A security analysis of amazon's elastic compute cloud service

Proceedings of the ACM Symposium on Applied Computing

Volumn , Issue , 2012, Pages 1427-1434

  Balduzzi, Marco ^a   Zaddach, Jonas ^a   Balzarotti, Davide ^a   Kirda, Engin ^b   Loureiro, Sergio ^c  

^a EURECOM   (France)

^b NORTHEASTERN UNIVERSITY   (United States)

^c SecludIT ^*  (United States)

Author keywords

cloud computing; elastic compute cloud service; security

Indexed keywords

AMAZON EC2; AMAZON WEB SERVICES; AUTOMATED SYSTEMS; CLOUD SERVICES; COMPUTING POWER; IT INFRASTRUCTURES; MALWARES; ON-LINE SERVICE; PUBLIC IMAGE; SECURITY; SECURITY ANALYSIS; SECURITY PROBLEMS; SECURITY RISKS; SENSITIVE INFORMATIONS; VIRTUAL SERVERS;

APPLICATION PROGRAMMING INTERFACES (API); AUTOMATION; CLOUD COMPUTING; DISTRIBUTED DATABASE SYSTEMS; INFORMATION TECHNOLOGY;

PUBLIC RISKS;

EID: 84863590115     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2245276.2232005     Document Type: Conference Paper

References (24)

1. Security focus: Port scans legal, judge says. http://www.securityfocus. com/news/126.
2. Security guidance for critical areas of focus in cloud computing v2.1, Dec. 2009. https://cloudsecurityalliance.org/csaguide.pdf.
3. Amazon elastic compute cloud, May 2011. http://aws.amazon.com/security.
4. Amazon elastic compute cloud (amazon ec2), May 2011. http://aws.amazon. com/ec2/.
5. Cloud computing, cloud hosting and online storage by rackspace hosting, May 2011. http://www.rackspace.com/cloud/.
6. Enterprise cloud computing from terremark, May 2011. http://www. terremark.com/services/ cloudcomputing.aspx.
7. Guidelines on security and privacy in public cloud computing, draft special publication 800-144, 2011.
8. Ibm smartcloud, May 2011. http://www.ibm.com/cloud-computing/us/en/ #!iaas.
9. John the ripper unix password cracker, Apr. 2011. http://www.openwall. com/john/.
10. Joyent smartdatacenter, May 2011. http://www.joyent.com/services/ smartdatacenter-services/.
11. Reminder about safely sharing and using public amis, Jun 2011. http://aws.amazon.com/security/security-bulletins/reminder-about-safely-sharing- and-using-public-amis/.
12. S. Bleikertz, M. Schunter, C. Probst, D. Pendarakis, and K. Eriksson. Security audits of multi-tier virtual infrastructures in public infrastructure clouds. In Proceedings of the 2010 ACM workshop on Cloud computing security workshop.
13. S. Bugiel, S. Nürnberger, T. Pöppelmann, A. Sadeghi, and T. Schneider. Amazonia: When elasticity snaps back. 2011.
14. T. Garfinkel and M. Rosenblum. When virtual is harder than real: Security challenges in virtual machine based computing environments. In Proceedings of the 10th conference on Hot Topics in Operating Systems-Volume 10.
15. R. Glott, E. Husmann, A. Sadeghi, and M. Schunter. Trustworthy clouds underpinning the future internet. The Future Internet.
16. M. S. Haroon Meer, Nick Arvanitis. Clobbering the cloud, part 4 of 5, 2009. http://www.sensepost.com/labs/conferences/clobbering-the-cloud/amazon.
17. I. LLC. Network Mapper (NMap), 1996-2011. http://nmap.org/.
18. J. Matthews, T. Garfinkel, C. Hoff, and J. Wheeler. Virtual machine contracts for datacenter and cloud computing environments. In Proceedings of the 1st workshop on Automated control for datacenters and clouds.
19. A. Puzic. Cloud security: Amazon's ec2 serves up 'certified pre-owned' server images, Apr. 2011. http://dvlabs.tippingpoint.com/blog/2011/04/11/cloud- security-amazons-ec2-serves-up-certified-pre-owned-s
20. M. Russinovich. Psexec, 2009. http://technet. microsoft.com/en-us/ sysinternals/bb897553.
21. A. A. Security. How to share and use public amis in a secure manner, June 2011. http://aws.amazon.com/articles/0155828273219400.
22. A. A. Security. Reminder about safely sharing and using public amis, June 2011. http: //aws.amazon.com/security/security-bulletins/reminder-about-safely- sharing-and-using-public-amis/.
23. T. N. Security. Nessus vulnerability scanner, 2002-2011. http://www.tenable.com/products/nessus.
24. J. Wei, X. Zhang, G. Ammons, V. Bala, and P. Ning. Managing security of virtual machine images in a cloud environment. In Proceedings of the 2009 ACM workshop on Cloud computing security.