Unsecure cloud storage: prevalence & mitigation

Cloud storage services are gaining popularity due to their flexibility, elasticity, and support to a growing need of data storage at a very accessible price, around $0.02 per GigaByte (GB) each month. Thus, more and more companies and users are relying on cloud providers to store their files. This p...

Descripción completa

Detalles Bibliográficos
Autor: Ramirez Aguado, Miguel
Tipo de recurso: tesis de maestría
Fecha de publicación:2018
País:España
Institución:Universitat Politècnica de Catalunya (UPC)
Repositorio:UPCommons. Portal del coneixement obert de la UPC
Idioma:inglés
OAI Identifier:oai:upcommons.upc.edu:2117/127695
Acceso en línea:https://hdl.handle.net/2117/127695
Access Level:acceso abierto
Palabra clave:Computer security
Cloud computing
cloud storage
aws
google cloud
ibm cloud
cybersecurity
Seguretat informàtica
Computació en núvol
Àrees temàtiques de la UPC::Informàtica
id ES_c37f3720c5de2dddbdf3ecd812cbd4e4
oai_identifier_str oai:upcommons.upc.edu:2117/127695
network_acronym_str ES
network_name_str España
repository_id_str
spelling Unsecure cloud storage: prevalence & mitigationUnsecured cloud object storage: a primer on prevalence & mitigation techniquesRamirez Aguado, MiguelComputer securityCloud computingcloud storageawsgoogle cloudibm cloudcybersecuritySeguretat informàticaComputació en núvolÀrees temàtiques de la UPC::InformàticaCloud storage services are gaining popularity due to their flexibility, elasticity, and support to a growing need of data storage at a very accessible price, around $0.02 per GigaByte (GB) each month. Thus, more and more companies and users are relying on cloud providers to store their files. This project will study the four main cloud storage providers: Amazon Web Services (AWS), Google Cloud, IBM Cloud and Microsoft's Azure. After understanding how each cloud provider works, a scanning tool was developed to search all four providers for public objects. To make sure companies and administrators understand the utility of the tool, privacy settings and permissions are commented, also commenting how and why previous data leakage occurred. The tool has been tested and the results obtained show that there is a lot of sensitive data available to the public. With the help of the developed tool, penetration testers can help companies by making sure that no sensitive data is publicly available.Universitat Politècnica de CatalunyaDavis, ShawnUmbert Juliana, Anna20182018-11-0120192019-01-28master thesishttp://purl.org/coar/resource_type/c_bdccNAhttp://purl.org/coar/version/c_be7fb7dd8ff6fe43info:eu-repo/semantics/masterThesisapplication/pdfhttps://hdl.handle.net/2117/127695reponame:UPCommons. Portal del coneixement obert de la UPCinstname:Universitat Politècnica de Catalunya (UPC)Inglésengopen accesshttp://purl.org/coar/access_right/c_abf2http://creativecommons.org/licenses/by-nc-nd/3.0/es/info:eu-repo/semantics/openAccessoai:upcommons.upc.edu:2117/1276952026-05-27T15:37:01Z
dc.title.none.fl_str_mv Unsecure cloud storage: prevalence & mitigation
Unsecured cloud object storage: a primer on prevalence & mitigation techniques
title Unsecure cloud storage: prevalence & mitigation
spellingShingle Unsecure cloud storage: prevalence & mitigation
Ramirez Aguado, Miguel
Computer security
Cloud computing
cloud storage
aws
google cloud
ibm cloud
cybersecurity
Seguretat informàtica
Computació en núvol
Àrees temàtiques de la UPC::Informàtica
title_short Unsecure cloud storage: prevalence & mitigation
title_full Unsecure cloud storage: prevalence & mitigation
title_fullStr Unsecure cloud storage: prevalence & mitigation
title_full_unstemmed Unsecure cloud storage: prevalence & mitigation
title_sort Unsecure cloud storage: prevalence & mitigation
dc.creator.none.fl_str_mv Ramirez Aguado, Miguel
author Ramirez Aguado, Miguel
author_facet Ramirez Aguado, Miguel
author_role author
dc.contributor.none.fl_str_mv Davis, Shawn
Umbert Juliana, Anna
dc.subject.none.fl_str_mv Computer security
Cloud computing
cloud storage
aws
google cloud
ibm cloud
cybersecurity
Seguretat informàtica
Computació en núvol
Àrees temàtiques de la UPC::Informàtica
topic Computer security
Cloud computing
cloud storage
aws
google cloud
ibm cloud
cybersecurity
Seguretat informàtica
Computació en núvol
Àrees temàtiques de la UPC::Informàtica
description Cloud storage services are gaining popularity due to their flexibility, elasticity, and support to a growing need of data storage at a very accessible price, around $0.02 per GigaByte (GB) each month. Thus, more and more companies and users are relying on cloud providers to store their files. This project will study the four main cloud storage providers: Amazon Web Services (AWS), Google Cloud, IBM Cloud and Microsoft's Azure. After understanding how each cloud provider works, a scanning tool was developed to search all four providers for public objects. To make sure companies and administrators understand the utility of the tool, privacy settings and permissions are commented, also commenting how and why previous data leakage occurred. The tool has been tested and the results obtained show that there is a lot of sensitive data available to the public. With the help of the developed tool, penetration testers can help companies by making sure that no sensitive data is publicly available.
publishDate 2018
dc.date.none.fl_str_mv 2018
2018-11-01
2019
2019-01-28
dc.type.none.fl_str_mv master thesis
http://purl.org/coar/resource_type/c_bdcc
NA
http://purl.org/coar/version/c_be7fb7dd8ff6fe43
dc.type.openaire.fl_str_mv info:eu-repo/semantics/masterThesis
format masterThesis
dc.identifier.none.fl_str_mv https://hdl.handle.net/2117/127695
url https://hdl.handle.net/2117/127695
dc.language.none.fl_str_mv Inglés
eng
language_invalid_str_mv Inglés
language eng
dc.rights.none.fl_str_mv open access
http://purl.org/coar/access_right/c_abf2

http://creativecommons.org/licenses/by-nc-nd/3.0/es/
dc.rights.openaire.fl_str_mv info:eu-repo/semantics/openAccess
rights_invalid_str_mv open access
http://purl.org/coar/access_right/c_abf2

http://creativecommons.org/licenses/by-nc-nd/3.0/es/
eu_rights_str_mv openAccess
dc.format.none.fl_str_mv application/pdf
dc.publisher.none.fl_str_mv Universitat Politècnica de Catalunya
publisher.none.fl_str_mv Universitat Politècnica de Catalunya
dc.source.none.fl_str_mv reponame:UPCommons. Portal del coneixement obert de la UPC
instname:Universitat Politècnica de Catalunya (UPC)
instname_str Universitat Politècnica de Catalunya (UPC)
reponame_str UPCommons. Portal del coneixement obert de la UPC
collection UPCommons. Portal del coneixement obert de la UPC
repository.name.fl_str_mv
repository.mail.fl_str_mv
_version_ 1869418800666902528
score 15,300724

Similares en LA Referencia