Cybersecurity in the AWS Cloud

Michael Soltys

DOI: https://doi.org/10.48550/arXiv.2003.12905

2020-03-28

Cryptography and Security

Abstract:This paper re-examines the content of a standard advanced course in Cybersecurity from the perspective of Cloud Computing. More precisely, we review the core concepts of Cybersecurity, as presented in a senior undergraduate or graduate class, in light of the Amazon Web Services (AWS) cloud.

What problem does this paper attempt to address?

Cloudifying the Curriculum with AWS

Michael Soltys

DOI: https://doi.org/10.1109/fie49875.2021.9637242

2021-10-13

Abstract:This is an Innovate Practice Full Paper. The Cloud has become a principal paradigm of computing in the last ten years, and Computer Science curricula must be updated to reflect that reality. This paper examines simple ways to accomplish curriculum cloudification using Amazon Web Services (AWS), for Computer Science and other disciplines such as Business, Communication and Mathematics.
Cloud Security and Security Challenges Revisited

Fabian Süß,Marco Freimuth,Andreas Aßmuth,George R. S. Weir,Bob Duncan

2024-05-19

Abstract:In recent years, Cloud Computing has transformed local businesses and created new business models on the Internet- and Cloud services are still flourishing. But after the emphatic hype in the early years, a more realistic perception of Cloud services has emerged. One reason for this surely is that today, Cloud Computing is considered as an established and well-accepted technology and no longer as a technical novelty. But the second reason for this assessment might also be numerous security issues that Cloud Computing in general or specific Cloud services have experienced since then. In this paper, we revisit attacks on Cloud services and Cloud-related attack vectors that have been published in recent years. We then consider successful or proposed solutions to cope with these challenges. Based on these findings, we apply a security metric in order to rank all these Cloud-related security challenges concerning their severity. This should assist security professionals to prioritize their efforts toward addressing these issues.

Cryptography and Security,Distributed, Parallel, and Cluster Computing
Thunder CTF: Learning Cloud Security on a Dime

Nicholas Springer,Wu-chang Feng

DOI: https://doi.org/10.48550/arXiv.2107.12566

2021-07-27

Abstract:Organizations have rapidly shifted infrastructure and applications over to public cloud computing services such as AWS (Amazon Web Services), Google Cloud Platform, and Azure. Unfortunately, such services have security models that are substantially different and more complex than traditional enterprise security models. As a result, misconfiguration errors in cloud deployments have led to dozens of well-publicized breaches. This paper describes Thunder CTF, a scaffolded, scenario-based CTF (Capture-the-Flag) for helping students learn about and practice cloud security skills. Thunder CTF is easily deployed at minimal cost and is highly extensible to allow for crowd-sourced development of new levels as security issues evolve in the cloud.

Cryptography and Security
Case Study of Cloud Computing Security Issues and confidentiality Challenges

DOI: https://doi.org/10.30534/ijeter/2022/051042022

2022-04-07

International Journal of Emerging Trends in Engineering Research

Abstract:Cloud computing is a term, which involves virtualization, distributed computing, networking, software and web services. A cloud consists of several elements such as clients, data center and distributed servers. It includes fault tolerance, high availability, scalability, flexibility, reduced overhead for users, reduced cost of ownership, on demand services etc.Cloud Computing offers better computing through improved utilization and reduced administration and infrastructure costs. Cloud Computing is the sum of Software as a Service (SaaS) and Utility Computing. Cloud Computing is still at its infant stage and a very new technology. Therefore, most of the users are not very confident to adopt it.The main issue that faced the cloud computing is “security”. In this paper, we try to find out what countermeasures best strengthen the confidentiality, integrity and availability (CIA) of the implementation of cloud computing within the DOD This will be done by analyzing threats and countermeasures within the context of the ten domains comprising the Certified Information System Security Professional (CISSP) Common Body of Knowledge (CBK). The ten domains include access control; telecommunications and network security; information security governance and risk management; application security; cryptography; security architecture and design; operations security; business continuity planning and disaster planning; legal regulations, compliance, and investigation; and physical security. The results will provide a comprehensive guide for any Department of DefenseDoD entity attempting to secure its cloud solution.
An Analysis on Security Issues and Research Challenges in Cloud Computing

Usman Aijaz,Mohammed Abubakar,Aditya Reddy,Abuzar .,Alok C Pujari

DOI: https://doi.org/10.46610/joscnds.2024.v01i01.005

2024-04-26

Abstract:Cloud computing has completely transformed how businesses handle, store, and process data and applications. However, using cloud services brings several security issues that need to be resolved to guarantee the availability, confidentiality, and integrity of critical data. This abstract overviews vital aspects of cloud computing security and highlights emerging trends and research directions. Essential challenges of cloud computing security include ensuring data privacy and confidentiality, maintaining data integrity and trustworthiness, and addressing compliance with regulatory requirements. Identity and access management (IAM) remains a critical area, focusing on enhancing authentication mechanisms and access controls to mitigate the risks of unauthorized access and insider threats. Additionally, active research areas include securing cloud orchestration and management platforms, resilience and availability of cloud services, and addressing the unique security considerations of cloud native technologies. Interdisciplinary collaboration between researchers, industry practitioners, and policymakers is essential to develop innovative security solutions and best practices for cloud computing environments. By addressing these challenges and advancing the state of the art in cloud security, organizations can leverage the benefits of cloud computing while mitigating associated risks and ensuring the protection of sensitive data and resources. In summary, this review paper provides a holistic understanding of cloud computing security, offering insights into current practices, challenges, and future directions for ensuring the confidentiality, integrity, and availability of cloud based systems and data.
Review of Cloud Computing Security

YU Neng-hai,HAO Zhuo,XU Jia-jia,ZHANG Wei-ming,ZHANG Chi

DOI: https://doi.org/10.3969/j.issn.0372-2112.2013.02.026

2013-01-01

Abstract:With the development of cloud computing in the academia and industry,it is inevitable that many security problems arise.This paper summarizes the security requirements of cloud computing,which not only cover the traditional security requirements like confidentiality,data integrity,access control and identity authentication,but also introduce new security requirements in the credibility,configuration and virtual machinery.We make conclusions about the security situations on two typical cloud computing products:Amazon Web Services and Windows Azure and elaborate two attack mechanisms against cloud computing:Denial of service attack and Side channel attack.Based on the security requirements and attacks against cloud computing,we systematically summarize the current security protection mechanisms and further make a comparison among them.
Emerging Security Challenges of Cloud Virtual Infrastructure

Amani S. Ibrahim,James Hamlyn-Harris,John Grundy

DOI: https://doi.org/10.48550/arXiv.1612.09059

2016-12-29

Abstract:The cloud computing model is rapidly transforming the IT landscape. Cloud computing is a new computing paradigm that delivers computing resources as a set of reliable and scalable internet-based services allowing customers to remotely run and manage these services. Infrastructure-as-a-service (IaaS) is one of the popular cloud computing services. IaaS allows customers to increase their computing resources on the fly without investing in new hardware. IaaS adapts virtualization to enable on-demand access to a pool of virtual computing resources. Although there are great benefits to be gained from cloud computing, cloud computing also enables new categories of threats to be introduced. These threats are a result of the cloud virtual infrastructure complexity created by the adoption of the virtualization technology. Breaching the security of any component in the cloud virtual infrastructure significantly impacts on the security of other components and consequently affects the overall system security. This paper explores the security problem of the cloud platform virtual infrastructure identifying the existing security threats and the complexities of this virtual infrastructure. The paper also discusses the existing security approaches to secure the cloud virtual infrastructure and their drawbacks. Finally, we propose and explore some key research challenges of implementing new virtualization-aware security solutions that can provide the pre-emptive protection for complex and ever- dynamic cloud virtual infrastructure.

Cryptography and Security,Distributed, Parallel, and Cluster Computing,Software Engineering
Strategic Implementation of AWS Security Services: A Focus on Best Practices, SSM and Secrets Manager

Balasubrahmanya Balakrishna

DOI: https://doi.org/10.47941/jts.1659

2024-02-05

Abstract:Purpose: As organizations increasingly migrate to the cloud, ensuring robust data security becomes paramount. This technical paper explores the purpose, methodology, findings, and unique contributions in cloud security, focusing on AWS Systems Manager (SSM) and Secrets Manager. The objective is to provide a comprehensive guide for engineers and architects seeking to enhance data security in their cloud environments. Methodology: The comparative study conducted involves analyzing the features, capabilities, and integration possibilities of AWS SSM and Secrets Manager. Real-world use cases, best practices, and security measures associated with these services are explored through a methodology that includes hands-on exploration, case studies, and a survey of existing literature to distill critical insights. Findings: The paper uncovers a rich landscape of security measures facilitated by AWS SSM and Secrets Manager. Findings highlight the strengths and limitations of each service, emphasizing the importance of their integration for a holistic security approach. Automated rotation of credentials, encryption options, IAM policies, and monitoring strategies emerge as critical findings, contributing to the overall understanding of secure cloud data management. Unique contributor to theory, policy, and practice: This work uniquely provides a detailed comparative analysis that empowers engineers and architects to make well-informed decisions. The paper offers insights into the nuances of AWS SSM and Secrets Manager, enabling professionals to tailor their security strategies based on specific use cases and requirements. The focus on real-world scenarios and identifying best practices make this contribution practical and applicable, serving as a valuable resource for those navigating the complex landscape of cloud security engineering and architecture.
Cybersecurity Issues and Practices in a Cloud Context: A Comparison Amongst Micro, Small and Medium Enterprises

Ruwan Nagahawatta,Sachithra Lokuge,Matthew Warren,Scott Salzman

DOI: https://doi.org/10.48550/arXiv.2111.05993

2021-11-10

Cryptography and Security

Abstract:The advancement and the proliferation of information systems among enterprises have given rise to understanding cybersecurity. Cybersecurity practices provide a set of techniques and procedures to protect the systems, networks, programs and data from attack, damage, or unauthorised access. Such cybersecurity practices vary and are applied differently to different types of enterprises. The purpose of this research is to compare the critical cybersecurity threats and practices in the cloud context among micro, small, and medium enterprises. By conducting a survey among 289 micro, small and medium-sized enterprises in Australia, this study highlights the significant differences in their cloud security practices. It also concludes that future studies that focus on cybersecurity issues and practices in the context of cloud computing should pay attention to these differences.
Cloud Security Architecture and Implementation - A practical approach

Max Farnga

DOI: https://doi.org/10.48550/arXiv.1808.03892

2018-08-12

Cryptography and Security

Abstract:While cloud computing provides lower Infrastructure cost, higher agility and faster delivery, it also presents higher operational and security risks for business critical assets, but a well-designed solution and security architecture will keep businesses safe during and after migrating their assets to the cloud. This paper has researched and identified best security practices and how to improve a security architecture in a cloud environment.
Cyberattacks and Security of Cloud Computing: A Complete Guideline

Muhammad Dawood,Shanshan Tu,Chuangbai Xiao,Hisham Alasmary,Muhammad Waqas,Sadaqat Ur Rehman

DOI: https://doi.org/10.3390/sym15111981

2023-10-27

Symmetry

Abstract:Cloud computing is an innovative technique that offers shared resources for stock cache and server management. Cloud computing saves time and monitoring costs for any organization and turns technological solutions for large-scale systems into server-to-service frameworks. However, just like any other technology, cloud computing opens up many forms of security threats and problems. In this work, we focus on discussing different cloud models and cloud services, respectively. Next, we discuss the security trends in the cloud models. Taking these security trends into account, we move to security problems, including data breaches, data confidentiality, data access controllability, authentication, inadequate diligence, phishing, key exposure, auditing, privacy preservability, and cloud-assisted IoT applications. We then propose security attacks and countermeasures specifically for the different cloud models based on the security trends and problems. In the end, we pinpoint some of the futuristic directions and implications relevant to the security of cloud models. The future directions will help researchers in academia and industry work toward cloud computing security.

multidisciplinary sciences
A review on security challenges and approaches in the cloud computing

Elham Mohammed Thabit A. Alsaadi,Sabah Mohammed Fayadh,Ashwak Alabaichi

DOI: https://doi.org/10.1063/5.0027460

2020-01-01

Abstract:Cloud Computing is a model based on computing system which provides convenient and customizable services to the users for accessing to different cloud applications. It provides a way for storing and accessing cloud data from anywhere via connecting the cloud application utilizing internet. The cloud computing and its related safety problems is one of widely discussed concerns in today generation's research field. While numerous cloud security investigations are previously widespread, there residues a definite distance in properly identifying these issues and find the appropriate solutions. Some studies discuss the problems of virtualization and approach the target, while others talk about access control mechanisms, but what's missing is a standard framework which simultaneously extends the concept of cloud security and describes its specific requirements. In addition, countermeasures given in a survey must clearly illustrate the problem it deals with. This analysis paper took all of these elements into consideration so that the necessary areas were properly connected and a number of open issues were discussed in this area. This paper also reviews the most significant security techniques to data protection and cloud security in the cloud computing. Moreover, security techniques for data protection will be recommended in order to have enhanced security in cloud computing. It will concentrate primarily on issues related to data security and provides solutions.
Security Analysis of Cloud Computing

Frederick R. Carlson

DOI: https://doi.org/10.48550/arXiv.1404.6849

2014-04-28

Abstract:This paper produces a baseline security analysis of the Cloud Computing Operational Environment in terms of threats, vulnerabilities and impacts. An analysis is conducted and the top three threats are identified with recommendations for practitioners. The conclusion of the analysis is that the most serious threats are non-technical and can be solved via management processes rather than technical countermeasures

Cryptography and Security
THE CONCEPT OF AUTOMATED COMPLIANCE VERIFICATION AS THE FOUNDATION OF A FUNDAMENTAL CLOUD SECURITY MODEL

Y. Matseniuk,A. Partyka

DOI: https://doi.org/10.23939/csn2024.01.108

2024-06-01

Computer systems and network

Abstract:The primary objective of this research is to develop an advanced automated method for configuring and managing public cloud accounts and subscriptions on prominent platforms such as AWS GCP and Azure. This method involves the application of standardized configurations to ensure optimal performance and security compliance. A significant component of this methodology is the intermittent scanning of the infrastructure of these cloud accounts and subscriptions. This scanning is meticulously designed to identify and address any deviations or non-compliance issues with globally recognized security standards including NIST 800-53 ISO 27001 HIPAA and PCIDSS. The approach leverages cutting-edge automation technologies to streamline the deployment and management of cloud resources. By automating the application of configurations the method aims to reduce manual effort minimize the likelihood of human error and enhance operational efficiency. This automation extends to the continuous monitoring and auditing processes enabling real-time detection of configuration drifts or security vulnerabilities. Furthermore the research delves into the development of a dynamic responsive system capable of adapting to the evolving requirements of cloud security. The automated scanning component plays a pivotal role in this aspect providing ongoing assurance that the cloud environments adhere to the strictest security protocols and standards. Continuous compliance monitoring is critical in today's ever-changing digital landscape where threats to data security and privacy are increasingly sophisticated. By integrating these automated processes the proposed method promises not only to bolster the security posture of cloud environments but also to offer a scalable efficient solution for cloud infrastructure management. This automated approach is poised to set a new standard in cloud management aligning with best practices in IT security and compliance and paving the way for more secure manageable and efficient cloud computing practices. Keywords: Hosting security standards automation cloud technologies cloud service models.
Security and Privacy in Cloud Computing: Technical Review

Yunusa Simpa Abdulsalam,Mustapha Hedabou

DOI: https://doi.org/10.3390/fi14010011

2021-12-27

Future Internet

Abstract:Advances in the usage of information and communication technologies (ICT) has given rise to the popularity and success of cloud computing. Cloud computing offers advantages and opportunities for business users to migrate and leverage the scalability of the pay-as-you-go price model. However, outsourcing information and business applications to the cloud or a third party raises security and privacy concerns, which have become critical in adopting cloud implementation and services. Researchers and affected organisations have proposed different security approaches in the literature to tackle the present security flaws. The literature also provides an extensive review of security and privacy issues in cloud computing. Unfortunately, the works provided in the literature lack the flexibility in mitigating multiple threats without conflicting with cloud security objectives. The literature has further focused on only highlighting security and privacy issues without providing adequate technical approaches to mitigate such security and privacy threats. Conversely, studies that offer technical solutions to security threats have failed to explain how such security threats exist. This paper aims to introduce security and privacy issues that demand an adaptive solution approach without conflicting with existing or future cloud security. This paper reviews different works in the literature, taking into account its adaptiveness in mitigating against future reoccurring threats and showing how cloud security conflicts have invalidated their proposed models. The article further presents the security threats surrounding cloud computing from a user perspective using the STRIDE approach. Additionally, it provides an analysis of different inefficient solutions in the literature and offers recommendations in terms of implementing a secure, adaptive cloud environment.
Security Challenges for the Public Cloud

Kui Ren,Cong Wang,Qian Wang

DOI: https://doi.org/10.1109/MIC.2012.14

IF: 2.68

2012-01-01

IEEE Internet Computing

Abstract:Cloud computing represents today's most exciting computing paradigm shift in information technology. However, security and privacy are perceived as primary obstacles to its wide adoption. Here, the authors outline several critical security challenges and motivate further investigation of security solutions for a trustworthy public cloud environment.
Review on security issues and solutions in cloud computing

Devanshi Ledwani,Himanshi Saini,Lalita Ledwani,Vaibhav Bhatnagar,Swami Nisha Bhagirath

DOI: https://doi.org/10.1080/09720529.2022.2133253

2022-12-10

Journal of Discrete Mathematical Sciences and Cryptography

Abstract:Cloud computing is the on-demand availability of a group of networked elements providing services, especially data storage and computing power, without actual management and addressing by the user. In lieu, the entire suite of hardware and software is managed by a provider and have functions dispersed over various location, each location being a data center. Since cloud computing users rely on sharing resources and may request multiple cloud services concurrently, a dynamic provision must be there so that all the resources are available to the user in a competent manner. However, despite abundantly available benefits, many organizations are still skeptical about using the cloud computing service model because of security concerns associated with the service. The paper also discusses different types of cloud security, controls of cloud security and algorithms used for emanating the privacy of the client's data. In this paper, a CNN and SVM model is also applied for detection Anti-Spoofing images for identification on images on cloud.
Considerations for Cloud Security Operations

James Cusick

DOI: https://doi.org/10.48550/arXiv.1601.06289

2016-01-23

Cryptography and Security

Abstract:Information Security in Cloud Computing environments is explored. Cloud Computing is presented, security needs are discussed, and mitigation approaches are listed. Topics covered include Information Security, Cloud Computing, Private Cloud, Public Cloud, SaaS, PaaS, IaaS, ISO 27001, OWASP, Secure SDLC.
A Comparative Analysis of Cloud Security Issues: Challenges, Solutions, and Future Directions

.Dr. Aakriti Sharma,,

DOI: https://doi.org/10.55041/ijsrem31596

2024-04-25

INTERANTIONAL JOURNAL OF SCIENTIFIC RESEARCH IN ENGINEERING AND MANAGEMENT

Abstract:Cloud computing has revolutionized the way businesses operate, offering unprecedented scalability, flexibility, and cost-efficiency. However, alongside its numerous benefits, cloud computing also presents significant security challenges. This research paper aims to provide a comprehensive comparison of cloud security issues, examining the common threats, vulnerabilities, and mitigation strategies across various cloud deployment models and service types. Through a systematic review of existing literature and case studies, this paper highlights the evolving landscape of cloud security, identifies key challenges, evaluates current solutions, and outlines future directions for research and practice in the field.

Cybersecurity in the AWS Cloud

Cloudifying the Curriculum with AWS

Cloud Security and Security Challenges Revisited

Thunder CTF: Learning Cloud Security on a Dime

Case Study of Cloud Computing Security Issues and confidentiality Challenges

An Analysis on Security Issues and Research Challenges in Cloud Computing

Review of Cloud Computing Security

Emerging Security Challenges of Cloud Virtual Infrastructure

Strategic Implementation of AWS Security Services: A Focus on Best Practices, SSM and Secrets Manager

Cybersecurity Issues and Practices in a Cloud Context: A Comparison Amongst Micro, Small and Medium Enterprises

Cloud Security Architecture and Implementation - A practical approach

Cyberattacks and Security of Cloud Computing: A Complete Guideline

A review on security challenges and approaches in the cloud computing

Security Analysis of Cloud Computing

THE CONCEPT OF AUTOMATED COMPLIANCE VERIFICATION AS THE FOUNDATION OF A FUNDAMENTAL CLOUD SECURITY MODEL

Security and Privacy in Cloud Computing: Technical Review

Security Challenges for the Public Cloud

Review on security issues and solutions in cloud computing

Considerations for Cloud Security Operations

A Comparative Analysis of Cloud Security Issues: Challenges, Solutions, and Future Directions