Cyber Security Policies in the Private and Public Sector

Only available on StudyMode
  • Download(s) : 248
  • Published : March 25, 2013
Open Document
Text Preview
Cyber Security Policies in the Private and Public Sector
Cyber Security Vulnerabilities and Associated Threats of Cloud-Computing 16-03-2013

Table of contents
Introduction……………………………………………………………………………………3-4 Cyber Security Vulnerabilities…………………………………………………………………4-5 Cyber Security Vulnerabilities, Threats and Actions.……………………………………….....5 Session Hijacking……………………………………………………………………………….5-6 Virtual Machine Access…………………………………………………………………………6 Service Availability…………………………………………………………………………......6-7 Cryptography Flaws…………………………………………………………………………….7-8 Data Privacy…………………………………………………………………………………….8-9 Dependency on Internet………………………………………………………………………..9-10 Denial of Service (DOS) Attack……………………………………………………………...10-11 Conclusion…………………………………………………………………………………….11 References……………………………………………………………………………….........12

Introduction
Cloud computing is a technology through which the information services are provided on demand basis. It is like service oriented architecture. End-users access the services through the cloud as per the requirement. The cloud term basically refers internet, so services are provided through Internet. Cloud computing reduces the total cost of accessing the application. The applications are developed by the third party and the users pay per service to the third party for accessing the service. But there are lots of security risks associated with the cloud-computing. These relates to the data privacy, other vulnerabilities and associated threats. These vulnerabilities and the associated threats will be discussed in this paper. Effective Policies and procedures will also be defined in this paper which will help in managing the estimated risk of the threats.

Cyber Security Vulnerabilities and Associated Threats of Cloud-Computing Cloud-Computing
The information technology is growing these days and the managers are trying to reduce the total cost of development of the services using various means due to a number of business reasons. Cloud-computing is a technique which helps the management in reducing the total cost of development. The required resources are configured in a cloud and the users access these services through the cloud. In case of in-house development, the complete process is done inside the company premises and using the resources of the organization. So the organization has to pay for the complete resource to the vendor even if full service is not required. The license to use the product is also very costly. The organization has to pay for the complete product even if a part of the service is required. In the case of cloud computing, the users need not to pay for the entire service or product, he will pay only for the part of the service. For example, a service is created for user-id creation and as most of the organization needs this policy, so this policy is created and configured in the shared pool of resources. Now the different organizations can access the service as per their use. This helps in overall reduction of the total cost of accessing the service. These resources are configured in a shared pool of resources. These shared resources include the servers, storage, networks, services, etc. Cloud computing has many forms and these forms are mainly as described here: “Software as a Service”, “Platform as a Service”, and “Infrastructure as a service”. This technology has many advantages but it has some disadvantages too. As discussed above, that the services are provided by a third party vendor, so the responsibility to provide support and maintenance is also taken care by the third party service provider. When a company access the service using cloud-computing, the crucial business data resides in remote servers provided by the third party so there are lot of risk related to data privacy and confidentiality. The research related to analyzing the vulnerabilities and associated threats is going on and suitable actions are...
tracking img