Question

1. Explain the common security threat concept in the cloud.

[Hint : chapter 9] Cloud Computing, Kris Jamsa, 2013, Johns & Bartlett Learning, ISBN: 978-1- 4496-4739-1

Answer 1

Cloud security is the protection of data stored online via cloud computing plateforms against theft,leakage and deletion.

The common security threats in cloud are following:

1. Data Storage Wiping: Cloud based data stroage provider may share a stroage device across multiple customers, and suppose you store a important file in the cloud, later you delete that file, but what happens that normally when file system delete a file on disk the file system marks the location within which the file resided as avilable for use to store other file. Assume that another person come along and allocate space on the disk, but doesnot write any information to the space, the customer may have access to your previously deleted confidential file.
2. Distributed Denial-of-Service Attacks: A distributed denial of serive attack uses multiple computers distributed across the internet to attack the target site. And the goal of which is to consume system resources so that the resources cannot be used by the site's user.
3. Packet Sniffing: Packet sniffing is a form of network attack that allows an attacker access to files and information. This is accomplished by turning off the filter that stops host machines connected to the network from seeing data traffic sent to other machines. This enables the attacker to view all data traffic over the network. This particular kind of attack can be implemented locally, on the server, or on a router that is connected to the network.
4. Man in the Middle Attacks: A man-in-the-middle attack is when an attacker intercepts communications between two parties either to secretly eavesdrop or modify traffic traveling between the two. Attackers might use MitM attacks to steal login credentials or personal information, spy on the victim, or sabotage communications or corrupt data. Because cloud based solutions rely on user communication across the internet the solutions are at risk for man in middle.