Questions tagged [cloud-computing]

Cloud computing is about hardware-based services involving computing, network and storage capacities. These services are provided on-demand, hosted by the cloud provider and can easily scale up and down.

Filter by
Sorted by
Tagged with
0
votes
1answer
41 views

What threats are mitigated by encrypted VPC connections?

We are running a virtual private cloud, in other words a vendor-hosted intranet. (In this case the vendor is AWS, but it could be Azure, Digital Ocean...) The intranet does not have public-facing ...
0
votes
0answers
66 views

Using AWS: Is it possible to hide the traffic from amazon?

Assuming I use AWS to host a service with quite sensitive personal data, is it possible to hide traffic and stored data from amazon? I would assume the answer is no. I think I need to provide all the ...
0
votes
1answer
87 views

How does a cloud based application use a TPM to authenticate hardware devices?

I have heard about this, but not sure how it would work. I would imagine that when you register the device, the public RSA key burnt into the chip would be shared. That way, if the application sends a ...
0
votes
0answers
46 views

Amazon Photo/Drive security documentation

I'm doing some research on Amazon drive/photo and I seem unable to find any security documentation on the subject. I'm aware that they are using AWS but I'm interested to learn more. Some people say ...
1
vote
0answers
51 views

MFA authentication to O365 - remote workers users without mobile phone. Which secure solution? [closed]

We are deploying O365 in my company (Teams, Sharepoint, Exchange online, Office suite). In order to connect outside our network (remote workers especially during this pandemic), we've implemented MFA ...
0
votes
1answer
86 views

Python desktop application: storing cloud database passwords

I am currently building a Python desktop application in PyQt/PySide which will be compiled to .exe. I am planning to use the Azure SQL database and a remote file storage (like S3). An issue arises ...
1
vote
3answers
218 views

Does domain resolve to CDN (Cloudfront) IP and not the actual web-app server?

If a web-app is using cloudfront as CDN, what happens if I ping the domain? Am I pinging the cloudfront endpoint? Or the web-app server? Why is it DNS resolution resolves to different IPs in this case?...
0
votes
0answers
31 views

secure deletion in virtual machines [duplicate]

when we securely delete a volume in a machine which is installed in a virtual machine or docker, for example by overwriting 7 times or more, we securely delete the data in virtual disk (in guest) and ...
1
vote
0answers
55 views

Can I use Snort to detect multiple VLANs over site to site VPN?

I am studying options to check traffic over multiple VLANs using a Snort cloud machine, since the normal Snort installation requires to get local network and local VLAN information. I thought to use ...
1
vote
0answers
55 views

Is using randomized filenames a good way to secure data stored in a product like S3?

If I want to use a S3 clone to host something somewhat sensitive (probably digitalocean, since it's cheapest and probably has a perfectly good quality), is it sensible to do it this way: https://...
2
votes
3answers
88 views

Is using a dedicated IP for AWS dev access secure enough?

I'm about to launch my first ever SaaS product on AWS and am thinking through security. I have my main server, which is obviously public on :80 and :443, and then I have a bunch of other infra that I ...
0
votes
0answers
43 views

What are reasonable level of security for a interal-use organization application hosted on the cloud?

I'm working on an small web application (Flask). The application is only for distributed internal usage, e.g. only users with credentials created by the organization will have access to the services ...
1
vote
1answer
77 views

Should I store data on my computer

Over the few months I have used two piece of software on my computer Microsoft Office Google Chrome I can access all my files on OneDrive through Microsoft office without having to save anything on ...
1
vote
1answer
48 views

Become a Cloud Security analyst [closed]

What learning path would you recommend for someone interesting in focussing on the Cloud Security side and considering remote work in the future? Many thanks
0
votes
1answer
85 views

What (aside from the law) prevents cloud-hosting owners from eavesdropping on servers/code?

Given a server hosted on a cloud platform, what would stop the cloud platform owner from stealing the server's data and/or code? As far as I can tell, a motivated cloud owner could retrieve the data ...
1
vote
1answer
230 views

Model for multi-tenant data encryption where the application owners or cloud providers cannot see decrypted data

Consider an application in which users will install on-premise agents which communicate with a cloud hosted service (aws in this case). The users can interact with the cloud service to configure and ...
0
votes
1answer
196 views

Unknown folders in OneDrive

Today I opened OneDrive by accident, since I do not use it. To my surprise, inside there were unknown folders, in foreign (to me) languages. Namely, "document" and "photo" folders ...
22
votes
2answers
4k views

How critical is encryption-at-rest for public cloud hosted systems?

I work as a solutions architect for web-based systems on AWS. As part of this role, I often respond to Information Security questionnaires. Nearly all questionnaires request information about data ...
1
vote
0answers
63 views

What ways are there to securely connect different sites/branches? [closed]

I'm somewhat new to the field, but I have been tasked with coming up with the best way to connect remote customer sites to our two main offices. The data sent across from the customer to the main ...
1
vote
0answers
119 views

Student Project Ideas using Openstack [closed]

I am a student at University and have completed all on my CompSci courses and am getting started in my concentration, security. What I want to do for my project is create and monitor a secure cloud ...
0
votes
0answers
40 views

Handling API keys for client-side app with cloud key vault

I would like to hear about the security implications of my desktop app's current API usage workflow: Client-side WPF desktop app connects to Azure Key Vault, a cloud vault, by authenticating via a ...
1
vote
0answers
54 views

Does Snowflake Data Sharing add any real security?

Snowflake is a cloud database like Google BigQuery or Amazon Redshift. Unlike them, however, it markets a "Secure Data Sharing" feature. They go to some effort (including a full "Data ...
2
votes
2answers
141 views

Are password managers still effective on a cloud PC (virtual machine)?

I have recently started using a cloud gaming service. It provides me with control of a 'remote PC' (actually a virtual machine running in their data centre) accessed through an app or VNC console. The ...
0
votes
0answers
31 views

Is it possible to make a remote server part of VPN so that only machines within a domain network can access the server?

First, let me describe the problem I am trying to solve. I have a domain-based network. My Source Control server resides on this network. This meant only devices connected to the network (part of ...
2
votes
0answers
67 views

When we should choose Virtual Private Cloud(VPC)?

Assume we build an application that has internal components (or microservices) on GCP (or AWS, Azure...). I guess there are 2 main security options: use VPC to protect internal communications. ...
-1
votes
1answer
59 views

Privacy: why do I have to delete an account instead of simply no longer using it?

I try to avoid big internet companies (big tech) and try to find decentralized and/or open source alternatives. I use a password manager with unique usernames and generated, complex passwords. A lot ...
1
vote
0answers
274 views

Concerns about Fing scanner [closed]

For years I have been using the Fing iOS app to scan my home network to check for unknown devices. The iOS apps is nice and self contained, so I never worried much about its own security. I recently ...
2
votes
1answer
449 views

Symmetric vs asymmetric encryption for backup files uploaded to cloud storage

I want to encrypt my server's backups and upload them to cloud storage (e.g. dropbox, google drive). I understand the basics with symmetric (single passphrase-secured key) and asymmetric (public/...
0
votes
1answer
132 views

Using unique per-session gpg keys to store backups on cloud storage

I'd like to encrypt my server's daily backups and send them to dropbox / google drive / etc., as a backup. I've read of various approaches. Assuming symmetric encryption (passphrase rather than ...
0
votes
0answers
2k views

Someone is Cryptomining from my Google Compute Engine Instance

I run an airflow instance which python process scheduler, which is used to trigger different python ML process which has no relation to crypto mining. This is the process which is running this ...
1
vote
1answer
63 views

Securing media uploading to the cloud from reverse engineering

I own an RPG multiplayer game written in Java, where players can fight each other in the game. Recently I planned to invent a new feature, where the last 15 seconds of your fight and the "knockout" ...
2
votes
1answer
180 views

Reason for lack of asymmetric cryptography in AWS KMS for regions in China

In the documentation of the AWS Key Management Service (KMS) I found this interesting sentence: Asymmetric CMKs and asymmetric data key pairs are supported in all AWS Regions that AWS KMS supports ...
5
votes
2answers
279 views

Does Cloudflare masking my IP make my server more secure?

I've heard in a conversation and read in some forum posts that Cloudflare will proxy your IP, hiding it from the public, and this mitigates the risk of an attacker finding your server in the first ...
1
vote
0answers
57 views

Is a VPN + Firewall + Authorization Redundant?

I am creating a simple application so a distributed team can access sensitive data. This application will have a database that will be inaccessible to the public internet inside a VPC with my cloud ...
0
votes
1answer
276 views

Use of HTTP functions in GCP Cloud Functions Is Not Secure. Why they are still available?

As Google mentions itself in the documentation, the HTTP functions in Cloud Functions have no authentication and are not secure. HTTP functions are unprotected and will respond to any HTTP request,...
2
votes
1answer
1k views

How to make it harder for a VPS provider to access my data?

I know it is impossible to completely prevent a host from accessing the data of a virtual machine (as noted here, here and here), but I think there is value in making it harder to do so. Bare metal ...
44
votes
9answers
8k views

I have just 4 hours a month to security check a cloud based application - How to use my time?

I've been tasked with looking after an application deployed to azure. I have been allocated 4 hours a month. I essentially have half a workday to secure this application / keep it secure. What is an ...
3
votes
1answer
232 views

Why isn't cloud (AWS, Azure, GCP) metadata served over HTTPS?

Why can any application or user on your server type an insecure URL like these to get server information about that instance? http://instance-data.us-east-1.compute.internal/latest/meta-data/ http://...
8
votes
1answer
5k views

How to execute a command directly on the host system through docker.sock in a Docker container?

I've been studying Docker security and examining ways of escaping from container to host. Suppose Docker sock (docker.sock) is mounted into the container at /var/run/docker.sock, so that Docker ...
1
vote
1answer
178 views

Is encryption/decryption done in the cloud when using CMK keys?

I am trying to understand how AWS KMS works, and there is one thing I am still not completely sure of: when using CMKs, so no Data Keys, no envelop encryption, does the encryption take place in the ...
2
votes
1answer
86 views

content disposition headers vs cloud and inspection

Quoting from McAfee MVISION CASB Many cloud services use custom content disposition headers in an effort to improve the performance of their applications. These custom headers have the ...
2
votes
2answers
124 views

How to protect a server against Cloud Hopper?

Almost everyone is using cloud service providers for their computing needs these days, including myself. I am getting increasingly paranoid about a Cloud Hopper threat recently described in this ...
2
votes
3answers
258 views

What are the techniques to know if VPS cloud hosting provider is accessing my data?

Immutable laws of security: https://fossbytes.com/10-immutable-laws-security-microsoft/ If a bad guy has unrestricted physical access to your computer, it’s not your computer anymore. I understand ...
1
vote
0answers
79 views

What are some common AWS Lamdba (specific) Security Pitfalls, Auditing Tools, and Methods of Mitigation?

I am writing a research paper detailing the security vulnerabilities of serverless AWS lambda applications, and how to prevent them. I am also compiling a list of security auditing tools that are ...
1
vote
0answers
179 views

Instance metadata on IBM Cloud [closed]

Is there any way to get instance metadata on IMB Cloud (a.k.a Bluemix) K8s cluster, from a compromised pod? Something like doing curl to http://metadata.google.internal/computeMetadata/v1/instance/......
2
votes
1answer
156 views

Is a good idea to have security logs stored in the cloud?

I was discussing with my friend the topic of the importance of log analytics/correlation and real-time response for an organization. Then, he mentioned that some people consider sending logs (...
2
votes
4answers
1k views

What are the benefits of using IP whitelists to secure cloud servers/resources?

Consider the following scenario: There is a "server" (e.g. database, API, etc) that is "in the cloud" (i.e. hosted on physical hardware that is physically distant from the clients and reachable only ...
1
vote
1answer
30 views

Wifi Cloud Storage

If you move files from an infected machine to a Wi-Fi Cloud storage, then move the same files from the Wi-Fi storage to a non infected machine, could you infect your new non infected machine?
1
vote
0answers
57 views

Secure API access with mobile apps in restricted environments

In our current project, IT rules prohibit anything that is not PROD to be publicly accessible from the Internet. Access to development and review environments must be severely restricted. That said, ...
4
votes
1answer
77 views

Is there any harm to writing a short plain-text string to authorized_keys?

I have a CFN template where I'm seeding an authorized key for testing via paramaters, through a build server. If this value is not provided by the build job, it defaults to a short, plain text string, ...

1
2 3 4 5 6