Questions tagged [cloud-computing]

Cloud computing is about hardware-based services involving computing, network and storage capacities. These services are provided on-demand, hosted by the cloud provider and can easily scale up and down.

Filter by
Sorted by
Tagged with
3
votes
1answer
405 views

Can password based SSO be trivially compromised?

Many cloud SSO providers now offer "password based SSO" (e.g. https://docs.microsoft.com/en-us/azure/active-directory/active-directory-appssoaccess-whatis ), where, even if the SaaS you want to log in ...
1
vote
2answers
74 views

Parameters to check before storing data on cloud

I want suggestions regarding the storing/securing my data on cloud. I want to upload my data on cloud, so it will be safe and can be accessible from anywhere. I have around 15 GB of data which I ...
3
votes
1answer
84 views

How can you securely use a cloud-based CI/CD server?

I'm looking at using a cloud-based continuous deployment server to push production code for my application. Because it's a cloud based server, this requires me to give them a private SSH key that has ...
1
vote
3answers
111 views

How can cloud service providers know that they are being used for launching a DoS?

Can cloud service providers like Amazon, Microsoft etc. detect that they are being used to launch a DoS/DDoS against any target? If yes, how? I am guessing that if they attack a single machine, a ...
0
votes
1answer
60 views

What is the best way for securing data transportation between sites [closed]

If I have number of computational nodes (over cloud for instance) and I would like to transfer data between them. The data over the network has to pass through as fast as possible and the encryption ...
1
vote
1answer
229 views

Can you encrypt memory of server which hold luks keys?

I have a cloud VM. It's Centos 7 and I used full disk encryption during install. I also installed dropbear SSH to remotely unlock said server in case of a reboot. No one but me have administrative ...
0
votes
4answers
119 views

Is it okay to store this health data in a public cloud? [closed]

Is it okay to store relative health data in the public cloud, accessible by all users of my mobile app? Put another way, is this not considered PHI? For example: Bob has a resting heart rate of 40 ...
0
votes
1answer
69 views

What is estiamted risk of corrupt public officials accessing survivelance and cloud data in UK?

If company Trade Inc setups cloud email and cloud server and also uses mobiles and business broadband, if the owner of the competing company let's say RougeTrade Inc. has friends in UK police, he may ...
2
votes
1answer
153 views

Secure cloud encryption scheme, do you know what is the standard for this?

I am wondering if the scenario below has a name or it is something in use? The point of it is to keep data encrypted at cloud storage which is big storage therefore cheaper, but then do not allow for ...
0
votes
1answer
97 views

How should I detect and respond to bad actors who perform SQL injections?

SQL Azure has a logic component called Threat Detection. I assume it looks for SQL Injection, but also evidence of dangerous commands like sp_exec. I would like to expand that scope, and also ...
1
vote
1answer
1k views

How do companies deal with storing their source code on GitHub from a data-loss risk management point-of-view? [closed]

When it comes to storing my data "in the cloud" (aka: on someone else's server), I alway have kind of a bad feeling that something like "Google's deleted an artist's blog, along with 14 years of his ...
1
vote
1answer
218 views

Deep attestation of VM's

Hypervisors like Xen have virtual TPM (vTPM) support. In cloud environments, are there any implementations where such vTPM's are being used during remote attestation in addition to the host TPM based ...
3
votes
1answer
1k views

What are the advantages of cloud-based firewalls? [closed]

What are the advantages of firewall based on cloud? Does it cause heavy traffic and make it slower? If it does, is the impact significant? A firewall based on a cloud, as I understand it, will ...
25
votes
2answers
3k views

How do big cloud providers guard against VM escape attacks?

I think it's pretty much unassailable to say that cloud computing as we know it depends on the concept of the robustness of virtual machines. Where one can depend on the security of VMs they allow ...
1
vote
0answers
186 views

How to prevent cache-based side-channel attacks in IoT devices

The sharing of hardware resources from various vendors in the Internet of things is fundamental for efficient processing in the cloud. The presence of a myraid of clients accessing the same hardware ...
4
votes
1answer
14k views

Identify if a certain domain is using Office 365 or Google Mail

I have a list of e-mail domains that i wanted to confirm if they're using Office 365 or Google Mail for mail. Checking MX using Nslookup can do the job but I noted that a few companies will use an ...
3
votes
1answer
1k views

I want to deploy from GitLab to AWS - so where exactly do I store my private key?

This seems like an odd and simple question, but I'm trying to get my head around the principle of "never check a private key into version control". I'm trying to build a startup of sorts, where ...
-1
votes
1answer
202 views

How to implement security with Azure Mobile Services Back-end?

I have a mobile application which relies on a Windows Azure Mobile Services Back-end. I want to tie down some security vulnerabilities. For example, someone can currently access all my records, modify ...
6
votes
2answers
3k views

Is storing an encrypted zip file to an insecure cloud service an admissible way of securing privacy?

Consider the following scenario: I use a cloud service that is not considered secure (meaning no encryption whatsoever) i.e. Dropbox, OneDrive, Google Drive etc. In my account I have a .zip or .7z ...
5
votes
2answers
863 views

How to deal with UDP bandwidth exhaustion DDoS attacks?

I am building a service, which will use UDP. It will run on Amazon AWS - in the firewall they provide, I can block everything except that one UDP port my service will run. The only thing I'm ...
5
votes
2answers
267 views

What are the risks of sending sensitive documents that are on physical media and password protected via postal carrier using registered mail?

Background The company I work for is extremely risk averse when it comes to adopting the use of cloud services for improving business flows. We currently use a very famous search company's business ...
8
votes
5answers
2k views

Can secrets be made safe in memory?

Say, I am running an application on a cloud server such as AWS. Suppose I supply a key at run-time (so its not stored anywhere alongside/inside code), is there a way to secure this key in memory? So ...
2
votes
3answers
173 views

How to rank the security strength of a cloud SaaS app

If my manager asked me to rank how secure/vulnerable our SaaS system is, what methods are available to do so? I know there are certifications available but I'm looking for something which can be ...
12
votes
2answers
2k views

Is it safe to store SSN's in Azure Cloud?

I'm doing due diligence on a company. They are entirely cloud based and need to collect lots of personal information from users (including SSN). Is this something I should be majorly concerned with? ...
3
votes
1answer
245 views

Recommendation Key Management and Storage in Cloud Storage

I am currently researching about key management in the cloud storage and looking for alternative for it. The current system stores encryption key for each file in the server and each key is encrypted ...
1
vote
1answer
62 views

Virtulization in cloud and security

From a security perspective, which type of hyper-visor cloud is more secure - one that runs on bare-metal (using minimal boot strap build into hyper-visor) or one which is loaded as a part of the OS ...
1
vote
3answers
83 views

How to reliably backup to cloud services without hampering security?

There is a huge number of articles advising to enable two-factor authentication on sensitive cloud services. I understand the benefits for my accounts' security, but doesn't it defeat the purpose of ...
2
votes
0answers
567 views

MyQNAP Cloud security [closed]

I recently set up my new QNAP NAS, and have been accessing it through OpenVPN running on my Raspberry Pi through my home network. For convenience, I decided to test out MyQNAPCloud, which puts it ...
1
vote
0answers
154 views

How do I reduce the vulnerability of the OpenStack SSH key generation process? [closed]

I found two places that describe OpenStack SSH keys, but nothing seems to say whether or not they're generated on VMs. Generating these on the VMs could lead to problems, since VM images are often ...
4
votes
1answer
116 views

Security monitoring in the cloud?

I am working for a company which works with PHI, HIPAA, PCI and other highest sensitivity data. Their current security architecture uses hardware network monitoring tools to monitor the network ...
0
votes
2answers
728 views

Personal Cloud Storage vs. File Sharing Services

In terms of maintaining Confidentiality, Integrity, and Availability, what are the risks and benefits associated with setting up a personal cloud storage device on your home network versus using a ...
1
vote
0answers
59 views

How to know and disallow corporative Google Apps users to access third party apps with their corporative Google Apps accounts?

How can a security administrator of Google Apps for an organization that has linked @organization.com accounts to Google Apps to know and disallow that users use their users@organization.com accounts ...
1
vote
0answers
22 views

Is a business associates contract required to use hosted R&D services? [closed]

I'm on the "configuration management" team which, among other things, means I'm responsible for R&D systems, like: source control, issue tracking, team collaboration (wiki), etc. These are not ...
0
votes
1answer
55 views

Sophos Safeguard detecting content of zip files being uploaded

Is it possible to use Sophos safeguard to detect when computers in the network upload certain files online when they are compressed in a zip file? (or 7z or similar). I've seen it is possible with ...
2
votes
1answer
1k views

Should I trust Grive2?

I am trying to run Google Drive on LUbuntu 64 bit, but since there isn't an official version yet, I was thinking to follow this tutorial. Since it's not an official software from Google, I am ...
1
vote
2answers
124 views

How do personal/private cloud products work?

On amazon.com I found some personal cloud NAS products and was wondering how some of them work. In this article the author discusses the My Cloud app and how it can be used from any internet ...
1
vote
2answers
855 views

OpenVPN and running other services on same server

What security implications should I know about/look for when running OpenVPN on the same server as my network cloud controller and apt-cache-ng? I plan on using the same server to run apt-cacher-ng ...
9
votes
1answer
918 views

Benefits of cloud based full disk encryption

Microsoft announced in May that it supported full disk encryption for VMs. They have recently merged a github branch into the Azure Powershell tools to enable this. The basic theory is that you store ...
2
votes
3answers
260 views

Does ISO 27001 allow cloud based Spam/Malware filter solutions

We are currently switching over to Exchange 2013 and we are thinking about outsourcing the spam and malware filtering to Microsofts Exchange Online Protection. Its implemented by changing the MX ...
3
votes
1answer
834 views

How do Cloud Encryption Gateways and CASB work?

Cloud Encryption Gateways (CEG) and Cloud Access Security Brokers(CASB) are becoming popular to ensure the security and confidentiality of the data leaving to Cloud Service Providers. How do they ...
2
votes
0answers
62 views

What are the security implications when dealing with cloud on boarding services like Migrationwiz or Skykick?

There is a large push these days to move Email and communication to the cloud. Such as Google Apps, Office 365 or Hosted Exchange. Many company's hire partners to assist with these moves. Most ...
3
votes
2answers
634 views

Reverse proxy or Public load balancer?

What would be the difference between putting in a load balancer or reverse proxy on the perimeter to send requests back to a system in our LAN? We don't want to have people NAT directly into the LAN, ...
3
votes
1answer
166 views

What is “Intentionally misleading Artificial Intelligence to create a misleading outcome” called?

I'm writing about a computer system that relies on Artificial Intelligence and the threats that this may include. One threat vector (for example) is to seed Bayesian AI with content to skew the ...
-1
votes
2answers
137 views

Secure protocol for a backup server? [closed]

I want to make a back up system in my home, but I don't know I should use a FTP server or a TPC-based cloud server or a SSH-based server. Which method is best in security? I just want to upload and ...
5
votes
2answers
329 views

Can we determine how securely files are stored on a cloud storage service?

After asking two questions about the security of online cloud storage, it seems to me that we can only at best speculate as to the security practices of the hosting company, and believe what they tell ...
2
votes
2answers
705 views

Physical protection of your servers?

Here is a scenario. You are a small startup company that makes a video game. In your video game, you can exchange money for items. You are not dealing with the credit card/debit card directly but ...
3
votes
2answers
552 views

How can a seamless cloud storage service be Zero-knowledge?

Cloud based storage services like Dropbox and Google Drive are a cause for concern when it comes to privacy. They store encryption keys for your files on their servers. Therefore, anyone who manage to ...
2
votes
0answers
641 views

Does Sookasa really make Dropbox more secure? [closed]

Sookasa is a service that integrates with Dropbox and claims to make your files more secure by seamlessly encrypting them. In their article Is Dropbox secure? 3 weaknesses you should know about, ...
5
votes
2answers
924 views

Should I password protect all my archives from cloud?

I am a student and I didn't care a lot about my passwords strength and my files until now. Now I am thinking about having a backup for all my files in cloud. Questions: Should I password protect all ...
0
votes
1answer
205 views

Securing communication over LAN in VPS provider [duplicate]

I'm curious about best practice when connecting from app to DB in a cloud provider. A quick rundown of our setup. We have 4 servers all on the same provider, in the same region running as VPS. Ngnix ...