Questions tagged [cloud-computing]

Cloud computing is about hardware-based services involving computing, network and storage capacities. These services are provided on-demand, hosted by the cloud provider and can easily scale up and down.

37 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3 votes
1 answer
408 views

Offline mobile app data storage Guidelines, Standards

We are currently working on a project to develop an "offline" mobile application that synchronises data with our current cloud software solution that would allow field workers in potential mobile ...
  • 503
3 votes
0 answers
91 views

What security guarantees do Google Cloud Platform customer supplied disk encryption keys provide over Google provided keys?

Google Cloud Platform allows for customer supplied disk encryption keys as an option to using Google supplied disk encryption keys. However, to use customer supplied keys, you must send the key (...
3 votes
0 answers
131 views

Can I trace malicious email sent through a cloud hosting service?

Around the time my phone started acting like it was hacked, I was sent a suspicious email that opened automatically into a website without clicking on anything. I tracked it to a cloud hosting service....
2 votes
0 answers
107 views

When we should choose Virtual Private Cloud(VPC)?

Assume we build an application that has internal components (or microservices) on GCP (or AWS, Azure...). I guess there are 2 main security options: use VPC to protect internal communications. ...
  • 21
2 votes
0 answers
523 views

HIPAA compliant chat app with 3rd party provider without signing a BAA?

Short: If the data (PHI) I send to a third party is already encrypted, do I still need to sign a Business Associate Agreement (BAA) with them to stay HIPAA compliant? Long: To be specific, I was ...
2 votes
2 answers
385 views

Solutions for accessing webapp from inside and outside the corporate perimeter by same users?

I'm looking for solutions that could best address the following requirements. We plan to develop a webapp and deploy it in the cloud. Corporate users must be able to access the webapp from the ...
  • 21
2 votes
0 answers
95 views

What are the security implications when dealing with cloud on boarding services like Migrationwiz or Skykick?

There is a large push these days to move Email and communication to the cloud. Such as Google Apps, Office 365 or Hosted Exchange. Many company's hire partners to assist with these moves. Most ...
  • 143
2 votes
0 answers
109 views

What are the steps to securing encryption keys/databases on an unsecured DAAS provider?

Most Desktop As A Service providers store their virtual hard drives and the VMs RAM in a way that allows them to access their contents. Choosing a provider who offers a 'no-knowledge of server' ...
  • 1,402
1 vote
0 answers
23 views

Secure way to transfer all of my Dropbox files to my Koofr account

I want to securely Transfer my Dropbox files to Koofr. What's the best way to do this? Here some additional information: My Dropbox file are not encrypted. Koofr can connect directly to Dropbox. Do ...
1 vote
0 answers
123 views

Can I use Snort to detect multiple VLANs over site to site VPN?

I am studying options to check traffic over multiple VLANs using a Snort cloud machine, since the normal Snort installation requires to get local network and local VLAN information. I thought to use ...
1 vote
0 answers
99 views

Is using randomized filenames a good way to secure data stored in a product like S3?

If I want to use a S3 clone to host something somewhat sensitive (probably digitalocean, since it's cheapest and probably has a perfectly good quality), is it sensible to do it this way: https://...
  • 215
1 vote
0 answers
101 views

Does Snowflake Data Sharing add any real security?

Snowflake is a cloud database like Google BigQuery or Amazon Redshift. Unlike them, however, it markets a "Secure Data Sharing" feature. They go to some effort (including a full "Data ...
1 vote
0 answers
102 views

Is a VPN + Firewall + Authorization Redundant?

I am creating a simple application so a distributed team can access sensitive data. This application will have a database that will be inaccessible to the public internet inside a VPC with my cloud ...
1 vote
0 answers
135 views

What are some common AWS Lamdba (specific) Security Pitfalls, Auditing Tools, and Methods of Mitigation?

I am writing a research paper detailing the security vulnerabilities of serverless AWS lambda applications, and how to prevent them. I am also compiling a list of security auditing tools that are ...
  • 236
1 vote
0 answers
98 views

Secure API access with mobile apps in restricted environments

In our current project, IT rules prohibit anything that is not PROD to be publicly accessible from the Internet. Access to development and review environments must be severely restricted. That said, ...
1 vote
0 answers
110 views

Hybrid cloud access controls

In a hybrid cloud setup, where we have a cloud component which writes data into an on premise component, is it necessary to have separate access controls between the cloud and on premise? Our ...
1 vote
0 answers
107 views

What vectors and attack surfaces do we consider when creating an attack tree for applications hosted on AWS resources?

When illustrating an attack tree for web and mobile applications hosted on AWS resources what vectors do we include. To start out I can include taking over a sub domain using S3 and EC2. I have gone ...
1 vote
0 answers
165 views

implementing a CA and a CSP

We are in the process of implementing a CA and a CSP for our organization. I came across these issues while implementing. Can the CA and CSP be owned by the same party? Will there be a conflict of ...
  • 123
1 vote
0 answers
224 views

How to prevent cache-based side-channel attacks in IoT devices

The sharing of hardware resources from various vendors in the Internet of things is fundamental for efficient processing in the cloud. The presence of a myraid of clients accessing the same hardware ...
1 vote
0 answers
96 views

How to know and disallow corporative Google Apps users to access third party apps with their corporative Google Apps accounts?

How can a security administrator of Google Apps for an organization that has linked @organization.com accounts to Google Apps to know and disallow that users use their users@organization.com accounts ...
1 vote
0 answers
391 views

Firewall requirements for SaaS service providers

I have not had much success compiling a workable overview on the topic of firewalls and application service providers, despite making a rather extensive contribution to Google's workload this month. I'...
  • 200
1 vote
0 answers
78 views

Security schemes regularly in use on cloud

I've been looking into how connections are managed in the cloud, in order to better understand the threats users and their deployments may face. The most important and common ones in use seem to be ...
1 vote
0 answers
111 views

Can user identifying information in Dropbox be derived from subscription data?

I've noticed that my Dropbox installation really loves sending unencrypted information over the net including a "user_id" and it's user-agent. What i want to know is if it's possible at all to ...
0 votes
0 answers
16 views

Act as another google cloud platform user in a web app

I want to set up an OAuth2.0 flow on a web application for users that have access to GCP. The user will login to a web app. Then, the OAuth2.0 flow will need to ask for the consent that will allow the ...
  • 103
0 votes
0 answers
17 views

Is my perception of improved security by restricting access to an MS365 tenant/associated apps on per-device basis misguided? Why?

Receiving guidance from a contractor that restricting unknown devices (regardless of MFA, location, etc.) to an Azure tenant does not improve security in any meaningful way, and just creates a ...
0 votes
0 answers
26 views

Service principals, a gaping hole in cloud security?

I've had the opportunity to work at one of the cloud providers, and one of the things I'm seeing is increased usage of service principals, or what I call authNZ by ip address. I think it's good in ...
  • 322
0 votes
0 answers
63 views

Storing an encryption key securely

I am struggling with the question how to store a security key in a secure way. I have done some research and there are multiple options. Option 1) Storing the key on the same server (not recommended, ...
0 votes
0 answers
68 views

Static Content Security

I have some static content HTML in a cloud storage space/ CDN. How can I serve this only to authenticated users? I am planning to use these static content on edx platforms. How can I securely ...
  • 1
0 votes
0 answers
138 views

Using AWS: Is it possible to hide the traffic from amazon?

Assuming I use AWS to host a service with quite sensitive personal data, is it possible to hide traffic and stored data from amazon? I would assume the answer is no. I think I need to provide all the ...
  • 707
0 votes
0 answers
87 views

Amazon Photo/Drive security documentation

I'm doing some research on Amazon drive/photo and I seem unable to find any security documentation on the subject. I'm aware that they are using AWS but I'm interested to learn more. Some people say ...
0 votes
0 answers
84 views

What are reasonable level of security for a interal-use organization application hosted on the cloud?

I'm working on an small web application (Flask). The application is only for distributed internal usage, e.g. only users with credentials created by the organization will have access to the services ...
  • 103
0 votes
1 answer
425 views

Unknown folders in OneDrive

Today I opened OneDrive by accident, since I do not use it. To my surprise, inside there were unknown folders, in foreign (to me) languages. Namely, "document" and "photo" folders ...
  • 101
0 votes
0 answers
68 views

Is it possible to make a remote server part of VPN so that only machines within a domain network can access the server?

First, let me describe the problem I am trying to solve. I have a domain-based network. My Source Control server resides on this network. This meant only devices connected to the network (part of ...
0 votes
0 answers
2k views

Someone is Cryptomining from my Google Compute Engine Instance

I run an airflow instance which python process scheduler, which is used to trigger different python ML process which has no relation to crypto mining. This is the process which is running this ...
  • 101
0 votes
0 answers
173 views

Meltdown checker says AWS and Rackspace is vulnerable - Why?

Today I was curious how my vmware environment stacked up against Spectre and Meltdown. So I ran spectre-meltdown-checker. It came back clean with 7 of 8 variants OK (the failed one is apparently ...
  • 1,130
0 votes
1 answer
800 views

Virtualization / Cloud-Stack fingerprinting from running VM

How can the host environment (not just the OS) be identified from a running guest VM. To determine what the underlying host and virtualization stacks being used actually are. I.e. whether there's a ...
-1 votes
1 answer
234 views

How to implement security with Azure Mobile Services Back-end?

I have a mobile application which relies on a Windows Azure Mobile Services Back-end. I want to tie down some security vulnerabilities. For example, someone can currently access all my records, modify ...