Loading...

Messages

Proposals

Stuck in your homework and missing deadline? Get urgent help in $10/Page with 24 hours deadline

Get Urgent Writing Help In Your Essays, Assignments, Homeworks, Dissertation, Thesis Or Coursework & Achieve A+ Grades.

Privacy Guaranteed - 100% Plagiarism Free Writing - Free Turnitin Report - Professional And Experienced Writers - 24/7 Online Support

Wifi under attack mcafee hacker intercepting traffic

25/10/2021 Client: muhammad11 Deadline: 2 Day

Cloud Computing

Chapter 9

Securing the Cloud

Learning Objectives

List the security advantages of using a cloud-based provider.

List the security disadvantages of using a cloud-based provider.

Describe common security threats to cloud-based environments.

Physical Security

IT data centers have been secured physically to prevent users who do not have a need to physically touch computers, servers, and storage devices from doing so.

A general security rule is that if an individual can physically touch a device, the individual can more easily break into the device.

Advantages of Cloud Providers with Respect to Security

Immediate deployment of software patches

Extended human-relations reach

Hardware and software redundancy

Timeliness of incident response

Specialists instead of personnel

Disadvantages of Cloud-Based Security

Country or jurisdiction issues

Multitenant risks

Malicious insiders

Vendor lock in

Risk of the cloud-based provider failing

Real World: McAfee Security as a Service

McAfee now offers a range of security solutions that deploy from the cloud. The solutions protect e-mail (spam, phishing, redirection, and virus elimination), websites, desktop computers, mobile devices, and more.

Data Storage Wiping

Within a cloud-based disk storage facility, file wiping overwrites a file’s previous contents when the file is deleted.

Denial of Service Attacks

A denial-of-service attack is a hacker attack on a site, the goal of which is to consume system resources so that the resources cannot be used by the site’s users.

The motivation for and the implementation of denial-of-service attacks differ.

Simple Denial of Service

:Loop

ping SomeSite.com

GOTO Loop

While responding to the ping message, the server can handle fewer other requests.

Distributed Denial of Service (DDOS) Attack

A distributed denial-of-service (DDoS) attack uses multiple computers distributed across the Internet to attack a target site

Packet Sniffing Attacks

Network applications communicate by exchanging network packets. Each computer within a wired network examines the message address to determine if the message is for an application it is running.

Packet Sniffing Continued

A hacker can write code that lets his system examine the content of each packet that travels past it.

Within a wireless network, hackers can simply monitor the airways to intercept packets.

The cloud, because it allows users to connect to applications from anywhere, increases potential risks. Users may connect from an insecure network or a network in which the wireless traffic is being monitored.

The best defense against a packet sniffing attack is to use secure (encrypted) connections.

Man-in-the Middle Attack

Within a man-in-the-middle attack, a hacker intercepts the messages a user and system are exchanging. The hacker can view and/or change the message contents.

Monitoring Device Screens

Years ago, when employees accessed sensitive or confidential data only from within their office, the data was better physically protected from prying eyes.

The cloud, however, extends the delivery of such data to users who are any place, at any time, and often to any device.

The net result is that within a busy coffee shop or an airport, strangers can see data ranging from human-relations information or customer sales data to student grades, and more.

Malicious Employees

Companies spend considerable amounts of money trying to protect their data and communications from hackers.

IT staffs deploy firewalls, use encryption, monitor network traffic for intrusion, and much more. With all of these security features in place, the most difficult challenge for a company to defend itself against is a malicious employee.

Malicious Employees Continued

Developers, for example, have access to databases, and IT staff members have access to various system passwords, which means that each may have access to human-relations data, payroll data, e-mail content, and so on.

By shifting data to the cloud, you move sensitive data away from your own employees.

Hypervisor Attack

When you virtualize a server, each server operating system runs on top of special virtualization software called the hypervisor.

Hypervisor developers such as VMware and Microsoft constantly focus on ways to lock down and secure the hypervisor to reduce risks.

The hypervisor will remain an attractive hacker target as companies continue to virtualize solutions.

Hypervisor Attack Continued

Hackers refer to the process of taking over the hypervisor as a hyperjacking attack.

To reduce the chance of a hypervisor being taken over by malicious code the underlying hardware may assign a state value, like a cyclic redundancy check (CRC), to the hypervisor. If this value changes, the hardware can detect that the hypervisor has been attacked or replaced.

Guest Hopping Attack

Hackers refer to an attack from one guest operating system to another as a guest hopping attack.

Real World: Cloud Security Alliance

The Cloud Security Alliance is a not-for-profit organization, the goal of which is to promote education of cloud security issues.

The Cloud Security Alliance consists of a large coalition of cloud practitioners, companies, associations, and other cloud stakeholders.

SQL Injection Attack

Many web applications present forms that users must complete by filling in fields and then submitting the form contents for processing.

The application that receives the form data often stores the data within an SQL database.

SQL Injection Attack Continued

An SQL-injection attack occurs when a malicious user inserts one or more SQL queries within one or more of the fields. For example, rather than simply typing in his or her last name, the hacker might type the following:

Smith; DROP DATABASE EMPLOYEES;

Depending on how the database uses the user input, the processing may result in the execution of the injected SQL, which in this case would delete the database of the company’s employees.

SQL Injection Attack Continued

Many cloud-based software as a service (SaaS) solutions are multitenant applications, which means different customers may share underlying resources such as a database.

If the SaaS application falls victim to SQL injection, it might be possible for a user in one company to view, change, or destroy the data of another company.

Real World: ENISA

The European Network and Information Security Agency (ENISA), based in Greece, promotes cybersecurity best practices. Within the ENISA website, you will find a broad range of papers and reports on a variety of security topics.

Improving Physical Security through Colocation

By using colocated, replicated hardware and software, cloud solution providers reduce many threats to IT resources.

Key Terms

Chapter Review

List the security advantages of cloud-based solutions.

List the security disadvantages of cloud-based solutions.

Define and discuss the data wiping process.

Discuss how a cloud-based solution provider may reduce the risk of a DDoS attack.

Define and discuss hyperjacking attacks.

Define and discuss guest-hopping attacks.

Homework is Completed By:

Writer Writer Name Amount Client Comments & Rating
Instant Homework Helper

ONLINE

Instant Homework Helper

$36

She helped me in last minute in a very reasonable price. She is a lifesaver, I got A+ grade in my homework, I will surely hire her again for my next assignments, Thumbs Up!

Order & Get This Solution Within 3 Hours in $25/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 3 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 6 Hours in $20/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 6 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 12 Hours in $15/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 12 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

6 writers have sent their proposals to do this homework:

Assignment Helper
Math Exam Success
Essay & Assignment Help
Top Rated Expert
Quick Mentor
Homework Tutor
Writer Writer Name Offer Chat
Assignment Helper

ONLINE

Assignment Helper

This project is my strength and I can fulfill your requirements properly within your given deadline. I always give plagiarism-free work to my clients at very competitive prices.

$30 Chat With Writer
Math Exam Success

ONLINE

Math Exam Success

I have read your project description carefully and you will get plagiarism free writing according to your requirements. Thank You

$47 Chat With Writer
Essay & Assignment Help

ONLINE

Essay & Assignment Help

I am an experienced researcher here with master education. After reading your posting, I feel, you need an expert research writer to complete your project.Thank You

$24 Chat With Writer
Top Rated Expert

ONLINE

Top Rated Expert

I am an elite class writer with more than 6 years of experience as an academic writer. I will provide you the 100 percent original and plagiarism-free content.

$32 Chat With Writer
Quick Mentor

ONLINE

Quick Mentor

I will be delighted to work on your project. As an experienced writer, I can provide you top quality, well researched, concise and error-free work within your provided deadline at very reasonable prices.

$19 Chat With Writer
Homework Tutor

ONLINE

Homework Tutor

As per my knowledge I can assist you in writing a perfect Planning, Marketing Research, Business Pitches, Business Proposals, Business Feasibility Reports and Content within your given deadline and budget.

$24 Chat With Writer

Let our expert academic writers to help you in achieving a+ grades in your homework, assignment, quiz or exam.

Similar Homework Questions

Cheek cell microscope lab answers - Lego systems inc fort worth tx - Coffee's for closers speech - Nerve impulse transmissions occurring along myelinated neurons are called - Jack n jill toothpaste priceline - Brisbane liquor distribution centre stapylton - Team contract example - Stearic acid cooling curve - Texecom premier odyssey 1e wiring diagram - Our lady of lourdes east kilbride bulletin - How to present appetizers attractively - Kellogg's executive summary - Rabbits and wolves simulation - Namaste india market las vegas nv - In praise of the new knighthood - Julie ruiz facebook - Strategic audit outline - Prepare a plan for digital evidence cases involving divorces - Yale cognition and development lab - Video store database - Answer below - Compare and contrast extinction with extirpation - Chemistry - Thermal expansion coefficient of ethanol - Inter CAST LOVe marriage +91-7023339183 problems solution MOLviji - Louth v diprose facts - Week 3 quiz information - How to conduct a jad session - Family therapy theories comparison chart - Bachelor of interior architecture unisa - Pelicula de cesar chavez - Crisis management - Gale force surfing case study - Fitness fanatics is a regional chain of health clubs - The traditionalistic subculture was brought to texas by - Assignment - Most significant change interview questions - 33kv potential transformer specifications - How to become a film director pdf - Event planning feasibility study sample - 619 cal young road hallsville tx - Ap biology 2018 free response answers - Dunkin donuts franchise income statement - Crime and punishment medieval - Homework Responses Wk 5 - Food and nutrition a level syllabus - A pair of star crossed lovers technique - Ee cummings poems leaf - Six dimentions of health - The body shop company profile - Aiphone gt ry manual - Cheating spouses in historic aztec tribes - What did eratosthenes accomplish - Pcssc top up card - What is a purpose statement in research - I am special god made me - Composition of potassium chlorate lab report answers - Purdue owl scavenger hunt - How to cite a 10k report apa - Fire code flammable liquid storage - Hamlin college of midwives - Pro engineer wildfire 5.0 windows 10 - Mentos and beer reaction - Accounts payable voucher system - Health-Focused Portfolio - Https www isidewith com polls - Weekly tax table 2019 - Dhl size 7 box - HW - American Government - Interest accrued on 6 month note payable - The necklace worksheets pdf - What is axial coding - Jewish poem they came for me - Shenton college year 10 subjects - 47 tuckett street kenmore hills - Refer to the circuit shown in fig 8.64 calculate - Scope of practice - Recorded services provided on account journal entry - Mcdonalds in russia case study - EC - Find the values of the six trigonometric functions of θ with the given constraint - Why doesn t cybersecurity have a naics code - Dad in sign language - Non oxidative deamination of amino acids - Should school uniforms be banned - Assignment on Cloud computing. - Vso subscription - A baseball weighs 5.13 oz what is the kinetic energy - Http teacher scholastic com tools class_setup - Words that rhyme with puberty - How many protons does titanium have - Hotels near turnip rock - Lies my teacher told me chapter 11 - India credit risk default model in r - Castle medical centre kenilworth - What is interactive media authoring - Baddie winkle flick of the wrist - Reciprocal worksheet with answers - Template for Annotated Bibliography