Questions tagged [cloud-computing]
Cloud computing is about hardware-based services involving computing, network and storage capacities. These services are provided on-demand, hosted by the cloud provider and can easily scale up and down.
313
questions
0
votes
0
answers
7
views
Why is TLS communication within a VPC important?
In this sense, I understand the encryption needed between say client and server and all communications that are external.
But for a scenario where for all VMs are in the same VPC and not exposed to ...
- 101
2
votes
1
answer
108
views
Which security measures are implemented by cloud platforms that permit submitting Python code to be executed remotely?
Which security measures are implemented by cloud platforms that permit submitting Python code to be executed remotely? I can think of a few examples:
user access control
resource allocation
job queue ...
- 123
2
votes
1
answer
101
views
How to avoid breaking end-to-end encryption while employing cloud-based DDoS protection?
I have a few websites and apps that I need to protect from DDoS attacks. These websites and apps are delivered by various servers that sit in several small data centers around the world.
I'm thinking ...
- 469
0
votes
2
answers
97
views
Does it make any sense to encrypt data to be uploaded to an already encrypted cloud such as NordLocker?
Let's suppose one wants so store valuable data (e.g. a Bitcoin seed) in an encrypted cloud such as NordLocker. Would it make any sense that such person encrypts this data (offline) first with his/her ...
- 123
2
votes
1
answer
74
views
TLS and MiTM Attacks Relevancy over Public Cloud (SDN) internal networks
Edit:
To clarify, this question is all about whether we should insist on implementing TLS for internal communications over public cloud tenants as a man-in-the-middle risk reduction control, given the ...
0
votes
0
answers
37
views
What are the challenges when doing forensics on cloud storage services?
My class question:
"What are the key challenges for cloud forensics on cloud storage such
as Dropbox?"
With what I've been told and what I generally understand, the question is basically ...
- 111
0
votes
0
answers
29
views
Is it safe to use the iOS Account Manager for Google Accounts?
I am only using Google for contacts on my iPhone. For the rest of the Google services, I am using the dedicated Google apps. I know that the connnection from Google apps to Google servers is secure ...
- 1
0
votes
0
answers
38
views
What is the best way to spin up vulnerable machines for training purposes? [duplicate]
I am trying to realize which is the best option to have somewhere installed vulnerable virtual machines and run them whenever you want for Pentest training or other cloudtesting purposes.
Maybe this ...
- 157
0
votes
1
answer
457
views
Can a company using OneDrive for work detect the usage of a personal OneDrive account by an employee on a company machine?
My company is using OneDrive to store all our work files. I occasionally use my personal OneDrive account for personal matters on my work computer with security agents installed. Can a sysadmin detect ...
- 1
1
vote
3
answers
114
views
Job prospects for Red Teaming in cloud security?
I want to make my career in cyber security, but am confused which field to choose. According to this Burning Glass report,
https://www.burning-glass.com/wp-content/uploads/2020/10/...
- 11
1
vote
0
answers
54
views
Secure way to transfer all of my Dropbox files to my Koofr account
I want to securely Transfer my Dropbox files to Koofr.
What's the best way to do this?
Here some additional information:
My Dropbox file are not encrypted.
Koofr can connect directly to Dropbox.
Do ...
- 11
2
votes
1
answer
402
views
What happens to malicious traffic in a scrubbing center during a DDoS attack?
My understanding of a scrubbing center is when a DDoS is underway, all traffic gets routed to a scrubbing center where traffic is analyzed and all legitimate traffic is then sent to the targeted ...
- 23
1
vote
1
answer
428
views
Why do I need an IDS/IPS in a serverless cloud environment?
Following this question (Why do we need IDS/IPS if a firewall is present?) from a few years back, I am trying to take this subject to the cloud.
Assuming that I have a fully "serverless" AWS ...
- 111
0
votes
0
answers
93
views
Storing an encryption key securely
I am struggling with the question how to store a security key in a secure way. I have done some research and there are multiple options.
Option 1) Storing the key on the same server (not recommended, ...
- 121
0
votes
0
answers
69
views
Security implications of using HTTP for service to service communication within the same host [duplicate]
What are the security implications of using HTTP only for IPC for services within the same host?
In my case, I am using docker-compose to host two ASP.NET Core services within the same host in Azure.
...
- 101
0
votes
0
answers
71
views
Static Content Security
I have some static content HTML in a cloud storage space/ CDN.
How can I serve this only to authenticated users?
I am planning to use these static content on edx platforms.
How can I securely ...
- 1
0
votes
1
answer
146
views
What threats are mitigated by encrypted VPC connections?
We are running a virtual private cloud, in other words a vendor-hosted intranet. (In this case the vendor is AWS, but it could be Azure, Digital Ocean...) The intranet does not have public-facing ...
- 3,600
0
votes
0
answers
177
views
Using AWS: Is it possible to hide the traffic from amazon?
Assuming I use AWS to host a service with quite sensitive personal data, is it possible to hide traffic and stored data from amazon?
I would assume the answer is no. I think I need to provide all the ...
- 707
0
votes
1
answer
326
views
How does a cloud based application use a TPM to authenticate hardware devices?
I have heard about this, but not sure how it would work.
I would imagine that when you register the device, the public RSA key burnt into the chip would be shared.
That way, if the application sends a ...
- 47
0
votes
0
answers
91
views
Amazon Photo/Drive security documentation
I'm doing some research on Amazon drive/photo and I seem unable to find any security documentation on the subject. I'm aware that they are using AWS but I'm interested to learn more. Some people say ...
1
vote
0
answers
118
views
MFA authentication to O365 - remote workers users without mobile phone. Which secure solution? [closed]
We are deploying O365 in my company (Teams, Sharepoint, Exchange online, Office suite). In order to connect outside our network (remote workers especially during this pandemic), we've implemented MFA ...
- 11
0
votes
1
answer
374
views
Python desktop application: storing cloud database passwords
I am currently building a Python desktop application in PyQt/PySide which will be compiled to .exe. I am planning to use the Azure SQL database and a remote file storage (like S3).
An issue arises ...
1
vote
3
answers
1k
views
Does domain resolve to CDN (Cloudfront) IP and not the actual web-app server?
If a web-app is using cloudfront as CDN, what happens if I ping the domain? Am I pinging the cloudfront endpoint? Or the web-app server? Why is it DNS resolution resolves to different IPs in this case?...
- 21
0
votes
0
answers
32
views
secure deletion in virtual machines [duplicate]
when we securely delete a volume in a machine which is installed in a virtual machine or docker, for example by overwriting 7 times or more, we securely delete the data in virtual disk (in guest) and ...
- 1
1
vote
0
answers
179
views
Can I use Snort to detect multiple VLANs over site to site VPN?
I am studying options to check traffic over multiple VLANs using a Snort cloud machine, since the normal Snort installation requires to get local network and local VLAN information. I thought to use ...
- 111
1
vote
0
answers
109
views
Is using randomized filenames a good way to secure data stored in a product like S3?
If I want to use a S3 clone to host something somewhat sensitive (probably digitalocean, since it's cheapest and probably has a perfectly good quality), is it sensible to do it this way:
https://...
- 225
2
votes
3
answers
155
views
Is using a dedicated IP for AWS dev access secure enough?
I'm about to launch my first ever SaaS product on AWS and am thinking through security.
I have my main server, which is obviously public on :80 and :443, and then I have a bunch of other infra that I ...
- 123
0
votes
0
answers
88
views
What are reasonable level of security for a interal-use organization application hosted on the cloud?
I'm working on an small web application (Flask). The application is only for distributed internal usage, e.g. only users with credentials created by the organization will have access to the services ...
- 103
1
vote
1
answer
171
views
Should I store data on my computer
Over the few months I have used two piece of software on my computer
Microsoft Office
Google Chrome
I can access all my files on OneDrive through Microsoft office without having to save anything on ...
- 819
1
vote
1
answer
99
views
Become a Cloud Security analyst [closed]
What learning path would you recommend for someone interesting in focussing on the Cloud Security side and considering remote work in the future?
Many thanks
- 11
0
votes
1
answer
123
views
What (aside from the law) prevents cloud-hosting owners from eavesdropping on servers/code?
Given a server hosted on a cloud platform, what would stop the cloud platform owner from stealing the server's data and/or code?
As far as I can tell, a motivated cloud owner could retrieve the data ...
- 101
1
vote
1
answer
986
views
Model for multi-tenant data encryption where the application owners or cloud providers cannot see decrypted data
Consider an application in which users will install on-premise agents which communicate with a cloud hosted service (aws in this case). The users can interact with the cloud service to configure and ...
- 153
0
votes
1
answer
649
views
Unknown folders in OneDrive
Today I opened OneDrive by accident, since I do not use it. To my surprise, inside there were unknown folders, in foreign (to me) languages. Namely, "document" and "photo" folders ...
- 101
23
votes
2
answers
4k
views
How critical is encryption-at-rest for public cloud hosted systems?
I work as a solutions architect for web-based systems on AWS. As part of this role, I often respond to Information Security questionnaires. Nearly all questionnaires request information about data ...
- 355
1
vote
0
answers
108
views
What ways are there to securely connect different sites/branches? [closed]
I'm somewhat new to the field, but I have been tasked with coming up with the best way to connect remote customer sites to our two main offices. The data sent across from the customer to the main ...
1
vote
0
answers
284
views
Student Project Ideas using Openstack [closed]
I am a student at University and have completed all on my CompSci courses and am getting started in my concentration, security.
What I want to do for my project is create and monitor a secure cloud ...
- 11
1
vote
0
answers
105
views
Does Snowflake Data Sharing add any real security?
Snowflake is a cloud database like Google BigQuery or Amazon Redshift. Unlike them, however, it markets a "Secure Data Sharing" feature.
They go to some effort (including a full "Data ...
- 111
1
vote
2
answers
352
views
Are password managers still effective on a cloud PC (virtual machine)?
I have recently started using a cloud gaming service. It provides me with control of a 'remote PC' (actually a virtual machine running in their data centre) accessed through an app or VNC console. The ...
- 162
0
votes
0
answers
74
views
Is it possible to make a remote server part of VPN so that only machines within a domain network can access the server?
First, let me describe the problem I am trying to solve.
I have a domain-based network. My Source Control server resides on
this network. This meant only devices connected to the network (part
of ...
- 101
3
votes
1
answer
148
views
When we should choose Virtual Private Cloud(VPC)?
Assume we build an application that has internal components (or microservices) on GCP (or AWS, Azure...).
I guess there are 2 main security options:
use VPC to protect internal communications.
...
- 31
-1
votes
1
answer
104
views
Privacy: why do I have to delete an account instead of simply no longer using it?
I try to avoid big internet companies (big tech) and try to find decentralized and/or open source alternatives.
I use a password manager with unique usernames and generated, complex passwords.
A lot ...
- 1,445
1
vote
0
answers
2k
views
Concerns about Fing scanner [closed]
For years I have been using the Fing iOS app to scan my home network to check for unknown devices. The iOS apps is nice and self contained, so I never worried much about its own security.
I recently ...
- 111
2
votes
1
answer
1k
views
Symmetric vs asymmetric encryption for backup files uploaded to cloud storage
I want to encrypt my server's backups and upload them to cloud storage (e.g. dropbox, google drive).
I understand the basics with symmetric (single passphrase-secured key) and asymmetric (public/...
- 425
0
votes
1
answer
335
views
Using unique per-session gpg keys to store backups on cloud storage
I'd like to encrypt my server's daily backups and send them to dropbox / google drive / etc., as a backup.
I've read of various approaches. Assuming symmetric encryption (passphrase rather than ...
- 425
0
votes
0
answers
2k
views
Someone is Cryptomining from my Google Compute Engine Instance
I run an airflow instance which python process scheduler, which is used to trigger different python ML process which has no relation to crypto mining. This is the process which is running this ...
- 101
1
vote
1
answer
110
views
Securing media uploading to the cloud from reverse engineering
I own an RPG multiplayer game written in Java, where players can fight each other in the game.
Recently I planned to invent a new feature, where the last 15 seconds of your fight and the "knockout" ...
- 121
2
votes
1
answer
309
views
Reason for lack of asymmetric cryptography in AWS KMS for regions in China
In the documentation of the AWS Key Management Service (KMS) I found this interesting sentence:
Asymmetric CMKs and asymmetric data key pairs are supported in all AWS Regions that AWS KMS supports ...
- 1,272
5
votes
2
answers
634
views
Does Cloudflare masking my IP make my server more secure?
I've heard in a conversation and read in some forum posts that Cloudflare will proxy your IP, hiding it from the public, and this mitigates the risk of an attacker finding your server in the first ...
- 356
1
vote
0
answers
106
views
Is a VPN + Firewall + Authorization Redundant?
I am creating a simple application so a distributed team can access sensitive data. This application will have a database that will be inaccessible to the public internet inside a VPC with my cloud ...
- 111
0
votes
1
answer
506
views
Use of HTTP functions in GCP Cloud Functions Is Not Secure. Why they are still available?
As Google mentions itself in the documentation,
the HTTP functions in Cloud Functions have no authentication and are not secure. HTTP functions are unprotected and will respond to any HTTP request,...
- 1,256