MODULE – 04
(Q1) Demonstrate surfaces of a acks in a cloud compu ng environment with
neat diagram
Ans:
An a ack surface is the set of points where an a acker can a empt to
compromise a cloud system. In cloud compu ng, the three main en es are:
1. User
2. Service
3. Cloud Infrastructure
A acks can occur between any two of these en es, resul ng in six possible
a ack surfaces.
A acks targe ng the User
1. A acks from the Service (Service-to-User): These a acks originate from
the service layer and target the end-user. Examples include SSL
cer ficate spoofing, browser cache exploits, and phishing a acks that
masquerade as a trustworthy en ty to steal creden als or personal
informa on
2. A acks from the Cloud (Cloud-to-User): Includes spoofed a acks
origina ng from the cloud or unauthorized data access by malicious
cloud administrators.
A acks targe ng the Service
3. A acks from the User (User-to-Service): Malicious users a acking the
service via SQL injec on, buffer overflow exploits, and privilege escala on.
4. A acks from the Cloud (Cloud-to-Service): Exploi ng shared technology,
such as hypervisor flaws leading to VM takeovers, data distor on, or injec ng
addi onal opera ons.
Cloud Infrastructure A ack Vectors (A acks targe ng the Cloud) \
5. A acks from the User (User-to-Cloud): Users directly breaching the cloud
control systems and management interfaces.
6. A acks from the Service (Service-to-Cloud): A compromised or rogue
service reques ng excessive amounts of resources, causing a Denial-of-Service
(DoS) and exhaus ng cloud infrastructure.
(Q2) List out the top cloud security threats of CSA2016
ANS:
(Q4) Compare OS-level security vs. VM-level security in a cloud environment.
(Q5) Why is security a top concern in cloud compu ng?
ANS:
Cloud compu ng stores data, applica ons, and services on remote shared
infrastructures connected through the Internet. This exposes cloud systems to
several security threats.
1. Shared Resources and Mul -Tenancy
Mul ple users share the same cloud infrastructure.
Vulnerabili es in virtualiza on may allow one VM to a ack another VM.
3. Internet-Based A acks
Cloud services are accessible through the Internet.
Vulnerable to:
o DDoS a acks
o Phishing
o SQL Injec on
o Cross-site scrip ng (XSS)
5. Data Loss and Leakage
Failure of storage systems or a acks may cause permanent data loss.
Sensi ve informa on may leak to third par es.
7. Malicious Insiders
Cloud provider employees or insiders may misuse privileges.
Difficult to detect insider a acks
8. Hacked interfaces and API
9. compromised creden als and broken authen ca on
(Q6) How does XOAR provide a trusted hypervisor environment?
ANS:
Xoar is a modified version of the Xen hypervisor designed to significantly
enhance system security by breaking the tradi onal, large, and monolithic
design of the Trusted Compu ng Base (TCB). It achieves this by applying
microkernel design principles, making the system modular and reducing the
overall a ack surface.
(Q7) Describe the Key Features of Google
(Q8) What are the most important advantages of cloud technology for social
network.
ANS:
Cloud technology provides scalable compu ng, storage, and network resources
that help social networking applica ons serve millions of users efficiently.
Advantages of Cloud Technology for Social Networks
1. Scalability
Resources can be increased or decreased based on user demand.
Supports millions of users simultaneously.
2. Large Storage Capacity
Stores huge volumes of user profiles, photos, videos, and messages.
Provides reliable data management.
3. High Availability
Services are available any me and anywhere through the Internet.
Minimizes down me.
4. Cost Reduc on
No need to maintain expensive hardware infrastructure.
Uses a pay-per-use model.
5. Fast Data Processing
Distributed compu ng enables quick processing of large amounts of
social data.
Improves user experience.
6. Easy Sharing and Collabora on
Users can easily share content, communicate, and collaborate online.
Supports real- me interac ons.
7. Automa c Backup and Recovery
Data is backed up automa cally.
Ensures data protec on and disaster recovery.
8. Global Accessibility
Users can access social networking services from any loca on and
device.
(Q9) Discuss the Security Risks posed by shared images and management os?
ANS: