Information Security

Questions tagged [google-cloud-platform]

Ask Question

The tag has no usage guidance.

8 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
2
votes
1answer
56 views

Container Vulnerability Management

Having difficulty understanding how to translate 'traditional' vulnerability management to a cloud environment. Previously accustomed to using tools like OpenVAS and Nessus, setting up scans which ...
0
votes
0answers
15 views

Google Cloud Platform may have been compromised and used for cryptocurrency mining [duplicate]

How to detect where the issue on my server is, and whether the server is being used for cryptocurrency mining? I just received an email from Google and my server stopped working. Dear Developer, Our ...
0
votes
0answers
21 views

Is the purpose of Google Cloud VPC Service Controls to enforce the BLP star property (no write down)?

While Google and AWS support managed firewalls and network connectivity rules to prevent an attacker from entering the network, Google also offers VPC Service Controls. Is this to prevent data ...
1
vote
0answers
71 views

Keeping data confidential from the system administrator

Problem How do I ensure that I cannot access confidential data manually through the database? Practically speaking, this is a firestore database on google cloud, and I have access to the administrator ...
1
vote
0answers
144 views

My Firebase project has unknown users, has my google cloud service account been compromised?

My project is a flutter app, it is in Internal Testing only, I am the only user. I've been working on this project for about a month and all of a sudden today I keep getting unknown users registering. ...
0
votes
0answers
46 views

Implement IPS (Intrusion Prevention System) on Kubernetes

This a bit of a broad question, I know. Our security team at work gave us the task to implement an IPS (Intrusion Prevention System) for our infrastructure and no specs (surprise!). We have several ...
1
vote
1answer
123 views

Is it safe to make every resource public in a Google Cloud Storage bucket?

I'm developing a business web application for my client, in which he can upload images (e.g. floor plans, photos of object etc.) and documents of different objects (word, excel etc.). The images ...
1
vote
0answers
53 views

No way of restricting public access to Firestore/API

Just glancing at GCP offerings for storing data, I noticed that while using Firestore, the only control for restricting public access is via security rules. However, in case of mis-configuration of ...