Security Risks of Cloud Computing | GeeksforGeeks

Key Takeaways

foreign [Music] Computing so now let's try to understand what are the different security risks of uh that the cloud computing is facing okay that I am going to cover in this video is what exactly the cloud computing is and what are the features of the cloud computing and what are the different security risks of the cloud computing so before trying to understand what are the security risk let's try to have a overview on what exactly the cloud computing is and what are the features of the cloud computing now let's have a look what is a cloud computing so I'll tell you in a simple terms a cloud computing means a storing and accessing the data as well as the programs on remote servers it's not a local service on remote servers we are trying to store the data and we are trying to access the data and the programs that are hosted on internet this is a very important this is the hosted on internet instead of computer hardware hard drives or local servers so you are not trying to store your data in your local hard drive okay or the local servers we are trying to store or retrieve the data or you can access the data on remote servers okay so hosted by internet a cloud computing is a process of providing Computing Services to users on their demand through the internet so with the help of the internet we are trying to access the cloud services on the user's demand means you can demand and you can retrieve the information so the users can only pay for what they use you are not supposed to place the complete amount for whatever the storage you had by so you can pay how much of storage you are using on the cloud only for that we can pay okay so that is the meaning of the only pay for what they use a cloud computing is also referred as internet based Computing that is what I am saying so without internet you can't access or withdrive the data cloud computing is also referred as internet based computing now let's have a look on what are the features of the cloud computing the different features are the first one is resource pooling resource means the different items like the hardware resources or if you want to try to access you're not supposed to purchase you want to access that resources you can use that resources whenever it is over you can hand over that okay resource pooling a pooling means different people are trying to access the same resources okay at the same time they can use at the same time on-demand self-service so this is like a self-service you can demand and you can use so on demand cell service that is a feature providing by the cloud computing easily maintenance the maintenance is very easily you are not you know need to supposed to maintain your data the complete your storage your data is going to be maintained by the cloud service providers okay a large network access so this is not a limited one because we are trying to access the data and storing the data on the remote servers whenever we are trying to work on the remote servers so a large network access is required availability a lot of availability is there okay there is no limit for that you or how much you want you can use it you can pay for that automatic system services are there it is economical obviously the Cloud Computing Services are economical security they are providing lot of security when compared to your local servers the remote servers they are providing a high secure services pay as you go Etc so these are all the different features of the cloud computing so I think you get an exact idea what exactly the cloud computing is by seeing these features now let's have a look on the Securities so a cloud computing not only provides the advantages so whatever I said just now it's the features those are the advantages of the cloud computing also like storage capacities improved collaboration excellent accessibility Mobility okay these are all some advantages that this cloud computing is providing storage capacity is providing it is trying to improve the collaborations and excellent accessibility Mobility feature is there okay but it also having some security risk so what are the common security risks that the cloud computing is having theft or intellectual property trying to Thrift theft your uh information apis are not secure the application program interfaces whatever you're using it they are not secure data breaches are there dos attacks may occur accounts get hijacked applications are not secured not trusted cloud service provides are used so many people are trying to use a non-trusted cloud services whenever you uh using the non uh trusted cloud service providers obviously you will face some problems okay so now let's have a look on what are the theft of intellectual property okay the sensitive data whatever the your information every person information is a sensitive data okay that is sensitive for you okay so you think your data is a sensitive so that sensitive data is going to be uploaded by companies to cloud-based file management services the sensor data is going to be uploaded by comp in the companies uh they are having a lot of information the user's information as well as their company's information all they are trying to uh store on the cloud so their companies to cloud-based file management Services a survey is conducted generally a survey is conducted by Sky High Foundation this is one Foundation they conducted a survey what they are saying this is that the companies face risks of having their intellectual property stolen every company is facing some risks like maybe our property is going to be stolen by some other third party the strong Cloud security measures may help the organization by providing security to their intellectual property so for every drawback there is a obviously a solution will be there okay if you try we will get a solution in the same way for every strong crowd uh the strong Cloud security measures may help the organizations the companies by providing security to their intellectual property but the V Cloud security measures within an organization including storing data without encryption and also failing to manage the multi-factor authentication to gain access to the service so that is what that's why everyone is trying to prefer the cloud services the cloud is going to provide a strong security measures but if you are trying to store your data in your local cloud like you are within an organization storing data without encryption obviously a multiple Factor authentications failing to manage the multiple Factor authentication is gaining to this access to the services okay so this is the first the next security threat is uh insecure application interfaces if you are trying to use the insecure APS obviously there will be a threat okay so the cloud service experience can be customized by users with the help of application program interface but apis also create a thread to Cloud security due to their different nature actually this is one of the advantages there as well as it having some drawback that means because of the different nature there is a threat to the cloud security if you use the API it is trying to provide better service to users they also increase the security risk on data climb store if you take the YouTube YouTube is one of the site with an application program interface that allows user to embedded YouTube videos into their apps or website okay you can directly take the embedded link and you can copy and paste in your websites so there is a chance this within an APS that allows the YouTube users to embedded the YouTube videos into their apps or website even though it is providing a good opportunity to the users yeah actually this is one of the good opportunity because we are trying to access the YouTube videos on your website but it also increase the level of vulnerability to their data okay so that is the insecure API so this is one of the thread facing and next is the data breaches what is this data breacher First Let Me Explain you the database data breaching is a situation you call it as a situation or an incident where the data is stolen without the knowledge of user or system owner suppose you are the system owner and you are the user you are trying to work on something on the Internet so without your knowledge the data may be stolen by the third party that is the data breaching data breaching is a situation or an incident where data is stolen without the knowledge of users or system learner so it is one of the Common Thread found in the cloud computing where there is an issue of loss of data is arise okay it is occurred by allowing non-trusted people in network or due to the low security also to overcome this drawback so a solution for this is the users has to allow only trusted people in network and type the security of network as much as possible so what what the solution for this try to use only the trusted people on network and another thing is we have to make it tighten the security of network as much as possible so that is another thread next is a Dos attack what do you mean by does Dos means denial of service d means denial o means of s is a survey denial of service dos attack is the most damaging threat in cloud computing World it can shut your Cloud servers and make it unavailable for the all the users and the Developers so see how much threat it is it is trying to even shut down your Cloud servers also because you are unable to access all the users and the developers also okay the attacker transfers huge traffic to your servers which causes shutting down of servers so how the attacker is playing the role here here the attacker is trying to transfer the huge traffic to your service whenever a large traffic to the services there automatically what is the conjunction is occurred congestion is occur and it creating the shutdowning of the servers also there may be a chances of scheduling of servers so whenever the servers are scheduled the user cannot access their information the solution to overcome this dos attack or what is the solution purchase more bandwidth which can handle huge traffic and other Solutions in your distributed service so what we have to do try to purchase more bandwidth if more bandwidth is if the attacker is trying to send more traffic to your servers your bandwidth is able to handle the traffic whenever it is able to handle the traffic your servers will not get down so this is one of the solution and another is when huge traffic comes to your service transfer it to multiple servers for balancing the load and as this solution is trying to transfer it to multiple servers for balancing the load so these are the two solutions for whenever the Dos attacks are going to be occurred okay without occurring the door say text you can do this try to purchase more values suppose you are not able to try to purchase more bandwidth then try to transfer it to multiple servers for balancing the load next account hijacking see this is also one of the regular attacks that are occurring in the cloud service account is going to be hijacking it is possible for hackers to log into the servers through staff accounts due to weak credentials so the people are trying to keep their weak credentials because if they are trying they thought that maybe uh we will forgot the passwords we will forgo the usernames so that's why they'll keep a simple passwords so whenever the weak credentials are there uh the hacker is easily trace your password and they are trying to log into the servers by using the staff sector so once logged into the server they can steal all important information without knowing anyone without knowing without your information without your knowledge the hacker is trying to access your information by entering into the servers by using your credentials because you are giving a weak credentials whenever you are given the big credential the hacker can easily hack your account email phishing is an another approach which hackers follow what is the same fishing the you'll get some spam emails okay so you whenever you click on that spam or something like the email attachment whenever you try to download the attachment automatically the hacker is entered into your system means he is trying to access your information so then what will be the solution for this so the only solution is generate a credentials of high level try to keep your usernames and the passwords with wrong credentials and never click on emails which seems to be a fraud don't try to open the files which are not related to yours okay this is the only solutions you can maintain your credential safe and your server safe next is insecure applications so if insecure application is also one of the thread that the cloud computing is facing you're not supposed to install those applications which are third party and which are insecure it is just like a keen hole for hackers for enter into servers the solution is always monitor application so don't try to install the and download the insecure applications only trust on The Trusted parties okay don't work on the third parties and always try to install and downloads with the people who are the genuine one okay so the solution is always trying to monitor your application and the last one is using non-trusted cloud service providers there is a security risk in the cloud computing there is a possibility with a non-trusted cloud service providers is that they can access your data because you are using their services right or wrong whenever we are using their services they have the right to they can access your data so if it is not a trusted cloud service providers okay so obviously they can try to access your data because they have the database of users IDs and their passwords you are storing your user IDs and credentials on their servers whenever you are storing your information on their servers there is a chance they can access your credentials so try to use a trusted cloud service providers only don't go for all the whatever they are giving a very best benefits and we have to go with it don't do that okay so try to use only The Trusted cloud service provider so the solution is always try to use a most trusted cloud service provider to save your valuable information so these are all the different security risks in the cloud computing so I hope you understand students still if you are facing any doubt please let me know thank you foreign [Music]