Security Issues in Cloud Computing

Cloud Computing

  • Cloud computing is a technology that provides remote services on the internet.
  • It allows managing, accessing, and storing data remotely, rather than on local servers or drives.
  • It is also known as server-less technology.
  • Data can be anything, like images, audio, video, documents, and files.

Need for Cloud Computing

  • Traditional IT companies used to store data in servers, requiring a separate server room.
  • The traditional server room needed a database server, mail server, firewalls, routers, modems, and high net speed devices.
  • Maintaining this infrastructure was costly.
  • Cloud computing emerged to reduce costs and solve problems associated with traditional methods; most companies are shifting to this technology.

Security Issues in Cloud Computing

  • Cloud computing offers various advantages, but also has security issues.

1. Data Loss

  • Data loss, also known as data leakage, is a significant concern.
  • Sensitive data is in the hands of a third party, relinquishing full control over the database.
  • If the cloud service's security is breached, hackers may access sensitive data or personal files.

2. Interference of Hackers and Insecure APIs

  • Cloud services rely on the internet, and APIs are a common way to communicate with the cloud.
  • Protecting interfaces and APIs used by external users is crucial.
  • Some cloud services are available in the public domain, making them vulnerable.
  • Hackers can exploit these services to hack or harm data.

3. User Account Hijacking

  • Account hijacking is a serious security issue.
  • If an account is hijacked, the hacker gains full authority to perform unauthorized activities.

4. Changing Service Provider (Vendor Lock-In)

  • Vendor lock-in is a significant security concern.
  • Organizations may face problems when shifting from one vendor to another.
    • Example: Shifting from AWS to Google Cloud Services involves challenges like data migration.
  • Different cloud services have different techniques and functions.
  • Pricing differences between cloud services can also be a concern.

5. Lack of Skill

  • Problems arise in IT companies that lack skilled employees.
  • These challenges occur while working, shifting to another service provider, or needing an extra feature.
  • Skilled personnel are required to effectively work with cloud computing.

6. Denial of Service (DoS) Attack

  • A DoS attack occurs when a system receives excessive traffic.
  • These attacks commonly target large organizations, such as those in banking and government sectors.
  • Data is lost during a DoS attack.
  • Data recovery requires significant time and money.

7. Shared Resources

  • Cloud computing relies on shared infrastructure.
  • If one customer's data is compromised it can affect other customers.
  • This can cause a breach of confidentiality or integrity.

8. Compliance and Legal Issues

  • Different industries and regions have their own regulatory requirements for data handling and storage.
  • Ensuring compliance can be difficult when data is stored in a cloud that spans across multiple regions.

9. Data Encryption

  • Data in transit is often encrypted, but data at rest is often susceptible to breaches.
  • Data stored in the cloud should be properly encrypted to prevent unauthorized access.

10. Insider Threats

  • Employees or service providers with access to cloud systems may misuse their access privileges.
  • This can result in data breaches whether it’s intentional or accidental.
  • Proper access controls and monitoring are key to preventing these threats.

11. Data Location and Sovereignty

  • Knowing where your data physically resides is important for security and compliance.
  • Some cloud providers store data in multiple locations globally which can raise concerns about data sovereignty and who has access to it.

12. Loss of Control

  • When using a cloud service, you are entrusting your data and applications to a third party.
  • This can lead to concerns about data ownership, access, and availability.

13. Incident Response and Forensics

  • Investigating security incidents in the cloud is very complex due to its distributed and shared nature.
  • Understanding what happened and who’s responsible can be difficult.

14. Data Backup and Recovery

  • Relying on cloud providers for data backup and recovery can be very risky.
  • It’s important to have a backup strategy in place to ensure data availability in case of data loss.

15. Vendor Security Practices

  • The security practices of cloud service providers vary.
  • It’s important to check the security measures of the provider to make sure they meet the company’s requirements.

16. IoT Devices and Edge Computing

  • More IoT Devices connected increase the attack surface.
  • These devices often have limited security controls and can be targeted to gain access to cloud resources.

17. Social Engineering and Phishing

  • Attackers may use social engineering tactics to trick users into giving sensitive information or access.

18. Security Monitoring

  • Without great monitoring and alerting systems in place, responding to security incidents in a timely manner is more challenging.