Loading...

Messages

Proposals

Stuck in your homework and missing deadline? Get urgent help in $10/Page with 24 hours deadline

Get Urgent Writing Help In Your Essays, Assignments, Homeworks, Dissertation, Thesis Or Coursework & Achieve A+ Grades.

Privacy Guaranteed - 100% Plagiarism Free Writing - Free Turnitin Report - Professional And Experienced Writers - 24/7 Online Support

Wifi under attack mcafee hacker intercepting traffic

25/10/2021 Client: muhammad11 Deadline: 2 Day

Cloud Computing

Chapter 9

Securing the Cloud

Learning Objectives

List the security advantages of using a cloud-based provider.

List the security disadvantages of using a cloud-based provider.

Describe common security threats to cloud-based environments.

Physical Security

IT data centers have been secured physically to prevent users who do not have a need to physically touch computers, servers, and storage devices from doing so.

A general security rule is that if an individual can physically touch a device, the individual can more easily break into the device.

Advantages of Cloud Providers with Respect to Security

Immediate deployment of software patches

Extended human-relations reach

Hardware and software redundancy

Timeliness of incident response

Specialists instead of personnel

Disadvantages of Cloud-Based Security

Country or jurisdiction issues

Multitenant risks

Malicious insiders

Vendor lock in

Risk of the cloud-based provider failing

Real World: McAfee Security as a Service

McAfee now offers a range of security solutions that deploy from the cloud. The solutions protect e-mail (spam, phishing, redirection, and virus elimination), websites, desktop computers, mobile devices, and more.

Data Storage Wiping

Within a cloud-based disk storage facility, file wiping overwrites a file’s previous contents when the file is deleted.

Denial of Service Attacks

A denial-of-service attack is a hacker attack on a site, the goal of which is to consume system resources so that the resources cannot be used by the site’s users.

The motivation for and the implementation of denial-of-service attacks differ.

Simple Denial of Service

:Loop

ping SomeSite.com

GOTO Loop

While responding to the ping message, the server can handle fewer other requests.

Distributed Denial of Service (DDOS) Attack

A distributed denial-of-service (DDoS) attack uses multiple computers distributed across the Internet to attack a target site

Packet Sniffing Attacks

Network applications communicate by exchanging network packets. Each computer within a wired network examines the message address to determine if the message is for an application it is running.

Packet Sniffing Continued

A hacker can write code that lets his system examine the content of each packet that travels past it.

Within a wireless network, hackers can simply monitor the airways to intercept packets.

The cloud, because it allows users to connect to applications from anywhere, increases potential risks. Users may connect from an insecure network or a network in which the wireless traffic is being monitored.

The best defense against a packet sniffing attack is to use secure (encrypted) connections.

Man-in-the Middle Attack

Within a man-in-the-middle attack, a hacker intercepts the messages a user and system are exchanging. The hacker can view and/or change the message contents.

Monitoring Device Screens

Years ago, when employees accessed sensitive or confidential data only from within their office, the data was better physically protected from prying eyes.

The cloud, however, extends the delivery of such data to users who are any place, at any time, and often to any device.

The net result is that within a busy coffee shop or an airport, strangers can see data ranging from human-relations information or customer sales data to student grades, and more.

Malicious Employees

Companies spend considerable amounts of money trying to protect their data and communications from hackers.

IT staffs deploy firewalls, use encryption, monitor network traffic for intrusion, and much more. With all of these security features in place, the most difficult challenge for a company to defend itself against is a malicious employee.

Malicious Employees Continued

Developers, for example, have access to databases, and IT staff members have access to various system passwords, which means that each may have access to human-relations data, payroll data, e-mail content, and so on.

By shifting data to the cloud, you move sensitive data away from your own employees.

Hypervisor Attack

When you virtualize a server, each server operating system runs on top of special virtualization software called the hypervisor.

Hypervisor developers such as VMware and Microsoft constantly focus on ways to lock down and secure the hypervisor to reduce risks.

The hypervisor will remain an attractive hacker target as companies continue to virtualize solutions.

Hypervisor Attack Continued

Hackers refer to the process of taking over the hypervisor as a hyperjacking attack.

To reduce the chance of a hypervisor being taken over by malicious code the underlying hardware may assign a state value, like a cyclic redundancy check (CRC), to the hypervisor. If this value changes, the hardware can detect that the hypervisor has been attacked or replaced.

Guest Hopping Attack

Hackers refer to an attack from one guest operating system to another as a guest hopping attack.

Real World: Cloud Security Alliance

The Cloud Security Alliance is a not-for-profit organization, the goal of which is to promote education of cloud security issues.

The Cloud Security Alliance consists of a large coalition of cloud practitioners, companies, associations, and other cloud stakeholders.

SQL Injection Attack

Many web applications present forms that users must complete by filling in fields and then submitting the form contents for processing.

The application that receives the form data often stores the data within an SQL database.

SQL Injection Attack Continued

An SQL-injection attack occurs when a malicious user inserts one or more SQL queries within one or more of the fields. For example, rather than simply typing in his or her last name, the hacker might type the following:

Smith; DROP DATABASE EMPLOYEES;

Depending on how the database uses the user input, the processing may result in the execution of the injected SQL, which in this case would delete the database of the company’s employees.

SQL Injection Attack Continued

Many cloud-based software as a service (SaaS) solutions are multitenant applications, which means different customers may share underlying resources such as a database.

If the SaaS application falls victim to SQL injection, it might be possible for a user in one company to view, change, or destroy the data of another company.

Real World: ENISA

The European Network and Information Security Agency (ENISA), based in Greece, promotes cybersecurity best practices. Within the ENISA website, you will find a broad range of papers and reports on a variety of security topics.

Improving Physical Security through Colocation

By using colocated, replicated hardware and software, cloud solution providers reduce many threats to IT resources.

Key Terms

Chapter Review

List the security advantages of cloud-based solutions.

List the security disadvantages of cloud-based solutions.

Define and discuss the data wiping process.

Discuss how a cloud-based solution provider may reduce the risk of a DDoS attack.

Define and discuss hyperjacking attacks.

Define and discuss guest-hopping attacks.

Homework is Completed By:

Writer Writer Name Amount Client Comments & Rating
Instant Homework Helper

ONLINE

Instant Homework Helper

$36

She helped me in last minute in a very reasonable price. She is a lifesaver, I got A+ grade in my homework, I will surely hire her again for my next assignments, Thumbs Up!

Order & Get This Solution Within 3 Hours in $25/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 3 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 6 Hours in $20/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 6 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 12 Hours in $15/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 12 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

6 writers have sent their proposals to do this homework:

Assignment Helper
Math Exam Success
Essay & Assignment Help
Top Rated Expert
Quick Mentor
Homework Tutor
Writer Writer Name Offer Chat
Assignment Helper

ONLINE

Assignment Helper

This project is my strength and I can fulfill your requirements properly within your given deadline. I always give plagiarism-free work to my clients at very competitive prices.

$30 Chat With Writer
Math Exam Success

ONLINE

Math Exam Success

I have read your project description carefully and you will get plagiarism free writing according to your requirements. Thank You

$47 Chat With Writer
Essay & Assignment Help

ONLINE

Essay & Assignment Help

I am an experienced researcher here with master education. After reading your posting, I feel, you need an expert research writer to complete your project.Thank You

$24 Chat With Writer
Top Rated Expert

ONLINE

Top Rated Expert

I am an elite class writer with more than 6 years of experience as an academic writer. I will provide you the 100 percent original and plagiarism-free content.

$32 Chat With Writer
Quick Mentor

ONLINE

Quick Mentor

I will be delighted to work on your project. As an experienced writer, I can provide you top quality, well researched, concise and error-free work within your provided deadline at very reasonable prices.

$19 Chat With Writer
Homework Tutor

ONLINE

Homework Tutor

As per my knowledge I can assist you in writing a perfect Planning, Marketing Research, Business Pitches, Business Proposals, Business Feasibility Reports and Content within your given deadline and budget.

$24 Chat With Writer

Let our expert academic writers to help you in achieving a+ grades in your homework, assignment, quiz or exam.

Similar Homework Questions

Uber and the sharing economy case study solution - Gino's restaurant is a popular restaurant in boston massachusetts - Entertainment speech examples pdf - Stealing carol ann duffy poem - IA 7 - Taylor distributors of indiana fort wayne - Can you grow vanilla in australia - What are the elements of music - The gatekeeper a case study in the selection of news - Leader vs follower essay - Smoke signals pontiac magazine - Indicate which person made each statement based on the fotonovela video. - How does risk response impact change control management and vulnerability management? - Much ado about nothing study guide questions and answers pdf - Wrd 204: writing exercise 5 - Homework Assignment #7 - Sounds incorporated william tell overture - Case Study Assignments Required - 2 Copies. Urgent, A+, original Work - Need in 12 Hours Max - Ciliospinal centre of budge - Final disc 1 - When total utility reaches a maximum then marginal utility is - A frequency polygon is graphed using - Ethernet wire color order - Grass singular or plural - I was raised by a toothless bearded hag crossword - OE W 5 D - Stopping outshopping - Business law textbook answers - Partial year depreciation double declining balance - +91-8306951337 kala jadu specialist astrologer IN Patiala - Australian government cloud policy - Printing at monash university - Empress luxury lines case study - Advanced level accounting syllabus - Examples of exemplars in forensic science - What is harley davidson mission statement - Soc 110 week 5 team proposal - Recommendation in report writing - Journal: Identifying an Organizational Problem - Corporate Ethics Portfolio - Crockpots at target - Goldfeld-quandt test in r - Examples of literary devices - Multiplexers and decoders - Developing python app - Exitus in dubio est - Foreshadowing in and then there were none - Mcdougall rose decorators supplies - Woolworths credit card offer - Chapter 18 test form a the great depression begins - Sample letter for procurement of materials - Two plus two equals five 1984 quote - With the recent explosion of information technologies - Discussion - OL - Role of IT in BI - University of adelaide referencing - What are three risks and threats of the user domain - Triangle similarity aa sss sas - Sizzling starts for persuasive writing - Phet colorado energy skate park - Pdp goal examples for teachers - 7 year building warranty - Brutal truth antiperspirant review - Australian standards tiling floors - Union carbide bhopal disaster case study - Ramesh babu barber net worth - Lumière supporting a virtual workspace on the cloud - Internal Assessment Survey 04 - What is the theme observed in the literary works - Business - Dolce hayes mansion bed bugs - Outline the major benefit and cost categories of the public transport subsidy - Apn professional development plan paper - Sphg92032bk1 - Why does oedipus decide to let creon go - Discussion 1 - Edward de bono net worth - Analysing the Accounting Information - Stainless steel cladding thickness - Briony kells dentist - HRM 652 EVALUATING RESULTS AND BENEFITS - Medical law ethics & bioethics for the health professions pdf - Corrugated flute take up factors - Fish tank finding nemo characters - Direct line pet claim form - Knight company reports the following costs and expenses in may - Book jacket book report - Scg cement price in myanmar - Single Point Essay - Ezy group trading toombul - Week-4 - Efficient financial markets fluctuate continuously because - Bond order in h2 - Giuseppe penone's cedre de versailles reveals - The master/slave configuration is a symmetric multiprocessing system. - Access chapter 6 grader project - Internal structure of monocot leaf - What is the basic building block of society - Mountbatten institute new york - Winterbottom v wright 1842 - Glasgow kelvin college student accommodation