Cloud Security Auditing: Major Approaches and Existing Challenges

Majumdar, Suryadipta; Madi, Taous; Jarraya, Yosr; Pourzandi, Makan; Wang, Lingyu; Debbabi, Mourad

doi:10.1007/978-3-030-18419-3_5

Cited by 7 publications

(4 citation statements)

References 32 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In particular, monitoring should be performed in realtime to detect viruses and malware and prevent users from leaking data [46,47]. Security audits were activities performed to check whether security activities were conducted appropriately in companies [48]. Security audits were performed according to the policies defined in the OSINT tool and the security activities configured.…”

Section: Security Requirements Needed When Collecting and Storing Osi...mentioning

confidence: 99%

Current Status and Security Trend of OSINT

Hwang

Lee

Kim

et al. 2022

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

Recently, users have used open-source intelligence (OSINT) to gather and obtain information regarding the data of interest. The advantage of using data gathered by OSINT is that security threats arising in cyberspace can be addressed. However, if a user uses data collected by OSINT for malicious purposes, information regarding the target of an attack can be gathered, which may lead to various cybercrimes, such as hacking, malware, and a denial-of-service attack. Therefore, from a cybersecurity point of view, it is important to positively use the data gathered by OSINT in a positive manner. If exploited in a negative manner, it is important to prepare countermeasures that can minimize the damage caused by cybercrimes. In this paper, the current status and security trends of OSINT will be explained. Specifically, we present security threats and cybercrimes that may occur if data gathered by OSINT are exploited by malicious users. Furthermore, to solve this problem, we propose security requirements that can be applied to the OSINT environment. The proposed security requirements are necessary for securely gathering and storing data in the OSINT environment and for securely accessing and using the data collected by OSINT. The goal of the proposed security requirements is to minimize the damage when cybercrimes occur in the OSINT environment.

show abstract

Section: Security Requirements Needed When Collecting and Storing Osi...mentioning

confidence: 99%

Current Status and Security Trend of OSINT

Hwang

Lee

Kim

et al. 2022

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

show abstract

“…The state of the practice is manual code examination, and the state of the art is run-time checking. Research roadmaps for improving the certification process do not even mention source code verification [298,211,203]. The ideas were not obvious to working developers.…”

Section: Contributionsmentioning

confidence: 99%

“…Even if run-time checks are exhaustive and correct, a violation causes the program to crash. Research in this area aims to improve run-time performance and retain interoperability with uninstrumented code [210,39,211].…”

Section: Manualmentioning

confidence: 99%