store backups on cloud storage

I'd like to encrypt my server's daily backups and send them to dropbox / google drive / etc., as a backup. I've read of various approaches. Assuming symmetric encryption (passphrase rather than ...
lonix's user avatar
  • 445
0 votes
0 answers
3k views

Someone is Cryptomining from my Google Compute Engine Instance

I run an airflow instance which python process scheduler, which is used to trigger different python ML process which has no relation to crypto mining. This is the process which is running this ...
isht3's user avatar
  • 101
1 vote
1 answer
134 views

Securing media uploading to the cloud from reverse engineering

I own an RPG multiplayer game written in Java, where players can fight each other in the game. Recently I planned to invent a new feature, where the last 15 seconds of your fight and the "knockout" ...
Ben Beri's user avatar
  • 121
2 votes
1 answer
353 views

Reason for lack of asymmetric cryptography in AWS KMS for regions in China

In the documentation of the AWS Key Management Service (KMS) I found this interesting sentence: Asymmetric CMKs and asymmetric data key pairs are supported in all AWS Regions that AWS KMS supports ...
mat's user avatar
  • 1,272
5 votes
2 answers
843 views

Does Cloudflare masking my IP make my server more secure?

I've heard in a conversation and read in some forum posts that Cloudflare will proxy your IP, hiding it from the public, and this mitigates the risk of an attacker finding your server in the first ...
TCooper's user avatar
  • 366

1
2 3 4 5
7