Cyber security threats, challenges and defence mechanisms in cloud computing

Aljumah, Abdullah; Ahanger, Tariq Ahamed

doi:10.1049/iet-com.2019.0040

Cited by 25 publications

(16 citation statements)

References 34 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A literature review has been conducted to explain the modern state-of-the-art automated web application security scanners using dynamic and static analysis. It has also intended to explain the primary issues of the subject and summarize the essential concepts of existing challenges and attacks, such as SQL injection attacks, OS command Injection, Cross-Site Scripting, and directory traversal [9][10][11]. The advanced development methods include specific frameworks and libraries for regulating effective and quick approaches to improve market requirements.…”

Section: Related Workmentioning

confidence: 99%

Web Security: Emerging Threats and Defense

Almutairi¹,

Mishra²,

Alshehri³

2022

Computer Systems Science and Engineering

View full text Add to dashboard Cite

Web applications have become a widely accepted method to support the internet for the past decade. Since they have been successfully installed in the business activities and there is a requirement of advanced functionalities, the configuration is growing and becoming more complicated. The growing demand and complexity also make these web applications a preferred target for intruders on the internet. Even with the support of security specialists, they remain highly problematic for the complexity of penetration and code reviewing methods. It requires considering different testing patterns in both codes reviewing and penetration testing. As a result, the number of hacked websites is increasing day by day. Most of these vulnerabilities also occur due to incorrect input validation and lack of result validation for lousy programming practices or coding errors. Vulnerability scanners for web applications can detect a few vulnerabilities in a dynamic approach. These are quite easy to use; however, these often miss out on some of the unique critical vulnerabilities in a different and static approach. Although these are time-consuming, they can find complex vulnerabilities and improve developer knowledge in coding and best practices. Many scanners choose both dynamic and static approaches, and the developers can select them based on their requirements and conditions. This research explores and provides details of SQL injection, operating system command injection, path traversal, and cross-site scripting vulnerabilities through dynamic and static approaches. It also examines various security measures in web applications and selected five tools based on their features for scanning PHP, and JAVA code focuses on SQL injection, cross-site scripting, Path Traversal, operating system command. Moreover, this research discusses the approach of a cyber-security tester or a security developer finding out vulnerabilities through dynamic and static approaches using manual and automated web vulnerability scanners.

show abstract

Section: Related Workmentioning

confidence: 99%

Web Security: Emerging Threats and Defense

Almutairi¹,

Mishra²,

Alshehri³

2022

Computer Systems Science and Engineering

View full text Add to dashboard Cite

show abstract

“…Diffie-Hellman guarantees privacy between two parties who have no prior information about one another and builds up a shared secret key over the web. 25 This calculation explicitly utilizes time and space to settle on the choice of the right calculation depending on parameters like the size of the file, encryption computation time, encoding computing time. 26 A hybrid system of AES, RC6, Blowfish, and BRA is implemented, which provides high security and low delay using cryptography and stenography techniques.…”

Section: Related Workmentioning

confidence: 99%

Cloud computing platform: Performance analysis of prominent cryptographic algorithms

Ajmal

Ibrar

Amin

2022

Concurrency and Computation

View full text Add to dashboard Cite

With advancements in science and technology, cloud computing is the next big thing in the industry. Cloud cryptography is a technique that uses encryption algorithms to secure data. The significant advantage of cloud storage is no difficulty to get to, diminished equipment, low protection, and fixing cost so every association is working with the cloud. Encryption is the process of encoding information to prevent unauthorized access. Nowadays, we desire to secure the information that is to be stored in our computer or transmitted utilizing the internet against attacks.The cryptographic method depends on their response time, confidentiality, bandwidth, and integrity. Furthermore, security is a significant factor in cloud computing for ensuring client data is placed on the safe mode in the cloud. Our research paper compares the efficiency, usage, and utility of available cryptography algorithms.Evaluation results suggest which algorithm is better for which type of data and environment.

show abstract

“…Data breaches are a security event in which sensitive data is copied and used in illegal projects, and this data is used by plundering and exploiting by an unauthorized person, and sensitive data may be personal information, trade secrets, intellectual information, personal inventions, and Other information that revolves around the same person only, without the intervention of a third party, and these data may be related in several fields such as education, industry, health information, financial services, and others [20].…”

Section: Data Breaches In Cloud Computingmentioning

confidence: 99%

“…It is important to develop information security in those agencies that contain information on a large number of people, which may cause a disaster in the event of a security failure in their system, so there must be many security precautions [20][21][22][23][24].…”

Section: Data Breaches In Cloud Computingmentioning

confidence: 99%

Sensitive Data Exposure: Data Forwarding and Storage on Cloud Environment

et al. 2021

View full text Add to dashboard Cite

Sensitive data has become an essential part of life today. With the increase in sensitive data, the importance of maintaining its confidentiality and integrity has increased. One of the solutions became to store this data in the cloud. But the risk of revealing this data still exists. This is because the rate of attack, leakage and loss of this data has become a serious matter. The importance of sensitive data in our current era is considered our oil, as it is very important in several uses in statistical analyzes and other important matters that help the authorities to know the type of people and their interests, and when publishing this information it is important to know what information should be available and What information should not appear or be used on the sites. In this paper, discuss this issue, which is one of the most important security issues that is sensitive data exposure. We touched on this research and the techniques used to reduce these risks to the data stored in the cloud. Mention the types of sensitive data and the types of attacks that may affect these data, and mention the points of weakness, and then the methods of protecting this data.

show abstract

Cyber security threats, challenges and defence mechanisms in cloud computing

Cited by 25 publications

References 34 publications

Web Security: Emerging Threats and Defense

Web Security: Emerging Threats and Defense

Cloud computing platform: Performance analysis of prominent cryptographic algorithms

Sensitive Data Exposure: Data Forwarding and Storage on Cloud Environment

Contact Info

Product

Resources

About