A

Cloud And Data Center Technology (4361602)

Micro Project Report
On

“ Cloud Security ”

Submitted By

Yagnesh Narola J. (236470316068)

Dhruv Navar (236470316069)
Nem Vora (236470316070)

Under the guidance of

Mrs. H. S. Jayani

Submitted in Partial Fulfillment for 6th Semester of the Degree of

DIPLOMA IN INFORMATION TECHNOLOGY

Winter - 2026

TAPI DIPLOMA ENGINEERING COLLEGE, SURAT

 Cloud Security

TAPI DIPLOMA ENGINEERING COLLEGE, SURAT

DEPARTMENT OF INFORMATION TECHNOLOGY

CERTIFICATE

This is to certify that the course based project entitled “Cloud

Security” submitted by Yagnesh Narola J. (236470316068), Navar
Dhruv (236470316069), Nem Vora (236470316070) in partial fulfillment
of Cloud And Data Center Technology (4361602) Micro Project, 6th
Semester of the award of the degree of Diploma in Information Technology
during academic year 2026.

DATE:

Faculty
Mrs. H. S. Jayani

Cloud And Data Center Technology (4361602) 2|Page

 Cloud Security

Cloud Security
• Cloud security refers to technologies, policies, controls, and services used to protect
cloud systems, data, and infrastructure.
• It ensures data confidentiality, integrity, and availability (CIA triad).
• Covers protection of:
• Cloud storage (data)
• Applications
• Networks
• User access
• Includes tools like:
• Encryption
• Firewalls
• Identity & Access Management (IAM)
• Applies to public, private, and hybrid cloud environments.

Need for Cloud Security

1. Data Protection:
• Sensitive data (personal, financial, business) is stored in cloud → needs Security
2. Prevent Unauthorized Access
• Protects against hackers, insiders, and cyber attacks
3. Compliance Requirements
• Helps meet laws and regulations (GDPR, HIPAA, etc.)
4. Avoid Data Loss / Breaches
• Prevents data leaks, accidental deletion, or theft
5. Business Continuity
• Ensures services remain available (protection from downtime, attacks like DDoS)
6. Shared Responsibility Model
• Cloud provider + user both have security roles → user must secure their data and access
7. Increasing Cyber Threats
• Cloud is a major target → requires continuous monitoring and protection

Responsibilities of Cloud Provider (CSP)

• Manage and secure the physical data centers (buildings, power, cooling, hardware
protection)
• Maintain and update cloud infrastructure (servers, storage systems, networking
components)
• Ensure availability and uptime of cloud services through redundancy and failover
mechanisms
• Provide security for virtualization layers (hypervisors, containers)
• Implement network-level security (firewalls, intrusion detection/prevention systems)
• Protect underlying hardware from failures and attacks
• Perform regular patching and updates of infrastructure software
• Ensure compliance with industry standards and regulations (e.g., ISO, GDPR, etc.)
• Offer tools for monitoring, logging, and auditing cloud resources
• Provide data backup infrastructure and disaster recovery capabilities (depending on
service model)
• Secure APIs and service interfaces provided to users

Cloud And Data Center Technology (4361602) 3|Page

 Cloud Security

Responsibilities of User (Customer)

• Manage and secure data stored in the cloud (encryption, classification, backup policies)
• Control user access using Identity and Access Management (IAM)
• Implement strong authentication methods (password policies, MFA)
• Secure applications deployed in the cloud (coding practices, vulnerability testing)
• Configure cloud services properly to avoid misconfigurations
• Manage operating systems and applications (especially in IaaS and PaaS models)
• Monitor account activity and respond to security alerts
• Ensure compliance with legal and organizational security policies
• Protect credentials and sensitive information from unauthorized access
• Perform regular updates and patching of applications and systems under their control
• Define and manage network security rules (security groups, access controls)

Identity and Access Management (IAM)

1. Authentication
• Process of verifying the identity of a user or system
• Uses credentials like username, password, biometrics, or tokens
• Ensures that the user is genuine before granting access
2. Authorization
• Process of determining what an authenticated user is allowed to do
• Defines permissions such as read, write, or execute access
• Based on policies, roles, or rules set by administrators
3. Multi-Factor Authentication (MFA)
• Security method that requires more than one form of verification
• Combines factors like password + OTP, biometric, or security token
• Adds an extra layer of protection against unauthorized access
4. Access Control (RBAC)
• Role-Based Access Control assigns permissions based on user roles
• Users are grouped into roles (e.g., admin, user, manager)
• Reduces complexity by managing permissions at role level instead of individual level
• Helps enforce the principle of least privilege
5. Data Security
• Protects data from unauthorized access, loss, or corruption
• Covers storage, processing, and transmission of data
• Ensures confidentiality, integrity, and availability of data
6. Data Encryption (At Rest, In Transit)
• At Rest: Data is encrypted when stored in databases or storage systems
• In Transit: Data is encrypted while being transferred over networks
• Uses encryption algorithms to prevent unauthorized access
7. Data Privacy
• Ensures personal and sensitive data is handled securely
• Prevents unauthorized sharing or exposure of data
• Follows laws and regulations like GDPR or data protection policies

Cloud And Data Center Technology (4361602) 4|Page

 Cloud Security

Network Security
1. Firewalls
• Act as a barrier between trusted and untrusted networks
• Monitor and control incoming and outgoing traffic based on rules
• Block unauthorized access while allowing legitimate communication
• Can be network-based or host-based (software firewall)
2. VPN (Virtual Private Network)
• Creates a secure and encrypted connection over the internet
• Allows users to access cloud resources safely from remote locations
• Hides user identity and protects data from interception
• Commonly used for secure remote access and site-to-site connections
3. Secure Network Configuration
• Involves setting up network components securely to reduce vulnerabilities
• Includes proper configuration of routers, switches, and cloud network settings
• Uses techniques like disabling unused ports, applying security rules, and segmentation
• Ensures only authorized traffic is allowed through the network
• Regular monitoring and updates help maintain security effectiveness

Application Security
1. Secure Coding
• Practice of writing code that is resistant to security vulnerabilities
• Follows secure coding standards and guidelines during development
• Prevents common issues like SQL injection, cross-site scripting (XSS), and buffer
overflow
• Includes input validation, proper error handling, and secure data handling
• Reduces risk of application-level attacks

2. Vulnerability Assessment
• Process of identifying and analyzing security weaknesses in systems or applications
• Uses tools and manual testing to detect vulnerabilities
• Helps organizations understand security risks before attackers exploit them
• Includes scanning, reporting, and prioritizing vulnerabilities based on severity
• Performed regularly to maintain strong security posture

3. Patch Management
• Process of updating software to fix bugs and security vulnerabilities
• Involves applying patches, updates, and security fixes provided by vendors
• Prevents exploitation of known vulnerabilities
• Requires regular monitoring, testing, and deployment of updates
• Ensures systems remain secure and up-to-date
Data Security Threats
1. Data Breaches
• Unauthorized access to sensitive or confidential data
• Can occur due to weak security, misconfiguration, or hacking
• Leads to data leakage, financial loss, and reputational damage
• Often involves exposure of personal, financial, or business data

2. Account Hijacking
• Unauthorized access and control of a user’s cloud account
Cloud And Data Center Technology (4361602) 5|Page
 Cloud Security

• Happens through stolen credentials, phishing, or weak passwords

• Attackers can manipulate data, perform unauthorized actions, or misuse services
• Can result in data theft or misuse of cloud resources
3. Insider Threats
• Security risks originating from employees or trusted users
• May be intentional (malicious) or unintentional (negligence)
• Includes data theft, misuse of access, or accidental data exposure
• Difficult to detect as insiders already have authorized access
4. DDoS Attacks (Distributed Denial of Service)
• Attack that floods a system or network with excessive traffic
• Makes services unavailable to legitimate users
• Uses multiple compromised systems to launch the attack
• Affects availability and performance of cloud services
5. Malware Injection
• Insertion of malicious software into cloud systems or applications
• Includes viruses, worms, trojans, or ransomware
• Can corrupt data, steal information, or disrupt operations
• Often spreads through insecure applications or file uploads

Monitoring and Incident Response

1. Logging & Monitoring
• Logging: Recording events and activities in the system (user actions, errors, access
logs)
• Monitoring: Continuously analyzing logs and system behavior
• Helps in detecting unusual or suspicious activities
• Useful for auditing, troubleshooting, and compliance
• Enables real-time alerts for quick response
2. Intrusion Detection/Prevention (IDS/IPS)
• IDS: Detects suspicious activities and generates alerts
• IPS: Detects and actively blocks malicious activities
• Monitors network traffic and system behavior
• Helps in identifying attacks like malware, unauthorized access, or exploits
• Enhances overall network security
3. Incident Response
• Process of handling and managing security incidents
• Includes steps like identification, containment, eradication, and recovery
• Aims to reduce impact and restore normal operations quickly
• Involves proper planning, tools, and trained personnel
• Helps prevent future incidents through analysis and improvements

Compliance and Legal Issues

1. Data Protection Laws
• Laws designed to protect personal and sensitive data
• Define how data should be collected, stored, processed, and shared
• Ensure user privacy and prevent misuse of information
Cloud And Data Center Technology (4361602) 6|Page
 Cloud Security

• Examples include GDPR and other national data protection regulations

2. Regulatory Compliance
• Following industry-specific rules and standards
• Ensures systems meet security and legal requirements
• Examples include ISO standards, HIPAA, PCI-DSS, etc.
• Requires implementation of proper controls and security measures
• Non-compliance can lead to penalties and loss of trust
3. Audit & Governance
• Audit: Regular examination of systems, policies, and processes
• Helps identify security gaps and ensure compliance
• Governance: Framework of policies, roles, and responsibilities
• Ensures proper management and control of cloud resources
• Promotes accountability, transparency, and risk management
Security Best Practices
1. Strong Passwords & MFA
• Use complex passwords with a mix of letters, numbers, and symbols
• Avoid using common or easily guessable passwords
• Change passwords regularly and do not reuse them across accounts
• Enable Multi-Factor Authentication (MFA) for added security
• Reduces risk of account compromise even if password is leaked
2. Regular Updates
• Keep systems, software, and applications up to date
• Apply security patches and updates provided by vendors
• Fixes known vulnerabilities and improves performance
• Reduces chances of exploitation by attackers
• Updates should be tested and applied regularly
3. Continuous Monitoring
• Constantly observe system activities and network behavior
• Detect unusual or suspicious actions in real-time
• Use monitoring tools and alerts for quick response
• Helps in early detection of threats and minimizing damage
• Supports overall security management and incident response

Cloud And Data Center Technology (4361602) 7|Page