UNIT :- 04
Vulnerability Assessment – Exam Notes
✅ What is Vulnerability Assessment?
Vulnerability Assessment (VA) is the process of identifying,
analyzing, and classifying security weaknesses in a system,
network, or application.
Purpose:
To find vulnerabilities before attackers do.
To improve security posture.
To help in risk management and compliance.
Key Steps in Vulnerability Assessment:
1. Planning:
o Define scope and target (systems, apps, networks).
2. Scanning:
o Use automated tools to scan for known vulnerabilities.
o Examples: Nessus, OpenVAS, Qualys.
3. Analysis:
o Validate the findings.
o Check for false positives.
4. Risk Evaluation:
o Prioritize based on severity (CVSS scores).
o Classify as low, medium, high, or critical.
5. Reporting:
o Prepare a report with identified vulnerabilities and
recommendations.
6. Remediation:
o Apply patches, update software, change configs, etc.
Types of Vulnerability Assessment:
1. Network-based – Scans internal/external networks.
2. Host-based – Scans individual systems (e.g., servers).
3. Application-based – Checks for bugs in web/apps.
4. Wireless assessment – Finds flaws in Wi-Fi networks.
5. Database assessment – Looks for misconfigurations or leaks.
Tools Used:
Nessus
Nikto
OpenVAS
QualysGuard
Burp Suite (for web apps)
Benefits:
Early detection of security flaws.
Reduces chances of data breaches.
Helps meet compliance (ISO, GDPR, etc.).
Saves cost by preventing future attacks.
Conclusion:
Vulnerability Assessment is a proactive process to identify and fix security
weaknesses before attackers exploit them. It's a vital part of cybersecurity
and risk management.
Absolutely! Here's a short, clear, and exam-friendly note on Privacy
and Security in Cloud Computing, in the same format with highlights
for quick revision:
☁️Privacy and Security in Cloud Computing – Exam Notes
✅ What is it about?
Cloud computing involves storing and accessing data over the internet.
Privacy and security are major concerns because data is stored on
shared infrastructure.
🔐 Key Security Issues:
1. Data Breaches – Unauthorized access to sensitive data.
2. Data Loss – Accidental deletion or hardware failure.
3. Insecure APIs – Weak interfaces may be exploited.
4. Account Hijacking – Attackers steal login credentials.
5. Denial of Service (DoS) – Attacks that shut down cloud services.
6. Malicious Insiders – Employees with bad intentions.
🔒 Key Privacy Concerns:
1. Data Location – Data may be stored in other countries with
different laws.
2. Data Ownership – Cloud provider may access or use your data.
3. Unauthorized Sharing – Risk of data being shared without
consent.
4. Lack of Transparency – Users may not know how data is handled.
Security Solutions:
Data Encryption (in-transit & at rest)
Strong Authentication (MFA – Multi-Factor Authentication)
Firewalls & Intrusion Detection Systems (IDS)
Security Audits & Compliance Checks
Access Control & User Permissions
📋 Privacy Solutions:
Data Anonymization
User Consent Policies
Data Residency Control (choose where data is stored)
GDPR & HIPAA Compliance
🧰 Best Practices:
Use reliable cloud providers with certifications (e.g., ISO 27001).
Regularly update passwords and patches.
Monitor cloud activity using logs and alerts.
Educate users on cybersecurity awareness.
✅ Conclusion:
Privacy and security are critical in cloud computing due to shared
resources. Proper tools, practices, and legal policies are needed to
protect data and maintain user trust.
Secure Execution and Environment – Exam Notes
✅ What is Secure Execution?
Secure Execution refers to running applications and processing data in a
way that ensures confidentiality, integrity, and isolation, even in
shared cloud environments.
☁️Why is it Important in Cloud Computing?
In cloud computing, multiple users share the same infrastructure. Secure
execution ensures that your data and code are safe from other users
or malicious actors.
🔐 Key Features of Secure Execution Environments:
1. Isolation
o Each user's application runs separately (e.g., using VMs,
containers).
2. Confidentiality
o Ensures that no one (not even the cloud provider) can
view your data during execution.
3. Integrity
o Protects code and data from being tampered with or
modified.
4. Secure Boot
o Verifies that systems start with trusted software only.
🧠 Technologies Used:
Trusted Execution Environments (TEEs):
o Secure areas in processors (e.g., Intel SGX, AMD SEV).
o Protect sensitive data during computation.
Virtual Machines (VMs):
o Isolated environments with strong access control.
Containers (e.g., Docker):
o Lightweight, isolated environments for secure app execution.
Hardware Security Modules (HSM):
o Physical devices for secure key management.
Security Practices for Secure Execution:
Encrypt data in use, in transit, and at rest.
Use access control policies and least privilege principle.
Regularly patch and update execution environments.
Monitor and log execution activities.
✅ Conclusion:
A secure execution environment ensures that data and applications
run safely in the cloud. Using technologies like VMs, containers, and
TEEs, cloud providers help protect user workloads from threats.
⚠️Cloud Computing – Threats and Challenges – Exam Notes
✅ What Are Cloud Threats?
Cloud threats are potential risks that can affect data security, privacy,
performance, or availability in a cloud environment.
✅ What Are Challenges?
Challenges are the technical, legal, and operational difficulties
cloud users and providers face when adopting and managing cloud
services.
🔐 Common Cloud Threats:
1. Data Breaches
– Unauthorized access or theft of sensitive data.
2. Insecure Interfaces and APIs
– Weak APIs can be exploited by hackers.
3. Data Loss
– Due to accidental deletion, corruption, or natural disasters.
4. Account Hijacking
– Attackers steal login credentials to access cloud services.
5. Insider Threats
– Malicious or careless actions by employees or partners.
6. Denial of Service (DoS) Attacks
– Overloading systems to shut down services.
Key Challenges in Cloud Computing:
1. Data Privacy and Security
– Ensuring data is protected and used lawfully.
2. Compliance and Legal Issues
– Meeting standards like GDPR, HIPAA, ISO.
3. Vendor Lock-in
– Difficulty switching providers due to different platforms.
4. Downtime and Reliability
– Ensuring high availability and disaster recovery.
5. Limited Control and Visibility
– Users may not fully see or control cloud infrastructure.
6. Performance Issues
– Delays due to shared resources or network latency.
🧠 How to Mitigate Threats & Challenges:
Use encryption and multi-factor authentication (MFA).
Choose reputable cloud providers with certifications.
Regularly audit and monitor cloud usage.
Implement access control and identity management.
Maintain backups and disaster recovery plans.
✅ Conclusion:
Cloud computing offers many benefits, but comes with serious security
threats and operational challenges. A combination of technology,
policy, and best practices is needed to ensure safe and reliable cloud
usage.
Virtual Machine (VM) Security – Exam Notes
✅ What is a Virtual Machine (VM)?
A Virtual Machine is a software-based emulation of a physical computer
that runs an operating system and applications independently using a
hypervisor.
✅ What is VM Security?
VM Security involves protecting virtual machines from unauthorized
access, malware, and misuse in cloud or virtualized environments.
🔐 Why VM Security is Important:
VMs share physical resources – if one is compromised, others may
be at risk.
Cloud environments host many VMs, making them a prime target
for attacks.
Prevents data leaks, unauthorized control, and service
disruption.
⚠️Common VM Security Threats:
1. VM Escape
– Attacker breaks out of a VM to access the host or other VMs.
2. VM Sprawl
– Too many unmanaged VMs increase attack surface.
3. Snapshot Exploits
– Old VM snapshots can expose vulnerabilities.
4. Insecure VM Images
– Using untrusted or outdated VM templates.
5. Malware Inside VMs
– Infected VMs can spread malware across the network.
VM Security Best Practices:
1. Isolate VMs
– Use network segmentation and firewalls.
2. Use Trusted VM Images
– Always deploy VMs from secure, verified sources.
3. Patch and Update
– Regularly update VM OS and applications.
4. Access Control
– Apply least privilege and multi-factor authentication.
5. Monitor & Audit
– Enable logging and continuous monitoring for threats.
6. Secure Hypervisor
– Keep the hypervisor updated and hardened.
7. Encrypt VM Data
– Use encryption for VM disk and data in transit.