Cloud Computing Security I

Summary

This video delves into the critical importance of cloud computing security, exploring the different security concerns associated with third-party service providers, such as confidentiality, integrity, and availability. It emphasizes the significant challenges organizations face due to threats like data breaches, unauthorized access, and various types of attacks, including denial of service (DoS) and data interception. The discussion extends to potential vulnerabilities, the necessity of implementing robust security policies and mechanisms, and the operational, human, and economic issues impacting security in cloud environments. Through a thoughtful examination of these aspects, the video offers a comprehensive overview of strategies to prevent, detect, and recover from security breaches, highlighting the need for effective network security measures and policy enforcement in the realm of cloud computing.

Highlights

• Understanding cloud computing security is key in today's tech environment. 🌥️
• The video covers the CIA triad - confidentiality, integrity, and availability. 🔒
• Security threats include data breaches, DoS attacks, and data interception. 🛡️
• Operational, human, and economic factors impact security measures. 💼
• Implementing strong network security policies is essential in cloud environments. 🖧

Key Takeaways

• Cloud security is crucial when relying on third-party service providers. 🔍
• Confidentiality, integrity, and availability are the pillars of cloud security, known as the CIA triad. 🛡️
• Threats like data breaches require robust policy and mechanisms. 📜
• Security attacks can be categorized into passive and active attacks. 🚨
• Cloud security includes prevention, detection, and recovery strategies to combat threats. 🔄

Overview

Cloud computing security is more important than ever as organizations shift towards relying on third-party service providers. This video explores the essential components of security within the cloud, emphasizing the CIA triad of confidentiality, integrity, and availability. Understanding these principles is vital to safeguarding data and ensuring system stability.

The transcript delves into various attack types encountered in cloud environments, such as denial of service (DoS) attacks, data interception, and fabrication threats. It underscores the importance of having stringent security policies in place to prevent unauthorized access and data breaches. These policies, along with mechanisms to enforce them, are foundational to maintaining robust security.

Moreover, the video discusses broader operational and organizational challenges affecting cloud security, highlighting the need for consistent and comprehensive policies across distributed systems. To combat threats effectively, it advocates for detailed vulnerability assessments, penetration testing, and post-attack evaluations, all crucial for a resilient cloud security framework.

Chapters

• 00:00 - 00:30: Introduction to Cloud Computing Security The chapter introduces the topic of cloud computing security, indicating a continuation from previous discussions on cloud computing. It hints at an exploration of major aspects related to cloud security, setting the stage for a detailed examination of this subject throughout the chapter.
• 00:30 - 01:00: Overview of Cloud Security Concerns This chapter provides a brief overview of security concerns in cloud computing. It discusses how security impacts different cloud service models, including infrastructure as a service (IaaS), platform as a service (PaaS), and software as a service (SaaS). The chapter emphasizes the reliance on third-party service providers when adopting cloud computing solutions.
• 01:00 - 01:30: Security Issues with Third-Party Providers The chapter discusses the security issues that arise when application data processes are handled by third-party providers. It highlights concerns regarding data availability, storage, and the potential for unauthorized access or interception by other parties. The chapter emphasizes the importance of security in mission-critical operations, including sensitive data types such as banking, defense, and academic information.
• 01:30 - 02:00: Mission Critical Data Concerns The chapter titled 'Mission Critical Data Concerns' discusses the importance of addressing data security concerns, specifically related to students' results and other sensitive information. The chapter highlights that moving to cloud technologies is often hindered by security concerns rather than technological limitations. It emphasizes the need for clear data policies and a serious approach to managing these issues.
• 02:00 - 02:30: Hindrance of Security in Cloud Adoption The chapter titled 'Hindrance of Security in Cloud Adoption' begins with an overview of the concept of security as it applies to computer, information, and network security. It highlights that similar aspects of security are also applicable to cloud computing, albeit with differing concerns. Before delving into the specifics of cloud security, the chapter aims to provide a general understanding of security in computing.
• 02:30 - 03:00: Basics of Security in Computing This chapter introduces the basics of security in computing, focusing on three fundamental components known as the CIA triad: Confidentiality, Integrity, and Availability. Confidentiality involves keeping data and resources hidden and secure, ensuring that unauthorized parties cannot access them. Integrity refers to maintaining the correctness and trustworthiness of data, ensuring that it has not been altered from its original form. Lastly, Availability ensures that data and resources are accessible to authorized users when needed. These components form the foundational principles of security in computing systems.
• 03:00 - 03:30: CIA Triad in Security The chapter discusses the CIA Triad in security, which comprises three main components: Confidentiality, Integrity, and Availability. The focus is on Integrity, where the importance of maintaining the unchanged state of data from sender to receiver is emphasized. Authentication of the source ensures the integrity of the information being received. Another critical aspect discussed is Availability, which is necessary for data and resources to be accessible when needed. It highlights that many cyber attacks target Availability through denial of service, affecting access to necessary data and resources.
• 03:30 - 04:00: Types of Security Attacks The chapter 'Types of Security Attacks' discusses the concept of Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks, implying situations where resources are unavailable. It highlights that any security attack can compromise the security of information by violating the CIA triad (Confidentiality, Integrity, Availability). The chapter promises further exploration of additional components related to security attacks.
• 04:00 - 04:30: Types of Security Threats This chapter discusses the various types of security threats, emphasizing four main types: interruption, interception, modification, and fabrication. These components broadly cover the different ways data can be compromised during an attack. It explains a basic model of a source sending data to a destination, setting the stage to explore how these threats manifest and affect data security.
• 04:30 - 05:00: Policy and Mechanisms for Security The chapter discusses various security risks associated with communication such as interception where a message or communication path is interrupted by an unauthorized party. This is termed as an attack on availability as it affects the availability of the message. Another risk discussed is an attack on confidentiality, where an unauthorized party listens in on a communication between two parties (e.g., from A to B or S to D). Finally, the chapter touches on the concept of modification attacks, where an intruder modifies the message being sent.
• 05:00 - 05:30: Policy Implementation Challenges The chapter discusses the challenges in policy implementation, focusing on issues related to data integrity. It describes a scenario where an intruder intercepts and alters a message being sent from source S to destination D. Despite the message alteration by the intruder, D perceives the message as being sent from S, illustrating a significant problem in maintaining the integrity of data during transmission.
• 05:30 - 06:00: Security Models and Goals This chapter discusses attacks on integrity and authenticity within security models. It explains how an attacker can pretend to be the original source of a message, comprising an attack on authenticity. The chapter emphasizes the importance of authenticating the source of a message before receiving it to ensure it comes from a legitimate and verified origin, thus preventing what is termed fabrication attacks.
• 06:00 - 06:30: Security Assurance and Operational Issues In this chapter titled 'Security Assurance and Operational Issues,' the discussion focuses on the critical components of security across various domains such as computer security, information security, network security, and cloud security. The chapter underscores that while the characteristics and manifestations of security threats may vary across these domains, they fundamentally face similar types of security issues and challenges. The emphasis is on understanding that the core problems remain constant despite the surface differences in security applications.
• 06:30 - 07:00: Types of Attacks: Passive and Active The chapter titled 'Types of Attacks: Passive and Active' discusses the concept of threats in the context of cybersecurity. It clarifies that threats do not equate to actual attacks, similar to how vulnerabilities do not necessarily mean a system is compromised. The chapter delves into different classes of threats, one of which is the 'threat of disclosure,' an example of an attack under this class is 'snooping.' This type of threat signifies unauthorized access to information, which can be considered a passive attack.
• 07:00 - 07:30: Security Services and Non-Repudiation The chapter titled 'Security Services and Non-Repudiation' explores various security threats, categorized mainly into deception, disruption, and usurpation. Deceptive threats involve issues like modifications, spoofing, and repudiation of origin and receipt, which can result in a lack of trust and data manipulation. Disruptive threats cover service modifications that can hinder the availability and reliability of processes. Usurpative threats, on the other hand, consist of unauthorized alterations, spoofing, and denial of services, which aim to undermine the integrity and the assurance of the security framework.
• 07:30 - 08:00: Network Security and Policies The chapter titled 'Network Security and Policies' discusses various threats and security concerns associated with IT and information systems. It emphasizes that these systems, whether personal, organizational, inter-organizational, or intra-organizational, are governed by specific policies and mechanisms. These policies dictate what is permitted and what is not, highlighting the importance of clear guidelines in maintaining security.
• 08:00 - 08:30: Implementing Security Policies The chapter 'Implementing Security Policies' discusses the function of security policies in determining what is allowed and what is not within a system. It suggests that policies can be hierarchical and structured in various ways, although it does not delve into specific methodologies. The focus is on defining the comprehensive security of site systems, encompassing information structure, network access protocols, and individual components.
• 08:30 - 09:00: Network Reconnaissance and Vulnerability The chapter discusses the concept of network reconnaissance and vulnerability, focusing on organizational policies. It explains how policies are typically formulated by a centralized body within an organization, taking into account all components. However, the implementation of these policies is usually distributed across different parts of the organization, using the example of the IIT Kharagpur network.
• 09:00 - 09:30: Penetration Testing and Post-Attack Investigation The chapter titled 'Penetration Testing and Post-Attack Investigation' discusses the complexity involved in implementing security policies across various network devices and sub-networks within an organization's IT infrastructure. It highlights the challenges of distributed policy implementation across different devices, emphasizing the need for comprehensive strategies in managing and securing network traffic. The presence of multiple layers and types of network switches (layer three and layer three plus) and the involvement of different departments and authorities, such as presidents, add additional layers of complexity to the process.
• 09:30 - 10:00: Security in Cloud Computing This chapter explores security in cloud computing, focusing on the alignment of implementation and policy. It discusses the challenges in ensuring that the implementation conforms to the defined policies, highlighting this as a significant research problem globally. The chapter also differentiates between policies, which define what is and isn't allowed, and mechanisms used to enforce these policies.

Cloud Computing Security I Transcription

• 00:00 - 00:30 hi so we will be continuing our discussion on cloud computing today we will be discussing on ah another major aspect of this ah cloud computing which is ah which we can say cloud
• 00:30 - 01:00 security so we will talk ah we will try to have a ah brief overview of of the security parts say and how this security affects ah cloud computing as as ah we all ah understand that ah when when we go for cloud computing whether it is the infrastructure as a service a platform as a service or software as a service or anything as a service what we are relying on a third party service provider
• 01:00 - 01:30 so our application data processes are running on some third party so whenever it is running on third party the security becomes a issue specially that what is the availability where my data is stored whether it is been seen or intercepted by my ah some other parties and those concerns will be ah there and specially if this is a mission critical ah operations or mission critical data or some critical data like banking data defense data even academic
• 01:30 - 02:00 data related to ah students results and other things this needs to be ah looked into in a in a various ah serious person we will see in the course of the things that one of the ah one of the major hindrance towards going towards this cloud is more than technology rather more this concern about security what will be the policies what data policy etcetera and so on and so forth so with this ah we will start our thing but before going to that
• 02:00 - 02:30 ah i thought that it will be quick ah brush up of what what do you mean by security in terms of when we talk about computer security or information security or network security so what are the different aspects are there ah it is likely that all those aspect in some form of other will be also reflected in the cloud but the concern may be different so before going to the cloud security part say we will see security in general for any computing
• 02:30 - 03:00 service computing and networking service ok so ah if we look at ah ah security what are the three basic ah components one is the confidentiality integrity and availability right this what we say cia components right confidentiality deals with keep keeping the data and resources hidden ah that you dont know that where the data is that it is confidential integrity is that ah data integrity is [mention/maintained] maintained like ah or origin or the source
• 03:00 - 03:30 integrity is mentioned may maintained right like so that whatever i sent from a to b b receives the same thing ah or ah that integrity or authentication of the source that i am getting from the itself it is there and availability in happening access to the data and resources there is another important component right so ah that is what we see that most of the attacks are going as ah denial of services where the availability is compromised so the
• 03:30 - 04:00 everything is fine but finally you dont have the resource at your hand so it is some sort of a dos or sometimes the ddos type of ah attacks so any security attack on the other say that any action that compromises the security of the information or any action which violates the cia ah type of things there is basic premise right there are lot of other components we will see so if we look at there are immediately it
• 04:00 - 04:30 will come up that there are typically four type of ah things maybe there one is inter interruption one is interception ah modification fabrication so this four components more or less encompasses or combination of this more or less ah or it encompasses all type of things which are ah which are compromised during a ah attack so our basic model is a source sending a data to a destination and when we talk a talk about ah interruptions so that
• 04:30 - 05:00 a the message or the communication path is interrupted it can be interception that the goes from source to destination but somebody else also ah intercept and listening to the thing so this is attack on availability this availability is block this is attack on confidentiality like you are sending from a to b or s to d and somebody else that intruder i is listening to that it can be attack on modification that
• 05:00 - 05:30 this attack on integrity of that data ah right so or even the origin right source is sending to d but in between there is a intruder i which intercept the message changes the message and send it to d so d for d it is a message coming from s and the message am has been changed to am dash but still the for d it is it is the message which is send which has been send or which has been forwarded by ah sources
• 05:30 - 06:00 so that is a attack on integrity so there can be attack on authenticity right i i pretend or intrude are pretend to be the sources right so on and so the it is attack on authenticity so i need to authenticate who who is my source so before receiving a message i need to know that i am supposed to receive from a authenticated source is and i am receiving those message so that is a ah attack on authenticity or what we say fabrication
• 06:00 - 06:30 now ah so one side we see that the major security components other side that the type of attacks which can be there what a and if you look at these are this can this is true for whether it is a computer security or a information security or network security or cloud security right they it may have different type of characteristics and manifestation nevertheless it has the same type of ah what we say same type of ah problems or same type of security issues realizes
• 06:30 - 07:00 now if you look at that what are the threats right so threats does not mean it is attacked right so its like vulnerability does not mean that it is compromised but these are the possible threats so classes of threats one is a threat of disclosure right so i have a threat of disclosure like what which is type of in the attack what we say ah snooping so a threat
• 07:00 - 07:30 of deception like modifications spoofing repudiation of origin denial of receipt and type of things so this is a threat of deception so there can be a threat of disruption that is if it is a modified in the threats of disruption service and an another is a threat of usurpation that is modification spoofing delay denial of services so these are these are differents
• 07:30 - 08:00 category of threats which are there so we have attacks which have security concerns and threats these are different components overall whenever a a a whenever a it systems or any information system whether it is organizational or it is personal or it is inter organization intra organization whatever there are guided by policies and mechanisms ok very ah tricky issues ah so policy says what is what is not allowed right
• 08:00 - 08:30 so the policy says that what is allowed what is that not allowed right so it is it tries to do it in a in in a fashion that which which which which of the things can be allowed and things there can be hierarchical to a way of defining policies there can be different way of things we are not going to that so this defines the security of the site systems overall ah information structure a overall network access protocol and individual to
• 08:30 - 09:00 group to distributed anything right so there is is policies usually in organizations policies are made somewhat centralized centralized in the sense it has been formulated across the for ah all all components of the organizations and it is something a sort of a policy making body does it now incidentally the implementation is most of the time distributed like i say that i have a i have this iit kharagpur network so
• 09:00 - 09:30 there are several departments there as a several sub networks there are several layer three plus layer three and layer three plus type of switches so it says they policy that this way the traffic will go and etcetera etcetera and not only that they are additionally there are also presidents etcetera at the same time ah this this policy need to be implemented across this different category of devices so the implementation is ah often in a distributed fashion or in different devices and type of things where the so now there is a big challenge
• 09:30 - 10:00 the how to guarantee this implementation conform to the policy one to one right it is nothing more or less what the policy defines so there is a these are some open ah not exactly open problem these are very strong research problem across the world that how to how to formally say that your implementation and policy match with each other and so forth now so policies says what is and what is not allowed where i on the other hand mechanisms
• 10:00 - 10:30 enforce policies right so i have mechanism to enforce policies so composition of policies if the policy is conflict discrepancies may create security vulnerabilities so there is another things if it is if if when we compose policies so if i have several policy and composition of the policies if there are conflicts ah discrepancies may arise and then the there can be security vulnerabilities like like i can say that one policy says that
• 10:30 - 11:00 this traffic can be allowed or another policy said that this category of traffic should be denied and you see there is a overlap that which can be either allowed or denied you need to decide right this mainly happens because number of cases this implement is in a distributed way and if sometimes there are ah there are class in the local versus global policies etcetera so this need to be addressed these need to be first of all i defined and these need to be a address and this becomes a very critical
• 11:00 - 11:30 thing when there is a organization is pretty large to look at an individual policies and verify and all those things so looking all those things so what we have seems there are security models or security objectives there are attack models there are threats and i there are policies and mechanisms so these are different components which looks at a different way of the things right now i need to bring them together and ah have
• 11:30 - 12:00 what is my security goal so one of the major security goal is prevention prevent attackers from violating security policies so that should be there so attacker if i have the security policies if it is restricts that thing attackers should be should not be able able to violate the security policies detection detect attackers violation of the security policy so detection that the when the security policies are being violated by the attackers need to be detected right so detection i can have we then we will try
• 12:00 - 12:30 to the earlier the detection is more ah strong your security perimeter right so we need to detect as early as possible because if the attack has gone on go on into the place then what we what we are left with is more of the post mortem of the what had happened and basically learn to look at the other things there are a issues of ah another issue is recovering if if attack and if compromised if down to some extent or fully or ah partially then
• 12:30 - 13:00 how to recover from this thing right so what will be my recovery mechanisms mechanism from these type of things like ah stop attack ah assess and repair damage ah continue to function correctly even if the attack succeeds and there are different type of things people that there are in best practices we have in critical system as redundancy system there
• 13:00 - 13:30 are logging mechanisms to recover and other things never the less we need to recover from the thing ah to a stage where we where ah like pre attack stays type of things you know on all doing so we incurred cost right all this comes with a cost trust and assumptions that is another aspects so underlie all aspects of security right so i have some trust and assumption i trust this system i assume that system will work
• 13:30 - 14:00 fine or this or this ah particular application and so on and so forth things are there so it all stress and if you if you look at our day to day ah life also ah for security mechanisms we have some sort of a test trust and assumption like like i say i understand what we trust that the security person who is guarding that particular installation or particular premise is can be trusted right so so i assume that ah this can be trusted
• 14:00 - 14:30 to this extent and so on and so forth and type of things so this also is important thing so policies unambiguously partition system states right so that is ah if you look at the system state system goes on different state because first of all it is a dynamic thing right it is not that it is statically one defined things are there so it is it should [un/unambiguously] unambiguously partition the system state that means i am in this state
• 14:30 - 15:00 or this state which state i am there so it should be ambiguous partition correctly capture the security requirement of every stage right so it will not only partition it should also security requirements of every stage mechanisms assume to enforce policies so mechanisms are there to enforce policies supports mechanisms ah support mechanisms work ah correctly so that the mechanism is basically a implementation or realization of the policies and that should
• 15:00 - 15:30 be they are in place now if we look at a little bit ah holistically so if i have like set of reachable states of a system right so if the set of reachable state is in this ah this type of miss and ah if i have a ah set of secured stages like this type of ah hash line right so one we say that if the set of reachable state is within the overall
• 15:30 - 16:00 set of secured state then i say it is fully secure right so what i am trying to say that the system goes over different state all are within the security state so i have say i have security state security state at s one to s twenty as secure my system basically hover between s five to s sixteen so that means it is always in the security
• 16:00 - 16:30 state it can be precise that the it ah totally matches with this the set of security and set of reachability is matches other can be broad that means all are not in the security zone or the in the secure state but a but there are some state which is there right the one thing we should be we should know that how my security policy mechanisms we
• 16:30 - 17:00 service work work so that i i can say that how much secured i am so there is a ah issue of assurance like ah which consists of specifications right like requirement analysis statement of desired functionalities design how the system will meet the specification and implementation program systems that carry out design right so what it tries to do that in order to have properly design the thing i can assure that
• 17:00 - 17:30 this much security ah ok has been ah can be ah assured based on my ah my design specification etcetera right so this this is these are the best practices which need to be put into place so that my security level goes up now there are issues of operational issues or sometimes there are economical issues right cost benefit analysis
• 17:30 - 18:00 is it typical ah it is cheaper to prevent or recover right so um so whether which is costly like it is it is recovering is costly or things like i i say that ah i have a lap which has some linux installation ah or windows installation or combined both of them and
• 18:00 - 18:30 we run the lap on day to day basis but as such i we dont store anything in the system right so a in that case that is students are supposed to bring their documents or download their codes etcetera run and then release the thing right but end of the day there is no question of ah storing any data or there is no responsibility from the authority so that the data will be saved etcetera for that i may not look look
• 18:30 - 19:00 for ah much interested for preventing the attack right even some attack is there if i can recognize i can always reinstall that i can have a already a image of the whole ah system and i can reinstall the image right but on the other hand if there is a data intensive or say research data etcetera then i am more interested in preventing the right or a system which is online running on things i want to prevent the data hum so that is cost analysis
• 19:00 - 19:30 benefit other is the risk analysis right should we protect something how much should we protect this thing right how much risk is there there are laws and customs right let are desired security measures illegal will people do them etcetera so we have different operational issues ah which are there there are of course some of the human issues right organizational problems or people problems so there are always human in the loop and
• 19:30 - 20:00 there are human issues of ah responsibility per says authority and so on and so forth so if we tie them together so threats are there policies are ah a based on the threats policies are made based on the specification based on the things policy specification the design is there based on design that implementation and then operation this operational issues are feedback either to the implementation or design specification and things or operational
• 20:00 - 20:30 issues comes as a threat so this is if we try to make them together bring them together it is like sort of it now what we are looking as of now is more from the point of view of ah like from the providers or the from the system point of view like what are the what could be the possible threats what could be important possible policies
• 20:30 - 21:00 how to implement what is the mechanisms and so on and so forth right but if we try to look at that what are the different type of attacks like one is passive attack right obtain information that is being transmitted eavesdropping so it is not the attacks but these are more eavesdropping so two types release of message content it may be desirable to prevent the opponent from learning the contents of the transmission
• 21:00 - 21:30 so release of the message content may be one of the attack traffic analysis like i dont look at the message but say but i want to look at the traffic right if the traffic is highly ah volatile or heavy or low i try to predict that what could be the effect of the effect of the ah type of mechanisms going on right i can say that if there is a very high traffic that may be some sort of a video conferencing or video chat is going on and
• 21:30 - 22:00 it may be something need to be looked attached to me something if is a low traffic or ah medium traffic i can i can say that this is the type of things and based on not only the traffic traffic persist time it said also plays different important role usually passive attackers are difficult to detect because they dont do direct harm and very difficult to detect whereas on the other hand i we have ah active attackers like involve
• 22:00 - 22:30 some modification of the data stream or creation of false streams so that is these are all active attackers right so four categories so one one is masquerade one entity pretends to be different entity so that is the one attacker replay passive capture of the data unit and its subsequent retransmission to produce unauthorized effect right so this is a replay attack right so contained ah passive capture of the data
• 22:30 - 23:00 units and its subsequent retransmission huge amount of retransmission of the date modification some portion of the legitimate message is altered so that is the attack of ah of modification denial of service prevents the normal use of communication um facilities so this is a dos type of attack or denial of services attack so all these attacks actually create ah problem in our ah in in the operation of the active system
• 23:00 - 23:30 now in the security services as as those things we have seen that the these are the security threats security services try to give provide this sort of services right like confidentiality authenticity integrity non repudiation access control accessibility a availability so this ah this first thing we had discussed non repudiation what we say the order is final right it is
• 23:30 - 24:00 like that ah you say ah you order something like you say that the bank you instruct your bank that you transfer over online that you transfer x amount from my account to somebody elses account and next day i go to the bank that i never gave this right so there is a there is a there should be a way of handling this so there is non repudiation is why is ah is such things is is basically says the order is better access control is
• 24:00 - 24:30 a big field that how this access control will be there there are ah works on role based access control mechanisms and so on and so forth it is basically say the prevent misuse of resources so you should have that particular resource particular access ah to a particular resource center so that you can use that resources availability performance and non erasure type of services so that is denial of services service attack and ah there can be virus that
• 24:30 - 25:00 deletes files so that is your thats the also case of non availability so role of ah security so if when you when you talk about computer security network security information security cloud security and so on and so forth what are the role of ah thing the security infrastructure should provide ah first of all confidentiality all right that means ah protect against loss
• 25:00 - 25:30 of privacy the integrity protection against data altered ah data alteration or corruption so that is the protection of this the integrity because as you have seen integrity ah that ah during the message transfer the data is being altered availability protection against denial of service authentication identification of legitimate ah users so that how to identify an authenticated legitimate user authorization is determination of whether or not operation
• 25:30 - 26:00 is allowed by a certain user non repudiation as we have discussed the order is final safety protection against tampering damage theft etcetera right and we have a series of attacks based on that different type of vulnerabilities and so on and so forth from social engineering to phishing password attacks buffer overflow command injection and etcetera etcetera so these are different type of attacks which are there in the information system which
• 26:00 - 26:30 are true in some sense ah for the cloud infrastructure also now if we look at ah a typical scenario like say network security which is very prominent because the cloud is based on a this term is basically build on the distributed systems which are ah leverage or network and so its important that the basic network level security is high so network security works like this determination of the network security policies that what should be the security policy implementing those ah those policy then ah reconnaissance
• 26:30 - 27:00 so that should this to see that whether the security things are in place or not vulnerability scanning like how how vulnerable i am so that look at the vulnerability scanning there is a concept of penetration testing that means or what we say self attacking sort of scenario is a self and safe attacking scenario that how much i can predict it to the system ah so it is a penetration testing and there is a need of post post attack in ah investigation
• 27:00 - 27:30 if there is a attack then post attack investigation so determination of security ah policy ah that the security policy is a full ah security roadmap and for any organization so smaller things if it is a inter organization so that the what will be the security policies need to be ah placed right it is a full road map have to be there the network design should reflect ah these policies so if it is a network thing so whenever you are designing it should
• 27:30 - 28:00 confirm these security policies so implementing the security policies implementing ah policies include installation and configuration of security measures like firewalls installation of configuration of ids and there are several other type of things which need to be there so if we look at it is a big picture like this where you have different there is demilitarized zone internal network and that firewall or network address translator nat switch firewall
• 28:00 - 28:30 and type of things right so it is it is dual homing or two firewalls are there so implement ah security policies either the policies or the excess rules in the firewall or ids or there is a concept of honeypot or honeynet where vulnerable things are there so that lot of attacks will be there and ah the security ah means security personnels understand that
• 28:30 - 29:00 what sort of attacks is there based on that signatures they basically do they basically fine tune there are rda ah ids or firewall policies so the next thing is that need to learn about the network right so in order to ah whether to attack or prevent you need to none of the network so ip address of the host identify key servers with critical data and so on and so forth so there are two forms are there
• 29:00 - 29:30 one is passive which is undetectable one is active it is not ah often detected by the ids right so there are this is a need there is a vulnerability scanning that as we are [dis/discussing] discussing as we are discussing couple of minutes back that i need to basically scan my vulnerabilities right so that how vulnerable i am in the other system wise so there are different scanner there are ah in case of a network there are different like there is a open source thicknesses in map and so and so forth so that you can basically
• 29:30 - 30:00 scan that which are the what are the possible vulnerabilities and type of things right so this is important that you scan and see that what is the security quote unquote security health of your ah installation so other scanner will allow to exploit then they are they are called metasploit and type of things which has is ah security database there are difference ah security vulnerability database like one such is that in vd national
• 30:00 - 30:30 vulnerability database where which basically says that what are the different vulnerabilities so ah scanners are need to be updatable so that it goes on as in case of antivirus etcetera which are primarily scanner so need to update with the signatures and then we have the penetration testing like one we do a vulnerability analysis of a say a network and then looking at the vulnerabilities we do a penetration testing of the system
• 30:30 - 31:00 that how much i can penetrate into the systems and type of things these are safe attacks and ah late as late as ah means a organization or the security personnel can know that what are the different vulnerability points and put appropriate patches and finally we have a post attack investigation the forensics of the attacks the process is heavily guided by the laws that how this post attack or post mortem scenarios screaming there then retain
• 31:00 - 31:30 chain of evidences that how things happens etcetera so these are post mortem or post attack scenarios now if you look at in our in case of a cloud all these things also come in different in same or different forms right because these are more generic though we discussed at the end little bit of ah network related but these are primarily more generating attacks and then we have ah um this ah post attack investigations
• 31:30 - 32:00 ah to look at that what are the different attack pattern etcetera and we will try to look at in our next ah lecture or so that how what are the implications or what are the specialty ah of this ah security in case of cloud computing ok so will stop here today thank you