Skip to content
Free planNo credit card requiredStart writing
AI for Research home
AI for Research home
Dashboard
Sign inGet started

Search 250 million research papers

Read the abstract, see who wrote it and who cites it, and get the citation in APA, MLA, Chicago or Harvard.

About 10,000 papers for “cloud attacks”

Cloud Watching: Understanding Attacks Against Cloud-Hosted Services

Izhikevich, Liz, Tran, Manda, Kallitsis, Michalis et al. · CISPA Helmholtz Center · 2023

Cloud computing has dramatically changed service deployment patterns. In this work, we analyze how attackers identify and target cloud services in contrast to traditional enterprise networks and network telescopes. Using a diverse set of cloud honeypots in 5 providers and 23 countries as well as 2 educational networks and 1 network telescope, we analyze how IP address assignment, geography, network, and service-port selection, influence what services are targeted in the cloud. We find that scanners that target cloud compute are selective: they avoid scanning networks without legitimate services and they discriminate between geographic regions. Further, attackers mine Internet-service search engines to find exploitable services and, in some cases, they avoid targeting IANA-assigned protocols, causing researchers to misclassify at least 15% of traffic on select ports. Based on our results, we derive recommendations for researchers and operators.

Cited by 0Open access

Cloud Watching: Understanding Attacks Against Cloud-Hosted Services

Izhikevich, Liz (18069544), Tran, Manda (18069547), Kallitsis, Michalis (18069550) et al. · Figshare · 2023

Cloud computing has dramatically changed service deployment patterns. In this work, we analyze how attackers identify and target cloud services in contrast to traditional enterprise networks and network telescopes. Using a diverse set of cloud honeypots in 5 providers and 23 countries as well as 2 educational networks and 1 network telescope, we analyze how IP address assignment, geography, network, and service-port selection, influence what services are targeted in the cloud. We find that scanners that target cloud compute are selective: they avoid scanning networks without legitimate services and they discriminate between geographic regions. Further, attackers mine Internet-service search engines to find exploitable services and, in some cases, they avoid targeting IANA-assigned protocols, causing researchers to misclassify at least 15% of traffic on select ports. Based on our results, we derive recommendations for researchers and operators.<p></p>

Cited by 0Open access

Cloud Watching: Understanding Attacks Against Cloud-Hosted Services

Liz Izhikevich, Manda Tran, Michalis Kallitsis et al. · arXiv (Cornell University) · 2023

Cloud computing has dramatically changed service deployment patterns. In this work, we analyze how attackers identify and target cloud services in contrast to traditional enterprise networks and network telescopes. Using a diverse set of cloud honeypots in 5 providers and 23 countries as well as 2 educational networks and 1 network telescope, we analyze how IP address assignment, geography, network, and service-port selection, influence what services are targeted in the cloud. We find that scanners that target cloud compute are selective: they avoid scanning networks without legitimate services and they discriminate between geographic regions. Further, attackers mine Internet-service search engines to find exploitable services and, in some cases, they avoid targeting IANA-assigned protocols, causing researchers to misclassify at least 15% of traffic on select ports. Based on our results, we derive recommendations for researchers and operators.

Cited by 17Open access

Insider Attacks in Cloud Computing

Adrian Duncan, Sadie Creese, Michael Goldsmith · 2012

The computer-security industry is familiar with the concept of a Malicious Insider. However, a malicious insider in the cloud might have access to an unprecedented amount of information and on a much greater scale. Given the level of threat posed by insiders, and the rapid growth of the cloud computing ecosystem, we examine here the concept of insider attacks in cloud computing. Specifically, if more of our assets are going to reside in the cloud, and as increasingly our lives, enterprises and prosperity may depend upon cloud, it is imperative that we understand the scope for insider attacks so that we might best prepare defenses. We need to understand whether cloud might expose our assets to increased threat in terms of both actors and attack surface. We present here an assessment of current insider threat definitions and classifications, and their applicability to the cloud. We elucidate the nature of insiders with reference to the cloud ecosystem and close with examples of insider attacks which are specific to cloud environments (and hence hard to detect using current techniques).

Cited by 110

Launching Stealth Attacks using Cloud

Moitrayee Chatterjee, Prerit Datta, Faranak Abri et al. · arXiv (Cornell University) · 2020

Cloud computing offers users scalable platforms and low resource cost. At the same time, the off-site location of the resources of this service model makes it more vulnerable to certain types of adversarial actions. Cloud computing has not only gained major user base, but also, it has the features that attackers can leverage to remain anonymous and stealth. With convenient access to data and technology, cloud has turned into an attack platform among other utilization. This paper reports our study to show that cyber attackers heavily abuse the public cloud platforms to setup their attack environments and launch stealth attacks. The paper first reviews types of attacks launched through cloud environment. It then reports case studies through which the processes of launching cyber attacks using clouds are demonstrated.

Cited by 0Open access

Preventive measures for cloud attacks

G Rekha, Pradeepthi, Q Zhang et al. · International Journal of Latest Trends in Engineering and Technology · 2017

As Cloud Computing is becoming an emerging technology, more and more industries are moving towards Cloud Computing, with tremendous data being generated every hour, the need of the hour is not just 24X7 availability but also security. The small and medium-size organizations can manage their projects by using cloud-based services and also able to achieve productivity enhancement with limited budgets. But, apart from all of these benefits, it may not be fully trustworthy. Cloud Computing do not keep data on the user's system, so there is a need of data security. The user pays progressively attention about data security due to this off-side storage of data on cloud computing. In this paper, all possible threats to security in cloud computing are presented and we shall discuss security concerns in Cloud Computing and shall also suggest some measures to improve security.

Cited by 1Open access

CLOUD BASED CYBER- SECURITY ATTACKS

Qaim Mehdi Rizvi, Mashiyat Zehra, G Rekha1 et al. · International Research Journal of Modernization in Engineering Technology and Science · 2023

Security in the cloud refers to the measures and practices implemented to protect data, applications, and infrastructure in cloud computing environments.As with any computing environment, security in the cloud is crucial to ensure the confidentiality, integrity, and availability of resources and to protect against unauthorized access, data breaches, and other security threats.Cloud attacks refer to cyber security incidents that specifically target cloud computing environments, including cloud infrastructure, platforms, and services.These attacks aim to exploit vulnerabilities in cloud systems, compromise data, disrupt services, or gain unauthorized access to resources.Ensuring security in the cloud involves implementing a combination of preventive, detective, and responsive measures, such as strong authentication and access control, Data Encryption, and Regular security updates and patches.This paper covers the security in the cloud and types of cyber security attacks on the cloud, that are the methods or algorithms developed to prevent these attacks, and what could be the preventive measures that could be adopted.

Cited by 1Open access

Security attacks in cloud computing

Pandey, Prabin · Theseus (Ammattikorkeakoulujen) · 2021

This thesis discusses the major types of cybersecurity attacks. In particular, it discusses the essential process, needs, and a secure protocol that can be easily understood by beginners or those who are interested in using cloud computing as their daily services to counter potential network threats. The thesis deliberates the concept of network vulnerabilities for the early prevention from attack and suggests few mitigation techniques. The information provided in the given thesis has been amassed with a thorough secondary data collection and research techniques that demonstrated the majority of technologically dependent corporations and security experts who are aware of the potential cybersecurity threats. The conclusion of this thesis conveys ideas on different types of potential threats to cloud computing services based on data collected during 2020. The open data published in 2020 can be used by the reader to understand the potential cybersecurity threats and current trends in order to apply strategies for countermeasures in the coming future.

Cited by 0Open access

Cloud Security: Attacks and Current Defenses

Gehana Booth, Andrew Soknacki, Anil Somayaji · 2013

Abstract—This paper presents a high-level classification of current research in cloud computing security. Unlike past work, this classification is organized around attack strategies and corresponding defenses. Specifically, we outline several threat models for cloud computing systems, discuss specific attack mechanisms, and classify proposed defenses by how they address these models and counter these mechanisms. This examination highlights that, while there has been considerable research to date, there are still major threats to cloud computing systems, such as potential infrastructure compromise, that need to be better addressed. C

Cited by 0

Speculative Execution Attacks and Cloud Security

Yinqian Zhang, Radu Sion · 2019

Speculative execution attacks, such as Meltdown, Spectre, and Foreshadow, exploit performance optimization features in modern processors and micro-architectural side channels to breach the confidentiality of computer systems. Although few incidences have been reported in the wild, their very existence imperils the promise of strong security isolation of cloud computing. This panel will invite experts from both academia and industry to discuss the impacts of speculative execution attacks on the cloud industry. The aim of the panel is to understand the state of the art of academic research and industry practice, and to explore future academic research directions and industry best practices.

Cited by 2

Cloud-Base Defense Against DRDoS Attacks

Hiroshi Fujinoki · 2018

In this paper, we present our new approach for protecting production servers from distributed reflector denial of service attacks, while the volume of their attacking traffic has been exponentially increasing. We apply a cloud to effectively sieving out the reflectors of the attacking traffic. We assessed the convergence delay for sieving using simulations. Our simulation results indicated that the proposed protection method promising, showing the approach is scalable in both attacking traffic volume and attacker ratio.

Cited by 3

Cloud Security Threats, Attacks and Mitigation

Kuldeep Kumar Chauhan, A. K. S. Sanger · International Journal of Computer Sciences and Engineering · 2018

International Journal of Computer Sciences and Engineering (A UGC Approved and indexed with DOI, ICI and Approved, DPI Digital Library) is one of the leading and growing open access, peer-reviewed, monthly, and scientific research journal for scientists, engineers, research scholars, and academicians, which gains a foothold in Asia and opens to the world, aims to publish original, theoretical and practical advances in Computer Science,Information Technology, Engineering (Software, Mechanical, Civil, Electronics & Electrical), and all interdisciplinary streams of Computing Sciences. It intends to disseminate original, scientific, theoretical or applied research in the field of Computer Sciences and allied fields. It provides a platform for publishing results and research with a strong empirical component. It aims to bridge the significant gap between research and practice by promoting the publication of original, novel, industry-relevant research.

Cited by 0Open access

Cyber Attacks in Cloud Computing Environment

Divyansha Garg, Reshu Agarwal · 2023

Users are deterred from moving to the cloud by cyberattacks against it. Data security is currently a shortcoming of cloud computing. Potential dangers to cloud computing include not secured data and inadequate cache security. Before businesses switch to cloud computing, security issues need to be properly evaluated. The goals of this study are to define cloud computing and study the cyber assaults against cloud infrastructure. The reduction of non-technical issues may result in fewer security issues. Nonetheless, servers and services are damaged by cryptography, distributed denial of service, and flooding attacks. This study illustrates cloud computing and the risks to the content and cache. The following stage is to hunt for a remedy when the cloud security issues have been identified.

Cited by 0

Mitigating DDoS Attacks in Cloud Networks

Abhishek Singh · International Journal of Multidisciplinary Research and Growth Evaluation · 2021

Distributed Denial of Service (DDoS) attacks represent a significant and growing threat to cloud networks, capable of causing extensive service disruptions and substantial financial and reputational damage. These attacks leverage multiple compromised devices to flood a target with malicious traffic, overwhelming its resources and rendering services unavailable to legitimate users. As cloud computing becomes increasingly integral to business operations, the need for effective DDoS mitigation strategies has never been more critical. This paper delves into the multifaceted nature of DDoS attacks, categorizing them into volumetric, protocol, and application layer attacks, each with distinct characteristics and impacts. It examines the specific vulnerabilities of cloud networks to these attacks, highlighting the unique challenges posed by their distributed and scalable nature. To combat these threats, a multi-layered approach to DDoS mitigation is essential. This includes traffic filtering and rate limiting to control the flow of traffic, anomaly detection and machine learning algorithms to identify and respond to attacks in real-time and leveraging the inherent scalability of cloud infrastructure to absorb and distribute attack traffic. Additionally, the use of Content Delivery Networks (CDNs) and specialized DDoS protection services can provide robust defenses against these attacks. Looking ahead, the paper explores future advancements in DDoS mitigation, emphasizing the potential of AI-driven mitigation tools, blockchain technology for creating decentralized and tamper-proof networks, advanced threat intelligence for proactive defense, and enhanced collaboration between cloud service providers, security vendors, and organizations. By providing a comprehensive understanding of DDoS attacks and the strategies to mitigate them, this research aims to equip organizations with the knowledge and tools necessary to protect their cloud networks. As DDoS attacks continue to evolve, staying ahead of these threats will require continuous innovation and adaptation in mitigation techniques.

Cited by 0Open access

Traceback Attacks in Cloud -- Pebbletrace Botnet

Wenjie Lin, David Lee · 2012

Botmaster sets up Command and Control (C&C) server and stepping-stones in the Internet for stealing sensitive information from victim's machine. Clouds provide botmaster with an ideal environment of rich computing resources where he can easily deploy/remove C&C server and establish/tear-down stepping-stones for anonymous attacks. It is of vital importance for cloud service providers to detect botnet, prevent attack, and trace back to the botmaster. We present our Pebble trace scheme for the trace back to the botmaster. It first identifies cryptographic keys of the botnet communications for configuring botnet operations and then traces back to the botmaster. We design and implement a new key identification scheme and propose an approach for tracing back to the botmaster across stepping-stones and beyond multiple clouds without universal deployment of monitors, router updates, or ISP support. We implement our method and build a Pebble-trace prototype that is applied to Zeus botnet in OpSource cloud with promising results.

Cited by 21