Skip to main content

Questions tagged [cloud-computing]

Cloud computing is about hardware-based services involving computing, network and storage capacities. These services are provided on-demand, hosted by the cloud provider and can easily scale up and down.

Filter by
Sorted by
Tagged with
0 votes
0 answers
37 views

Preserving network segmentation for cloud web app in a user friendly way

Assuming a team maintaining multiple simple cloud web apps with associated secret key stores. The control plane for the app needs to access secrets, and we don't want to expose the secret store on the ...
Petter Kvalvaag's user avatar
1 vote
0 answers
61 views

SrSecEng - how to optimize for future vision [closed]

I'd like to do Cloud, Security, and Programming, ideally in Python/Golang. To move from process automation towards asynchronous, distributed, autonomic systems. Security inspired by DevOps/SRE ...
just-doing-this-for-dark-mode's user avatar
1 vote
0 answers
80 views

Prevention of access to user data running on the cloud

I am building a web-based software as a service (SaaS) platform for engineering simulations that run on the cloud, and wish to prevent my access to user data by design. The user designs a 3D geometry (...
Coto TheArcher's user avatar
1 vote
1 answer
181 views

Why is TLS communication within a VPC important? [duplicate]

In this sense, I understand the encryption needed between say client and server and all communications that are external. But for a scenario where for all VMs are in the same VPC and not exposed to ...
Vipin Menon's user avatar
2 votes
1 answer
148 views

Which security measures are implemented by cloud platforms that permit submitting Python code to be executed remotely?

Which security measures are implemented by cloud platforms that permit submitting Python code to be executed remotely? I can think of a few examples: user access control resource allocation job queue ...
Radu M.'s user avatar
  • 123
2 votes
1 answer
182 views

How to avoid breaking end-to-end encryption while employing cloud-based DDoS protection?

I have a few websites and apps that I need to protect from DDoS attacks. These websites and apps are delivered by various servers that sit in several small data centers around the world. I'm thinking ...
hilltothesouth's user avatar
0 votes
2 answers
176 views

Does it make any sense to encrypt data to be uploaded to an already encrypted cloud such as NordLocker?

Let's suppose one wants so store valuable data (e.g. a Bitcoin seed) in an encrypted cloud such as NordLocker. Would it make any sense that such person encrypts this data (offline) first with his/her ...
Martel's user avatar
  • 123
2 votes
1 answer
125 views

TLS and MiTM Attacks Relevancy over Public Cloud (SDN) internal networks

Edit: To clarify, this question is all about whether we should insist on implementing TLS for internal communications over public cloud tenants as a man-in-the-middle risk reduction control, given the ...
NetworkNewbie's user avatar
0 votes
0 answers
91 views

What are the challenges when doing forensics on cloud storage services?

My class question: "What are the key challenges for cloud forensics on cloud storage such as Dropbox?" With what I've been told and what I generally understand, the question is basically ...
Thanos's user avatar
  • 111
0 votes
1 answer
1k views

Can a company using OneDrive for work detect the usage of a personal OneDrive account by an employee on a company machine?

My company is using OneDrive to store all our work files. I occasionally use my personal OneDrive account for personal matters on my work computer with security agents installed. Can a sysadmin detect ...
Vuiol999's user avatar
1 vote
3 answers
164 views

Job prospects for Red Teaming in cloud security?

I want to make my career in cyber security, but am confused which field to choose. According to this Burning Glass report, https://www.burning-glass.com/wp-content/uploads/2020/10/...
Aryan's user avatar
  • 11
2 votes
0 answers
89 views

Secure way to transfer all of my Dropbox files to my Koofr account

I want to securely Transfer my Dropbox files to Koofr. What's the best way to do this? Here some additional information: My Dropbox file are not encrypted. Koofr can connect directly to Dropbox. Do ...
Don Droga's user avatar
2 votes
1 answer
446 views

What happens to malicious traffic in a scrubbing center during a DDoS attack?

My understanding of a scrubbing center is when a DDoS is underway, all traffic gets routed to a scrubbing center where traffic is analyzed and all legitimate traffic is then sent to the targeted ...
Red Code's user avatar
1 vote
1 answer
639 views

Why do I need an IDS/IPS in a serverless cloud environment?

Following this question (Why do we need IDS/IPS if a firewall is present?) from a few years back, I am trying to take this subject to the cloud. Assuming that I have a fully "serverless" AWS ...
Nir Levy's user avatar
  • 111
0 votes
0 answers
177 views

Storing an encryption key securely

I am struggling with the question how to store a security key in a secure way. I have done some research and there are multiple options. Option 1) Storing the key on the same server (not recommended, ...
JavaForAndroid's user avatar
0 votes
0 answers
102 views

Security implications of using HTTP for service to service communication within the same host [duplicate]

What are the security implications of using HTTP only for IPC for services within the same host? In my case, I am using docker-compose to host two ASP.NET Core services within the same host in Azure. ...
Mariksel Azemaj's user avatar
0 votes
0 answers
98 views

Static Content Security

I have some static content HTML in a cloud storage space/ CDN. How can I serve this only to authenticated users? I am planning to use these static content on edx platforms. How can I securely ...
Dashin's user avatar
  • 1
0 votes
1 answer
172 views

What threats are mitigated by encrypted VPC connections?

We are running a virtual private cloud, in other words a vendor-hosted intranet. (In this case the vendor is AWS, but it could be Azure, Digital Ocean...) The intranet does not have public-facing ...
lofidevops's user avatar
  • 3,610
0 votes
0 answers
210 views

Using AWS: Is it possible to hide the traffic from amazon?

Assuming I use AWS to host a service with quite sensitive personal data, is it possible to hide traffic and stored data from amazon? I would assume the answer is no. I think I need to provide all the ...
Gamer2015's user avatar
  • 727
0 votes
1 answer
401 views

How does a cloud based application use a TPM to authenticate hardware devices?

I have heard about this, but not sure how it would work. I would imagine that when you register the device, the public RSA key burnt into the chip would be shared. That way, if the application sends a ...
Beginner's user avatar
0 votes
0 answers
115 views

Amazon Photo/Drive security documentation

I'm doing some research on Amazon drive/photo and I seem unable to find any security documentation on the subject. I'm aware that they are using AWS but I'm interested to learn more. Some people say ...
Arnes Kovacevic's user avatar
1 vote
0 answers
145 views

MFA authentication to O365 - remote workers users without mobile phone. Which secure solution? [closed]

We are deploying O365 in my company (Teams, Sharepoint, Exchange online, Office suite). In order to connect outside our network (remote workers especially during this pandemic), we've implemented MFA ...
Will0093's user avatar
0 votes
1 answer
438 views

Python desktop application: storing cloud database passwords

I am currently building a Python desktop application in PyQt/PySide which will be compiled to .exe. I am planning to use the Azure SQL database and a remote file storage (like S3). An issue arises ...
Georgiy Santonov's user avatar
1 vote
3 answers
2k views

Does domain resolve to CDN (Cloudfront) IP and not the actual web-app server?

If a web-app is using cloudfront as CDN, what happens if I ping the domain? Am I pinging the cloudfront endpoint? Or the web-app server? Why is it DNS resolution resolves to different IPs in this case?...
Bryan's user avatar
  • 21
0 votes
0 answers
32 views

secure deletion in virtual machines [duplicate]

when we securely delete a volume in a machine which is installed in a virtual machine or docker, for example by overwriting 7 times or more, we securely delete the data in virtual disk (in guest) and ...
alex's user avatar
  • 1
1 vote
0 answers
212 views

Can I use Snort to detect multiple VLANs over site to site VPN?

I am studying options to check traffic over multiple VLANs using a Snort cloud machine, since the normal Snort installation requires to get local network and local VLAN information. I thought to use ...
Ahmad Abuhasna's user avatar
1 vote
0 answers
137 views

Is using randomized filenames a good way to secure data stored in a product like S3?

If I want to use a S3 clone to host something somewhat sensitive (probably digitalocean, since it's cheapest and probably has a perfectly good quality), is it sensible to do it this way: https://...
john01dav's user avatar
  • 225
2 votes
3 answers
180 views

Is using a dedicated IP for AWS dev access secure enough?

I'm about to launch my first ever SaaS product on AWS and am thinking through security. I have my main server, which is obviously public on :80 and :443, and then I have a bunch of other infra that I ...
ilmoi's user avatar
  • 123
0 votes
0 answers
111 views

What are reasonable level of security for a interal-use organization application hosted on the cloud?

I'm working on an small web application (Flask). The application is only for distributed internal usage, e.g. only users with credentials created by the organization will have access to the services ...
Francky_V's user avatar
  • 103
1 vote
1 answer
221 views

Should I store data on my computer

Over the few months I have used two piece of software on my computer Microsoft Office Google Chrome I can access all my files on OneDrive through Microsoft office without having to save anything on ...
MrJoe's user avatar
  • 809
1 vote
1 answer
120 views

Become a Cloud Security analyst [closed]

What learning path would you recommend for someone interesting in focussing on the Cloud Security side and considering remote work in the future? Many thanks
Prinz's user avatar
  • 11
0 votes
1 answer
146 views

What (aside from the law) prevents cloud-hosting owners from eavesdropping on servers/code?

Given a server hosted on a cloud platform, what would stop the cloud platform owner from stealing the server's data and/or code? As far as I can tell, a motivated cloud owner could retrieve the data ...
Asker's user avatar
  • 101
1 vote
1 answer
1k views

Model for multi-tenant data encryption where the application owners or cloud providers cannot see decrypted data

Consider an application in which users will install on-premise agents which communicate with a cloud hosted service (aws in this case). The users can interact with the cloud service to configure and ...
Neil's user avatar
  • 153
22 votes
2 answers
4k views

How critical is encryption-at-rest for public cloud hosted systems?

I work as a solutions architect for web-based systems on AWS. As part of this role, I often respond to Information Security questionnaires. Nearly all questionnaires request information about data ...
jdog's user avatar
  • 345
1 vote
0 answers
136 views

What ways are there to securely connect different sites/branches? [closed]

I'm somewhat new to the field, but I have been tasked with coming up with the best way to connect remote customer sites to our two main offices. The data sent across from the customer to the main ...
infosecnovice's user avatar
1 vote
0 answers
330 views

Student Project Ideas using Openstack [closed]

I am a student at University and have completed all on my CompSci courses and am getting started in my concentration, security. What I want to do for my project is create and monitor a secure cloud ...
AsapHogFtw's user avatar
1 vote
0 answers
146 views

Does Snowflake Data Sharing add any real security?

Snowflake is a cloud database like Google BigQuery or Amazon Redshift. Unlike them, however, it markets a "Secure Data Sharing" feature. They go to some effort (including a full "Data ...
Seamus Abshere's user avatar
1 vote
2 answers
424 views

Are password managers still effective on a cloud PC (virtual machine)?

I have recently started using a cloud gaming service. It provides me with control of a 'remote PC' (actually a virtual machine running in their data centre) accessed through an app or VNC console. The ...
Matthew's user avatar
  • 162
0 votes
0 answers
103 views

Is it possible to make a remote server part of VPN so that only machines within a domain network can access the server?

First, let me describe the problem I am trying to solve. I have a domain-based network. My Source Control server resides on this network. This meant only devices connected to the network (part of ...
devanalyst's user avatar
3 votes
1 answer
188 views

When we should choose Virtual Private Cloud(VPC)?

Assume we build an application that has internal components (or microservices) on GCP (or AWS, Azure...). I guess there are 2 main security options: use VPC to protect internal communications. ...
wu555's user avatar
  • 31
-1 votes
1 answer
128 views

Privacy: why do I have to delete an account instead of simply no longer using it?

I try to avoid big internet companies (big tech) and try to find decentralized and/or open source alternatives. I use a password manager with unique usernames and generated, complex passwords. A lot ...
Sybil's user avatar
  • 1,469
1 vote
0 answers
3k views

Concerns about Fing scanner [closed]

For years I have been using the Fing iOS app to scan my home network to check for unknown devices. The iOS apps is nice and self contained, so I never worried much about its own security. I recently ...
Carlos N's user avatar
  • 111
3 votes
1 answer
1k views

Symmetric vs asymmetric encryption for backup files uploaded to cloud storage

I want to encrypt my server's backups and upload them to cloud storage (e.g. dropbox, google drive). I understand the basics with symmetric (single passphrase-secured key) and asymmetric (public/...
lonix's user avatar
  • 445
0 votes
1 answer
396 views

Using unique per-session gpg keys to store backups on cloud storage

I'd like to encrypt my server's daily backups and send them to dropbox / google drive / etc., as a backup. I've read of various approaches. Assuming symmetric encryption (passphrase rather than ...
lonix's user avatar
  • 445
0 votes
0 answers
3k views

Someone is Cryptomining from my Google Compute Engine Instance

I run an airflow instance which python process scheduler, which is used to trigger different python ML process which has no relation to crypto mining. This is the process which is running this ...
isht3's user avatar
  • 101
1 vote
1 answer
131 views

Securing media uploading to the cloud from reverse engineering

I own an RPG multiplayer game written in Java, where players can fight each other in the game. Recently I planned to invent a new feature, where the last 15 seconds of your fight and the "knockout" ...
Ben Beri's user avatar
  • 121
2 votes
1 answer
351 views

Reason for lack of asymmetric cryptography in AWS KMS for regions in China

In the documentation of the AWS Key Management Service (KMS) I found this interesting sentence: Asymmetric CMKs and asymmetric data key pairs are supported in all AWS Regions that AWS KMS supports ...
mat's user avatar
  • 1,272
5 votes
2 answers
822 views

Does Cloudflare masking my IP make my server more secure?

I've heard in a conversation and read in some forum posts that Cloudflare will proxy your IP, hiding it from the public, and this mitigates the risk of an attacker finding your server in the first ...
TCooper's user avatar
  • 366
1 vote
0 answers
126 views

Is a VPN + Firewall + Authorization Redundant?

I am creating a simple application so a distributed team can access sensitive data. This application will have a database that will be inaccessible to the public internet inside a VPC with my cloud ...
morsecodist's user avatar
0 votes
1 answer
555 views

Use of HTTP functions in GCP Cloud Functions Is Not Secure. Why they are still available?

As Google mentions itself in the documentation, the HTTP functions in Cloud Functions have no authentication and are not secure. HTTP functions are unprotected and will respond to any HTTP request,...
LLub's user avatar
  • 1,256

1
2 3 4 5
7