An Examination of Cyber Security Solutions in Public and Private IaaS Infrastructures

Yıl 2024, Cilt: 13 Sayı: 3, 1 - 29, 30.09.2024

İsmail Yoşumaz

https://doi.org/10.55859/ijiss.1475423

Öz

The digital transformation is a dynamic process that unfolds within the data and information cycle, aimed at maximizing the efficiency businesses derive from data and information. For the structuring and sustenance of this process require information processing resources, typically sourced from cloud computing infrastructures. In this context, the aim of this study is to scrutinize the cyber security measures provided by both public and private IaaS infrastructures, aiding businesses in their selection process for digital transformation. To address the objectives of this research, a mixed-methods approach was adopted, integrating both qualitative and quantitative research techniques. The study is structured around two primary research questions. The first research question (RQ1) seeks to delineate the cyber security measures in Amazon AWS EC2, Google Cloud CE, and Proxmox VE IaaS (Internet as a Service) infrastructures. The second research question (RQ2) aims to identify the similarities and differences in cyber security measures across these infrastructures. Additionally, to verify the findings derived from (RQ1) ensure the credibility of the study, and to experimentally examine cyber security measures within these infrastructures, the study adopts an experimental research method from quantitative analysis techniques and the hypothesis (H0) " The findings obtained as a result of RQ1 are confirmed in AWS EC2 and Google Cloud CE IaaS infrastructures" is tested. As a result of the experimental research, hypothesis H0 was accepted.

A review of existing literature, there has been encountered no research that concurrently examines, compares, and experimentally verifies the cybersecurity measures across both public and private IaaS infrastructures. Therefore, this study can be considered to make an original contribution to the existing body of knowledge by addressing an important gap in the literature on the comparative and experimental evaluation of cyber security practices in public and private IaaS infrastructures.

Anahtar Kelimeler

Digital transformation, cloud computing, cyber security, IaaS, technology and innovation management

Kaynakça

• G. Elia, G. Solazzo, A. Lerro, F. Pigni, and C. L. Tucci, “The digital transformation canvas: A conceptual framework for leading the digital transformation process,” Business Horizons. vol. 67, no. 4, pp. 381-398, 2024.
• W. S. Admass, Y. Y. Munaye, and A. A. Diro, “Cyber security: State of the art, challenges and future directions,” Cyber Security and Applications, vol. 2, pp. 100031, 2023.
• A. Zimba and V. Chama, “Cyber attacks in cloud computing: Modelling multi-stage attacks using probability density curves,” International Journal of Computer Network and Information Security, vol. 10, no. 3 pp. 25-36, 2018.
• K. D. Bushay, ”Infrastructure as a Service/Platform as a Service,” in Encyclopedia of Libraries, Librarianship, and Information Science, USA: Elsevier, 2024, pp. 1-15.
• R. Khatake and S. Karande, “Different iaas security attributes and comparison of different cloud providers,” Internation Journal on Advanced Computer Theory and Engineering, vol. 3, no. 1, pp. 13-19, 2014.
• L. Kate Tomchik, “Comparison of the iaas security available from the top three cloud providers,” in Advances in Parallel & Distributed Processing, and Applications (H. R. Arabnia, L. Deligiannidis, M. R. Grimaila, D. D. Hodson, K. Joe, M. Sekijima, and F. G. Tinetti, eds.), Springer International Publishing, 2021, pp. 307-323.
• Gartner. “Gartner says worldwide iaas public cloud services revenue grew 30% in 2022,” Accessed January 25, 2024 [Online]. Available: https://www.gartner.com/en/newsroom/pr ess-releases/2023-07-18-gartner-says-worldwide-iaas-public-c loud-services-revenue-grew-30-percent-in-2022-exceeding-1 00-billion-for-the-first-time
• NIST. ”Nist cloud computing program” Accessed Apr. 23, 2024 [Online]. Available: https://www.nist.gov/programs-projects/ni st-cloud-computing-program-nccp
• Y. Kumar, J. Kumar, and P. Sheoran, “Integration of cloud computing in bci: A review,” Biomedical Signal Processing and Control, vol. 87, no.1, pp. 1-15, 2023.
• P. Mell and T. Grance, “The nist definition of cloud computing - sp 800-145,” NIST Special Publication, vol. 145, no. 1, pp. 1-3, 2011.
• F. Abdullayeva, “Cyber resilience and cyber security issues of intelligent cloud computing systems,” Results in Control and Optimization, vol. 12, no. 9, pp. 1-16, 2023.
• N. Taleb and E. A. Mohamed, “Cloud computing trends: A literature review,” Academic Journal of Interdisciplinary Studies vol. 9, no. 1, pp. 91-104, 2020.
• S. Shilpashree, R. R. Patil, and C. Parvathi, “Cloud computing an overview,” International Journal of Engineering and Technology( UAE), vol. 7, no. 4, pp. 2743-2746, 2018.
• Z. Aalam, V. Kumar, and S. Gour, “A review paper on hypervisor and virtual machine security,” in Journal of Physics: Conference Series., in International Conference on Mechatronics and Artificial Intelligence (ICMAI), vol. 1950, Gurgaon, India, 2021, pp. 1-8.
• R. Mangalagowri and R. Venkataraman, “Hypervisor attack detection using advanced encryption standard (hadaes) algorithm on cloud data,” in International Journal of Computer Networks and Applications, vol. 9, no.5, pp. 555-567, 2022.
• K. Chaoqun, L. Erxia, L. Dongxiao, Y. Xinhong, and L. Xiaoyong, “A dynamic and fine-grained user trust evaluation model for micro-segmentation cloud computing environment,” Journal of Computers, vol. 34, no. 4, pp. 215-232, 2023.
• W. Wang, H. Lin, and J. Wang, “Cnn based lane detection with instance segmentation in edge-cloud computing,” Journal of Cloud Computing, vol. 9, no. 27, pp. 1-10, 2020.
• I. Alobaidan, M. Mackay, and P. Tso, “Build trust in the cloud computing - isolation in container based virtualisation”, presented at the 9th International Conference on Developments in eSystems Engineering, DeSE, Liverpool and Leeds, England, 2016.
• M. M. Bazm, M. Lacoste, M. S¨udholt, and J. M. Menaud, “Isolation in cloud computing infrastructures: new security challenges,” Annales des Telecommunications/Annals of Telecommunications, vol. 74, no. 1, pp. 197-209, 2019.
• Amazon AWS, ”What is amazon vpc?” Accessed January 23, 2024 [Online]. Available: https://docs.aws.amazon.com/vpc/la test/userguide/what-is-amazon-vpc.html
• Amazon AWS, ”What is iam?” Accessed January 23, 2024 [Online]. Available: https://docs.aws.amazon.com/IAM/latest/U serGuide/introduction.html
• Amazon AWS, ”Lightweight hypervisor-nitro.” January 23, 2024 [Online]. Available: https://aws.amazon.com/tr/ec2/nitro/
• Google Cloud, ”Confidential VM.” Accessed January 23, 2024 [Online]. Available: https://cloud.google.com/confidential-com puting/confidential-vm/docs/confidential-vm-overview
• A. Gulbasi and F. Karahan, “Finansal Sistemde Bilgi Teknolojileri ve Kullanımı,” Uluslararası Sosyal ve Ekonomik C， alıs，malar Dergisi, vol. 4, no. 2, pp. 296-319, 2019.
• Z. Zhou, Y. Tian, J. Xiong, C. Peng, J. Li, and N. Yang, “Blockchain and signcryption enabled asynchronous federated learning framework in fog computing,” Accessed January 25, 2024 [Online]. Available: https://www.sciencedirect.com/scienc e/article/pii/S2352864824000336
• Y. I. Alzoubi, A. Al-Ahmad, and H. Kahtan, “Blockchain technology as a fog computing security and privacy solution: An overview,” Computer Communications, vol. 182, no. 1, pp. 129-152, 2022. S. Rizvi and I. Williams, “Analyzing transparency and malicious insiders prevention for cloud computing environment,” Computers and Security, vol. 137, no. 103622, pp. 1-13, 2024.
• A. Galli, V. La Gatta, V. Moscato, M. Postiglione, and G. Sperl`ı, “Explainability in ai-based behavioral malware detection systems,” Computers and Security, vol. 141, no. 103842, pp. 1-17, 2024.
• D. P. F. M¨oller, H. Vakilzadian, and R. E. Haas, “Cybersecurity certificate in digital transformation,” presented at the IEEE International Conference on Electro Information Technology (eIT), Mankato, MN, USA, 2022, pp. 556-561.
• CISA, ”Technical Approaches to Uncovering and Remediating Malicious Activity,” Accessed January 23, 2024 [Online]. Available: https://www.cisa.gov/news-events/cybersecurity-adv isories/aa20-245a
• Proxmox, ”Proxmox VE.” Accessed January 23, 2024 [Online]. Available: https://pve.proxmox.com/wiki/Main Page
• M. Copeland and M. Jacobs, Reduce Cyber Security Vulnerabilities: IaaS and Data. In: Cyber Security on Azure. Apress, Berkeley, CA., 2021 [Online]. Available: https://doi.org/10.100 7/978-1-4842-6531-4 3
• Raturi, A., Kumar, S. and Joshi, A., ”Security Risk Assessment and Mitigation Framework for Cloud-based IT Systems,” presented at the 3rd International Conference on Computing, Analytics and Networks (ICAN), Punjab, India, 2022, pp. 1-5.
• W. K. A. Erlangga and M. R. Ramadhan, “Potential security issues in implementing iaas and paas cloud service models,” International Journal of Informatics, Information System and Computer Engineering, vol. 3, no. 9, pp. 143-162, 2022.
• K. Raja and K. Sujith, “Securing cloud data: An enhanced approach through attribute-based access control mechanism,” International Journal on Recent and Innovation Trends in Computing and Communication, vol. 11, no. 9, pp. 1116-1121, 2023
• B. Zhao, P. Fan, and M. Ni, “Mchain: A blockchain-based vm measurements secure storage approach in iaas cloud with enhanced integrity and controllability,” IEEE Access, vol. 6, no. 1, pp. 43758-43769, 2018.
• P. S. Apirajitha and G. W. Sathianesan, “On developing blockchain based secure storage model (bssm) with auditing and integrity analysis in the cloud,” Concurrency and Computation: Practice and Experience, vol. 36, no. 7, pp. 1-13, 2024.
• Pourvahab, M. and Ekbatanifard, ”Digital Forensics Architecture for Evidence Collection and Provenance Preservation in IaaS Cloud Environment Using SDN and Blockchain Technology,” IEEE Access, vol. 7, no. 1, pp. 153349–153364, 2019.
• Nasreen, S., and Mir, A. H., ”Cloud forensics: A centralized cloud provenance investigation system using MECC,” Concurrency and Computation: Practice and Experience, vol. 36, no. 6, pp. 1-15, 2024.
• Hasimi, L., Zavantis, D., Shakshuki, E., and Yasar, A., ”Cloud Computing Security and Deep Learning: An ANN approach,” Procedia Computer Science, vol. 231, pp. 40–47, 2023.
• Anitha, H. M., Jayarekha, P., Sivaraman, A., Mehta, A., and V, N. (2024). ”SDN enabled role based shared secret scheme for virtual machine security in cloud environment,” Cyber Security and Applications,, vol. 2, no. 10043, pp. 1-8, 2024.
• D. Stutz, J. T. de Assis, A. A. Laghari, A. A. Khan, N. Andreopoulos, A. Terziev, A. Deshpande, D. Kulkarni, and E. G. H. Grata, Enhancing Security in Cloud Computing Using Artificial Intelligence (AI) in Applying Artificial Intelligence in Cybersecurity Analytics and Cyber Threat Detection, Chennai, India: Wiley Publishing, 2024, pp. 179-220.
• W. Ahmad, A. Rasool, A. R. Javed, T. Baker, and Z. Jalil, “Cyber security in iot-based cloud computing: A comprehensive survey,” Electronics, vol. 11, no. 6, pp. 1-34, 2022.
• E. Nas, R. Sak, C， . O¨ . S， endil, and I˙. T. S， ahin-Sak, “Bir aras，tırma yo¨ntemi olarak doku¨man analizi,” Kocaeli U¨ niversitesi Eg˘itim Dergisi, vol. 4, no. 5, pp. 227-250, 2021.
• Virustotal, Accessed January 23, 2024 [Online]. Available: https://www.virustotal.com
• Amazon AWS, ”EC2.” Accessed January 23, 2024 [Online]. Available: https://eu-west-1.console.aws.amazon.com/ec2/ho me?region=eu-west-1#Home:
• [Amazon AWS ”Web Application Firewall, Web Api Protection.” Accessed January 23, 2024 [Online]. Available: https: //aws.amazon.com/waf/
• Amazon AWS, ”Managed ddos protection - aws shield.” Accessed January 23, 2024 [Online]. Available: https: //aws.amazon.com/shield/
• Amazon AWS, ”Control traffic to subnets using network acls.” Accessed January 23, 2024 [Online]. Available: https: //docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls. html?ref=wellarchitected
• Amazon AWS, ”Aws prescriptive guidance.” Accessed January 23, 2024 [Online]. Available: https://docs.aws.amazon.com/pr escriptive-guidance/latest/security-reference-architecture/ai-ml. html
• Amazon AWS, ”Control traffic to your aws resources using security groups.” Accessed January 23, 2024 [Online]. Available: https://docs.aws.amazon.com/vpc/latest/userguide/v pc-security-groups.html
• Amazon AWS, ”What is amazon guardduty?” Accessed January 23, 2024 [Online]. Available: https://docs.aws.amazon. com/guardduty/latest/ug/what-is-guardduty.html
• Amazon AWS, ”Amazon inspector classic (ams ssps).” Accessed January 23, 2024 [Online]. Available: https://docs.aws .amazon.com/managedservices/latest/userguide/inspector.html
• Amazon AWS. ”What is aws security hub?” Accessed January 23, 2024 [Online]. Available: https://docs.aws.amazon.com/se curityhub/latest/userguide/what-is-securityhub.html
• Amazon AWS, ”Aws systems manager and aws organizations.” Accessed January 23, 2024 [Online]. Available: https: //docs.aws.amazon.com/organizations/latest/userguide/service s-that-can-integrate-ssm.html
• Amazon AWS, ”Aws kms key management.” Accessed January 23, 2024 [Online]. Available: https://docs.aws.amazon.com/Am azonRDS/latest/UserGuide/Overview.Encryption.Keys.html
• Amazon AWS, ”Cluster for the Amazon EC2.” Accessed January 25, 2024 [Online]. Available: https://docs.aws.amazon. com/AmazonECS/latest/developerguide/create-ec2-cluster-con sole-v2.html
• Amazon AWS, ”Data centers.” Accessed January 25, 2024 [Online]. Available: https://aws.amazon.com/compliance/data-c enter/data-centers/
• Amazon AWS, ”Amazon ebs snapshots.” Accessed January 25, 2024 [Online]. Available: https://docs.aws.amazon.com/AWSE C2/latest/UserGuide/EBSSnapshots.html
• Amazon AWS, ”Backup as a service - aws backup.” Accessed January 25, 2024 [Online]. Available: https: //aws.amazon.com/backup/
• Google Cloud, ”Compute Engine.” Accessed January 25, 2024 [Online]. Available: https://console.cloud.google.com/
• Google Cloud, ”Cloud Armor.” Accessed January 27, 2024 [Online]. Available: https://cloud.google.com/security/products /armor?hl=en
• Google Cloud, ”Cloud IDS.” Accessed January 27, 2024 [Online]. Available: https://cloud.google.com/security/products /intrusion-detection-system?hl=en
• Google Cloud, ”Cloud firewall.” Accessed January 27, 2024 [Online]. Available: https://cloud.google.com/security/products /firewall?hl=en
• Amazon AWS, ”CE VPC.” Accessed January 27, 2024 [Online]. Available: https://cloud.google.com/products/networking?hl=en
• Google Cloud, ”Logs Explorer.” Accessed January 27, 2024 [Online]. Available: https://cloud.google.com/logging/docs/vi ew/logs-explorer-interface
• Google Cloud, ”Cloud Key Management.” Accessed January 23, 2024 [Online]. Available: https://cloud.google.com/kms/docs
• Google Cloud, ”Identity and Access Management.” Accessed January 25, 2024 [Online]. Available: https://cloud.google.com /iam/docs/
• Google Cloud, ”Data Centers” Accessed January 27, 2024 [Online]. Available: https://www.google.com/about/datacenters/
• Google Cloud, ”CE Snapshots.” Accessed January 29, 2024 [Online]. Available: https://cloud.google.com/compute/docs/di sks/create-snapshots
• Google Cloud, ”Backup and DR.” Accessed January 23, 2024 [Online]. Available: https://cloud.google.com/backup-disaster-r ecovery?hl=en
• Google Cloud, ”Supercharge Security with AI.” Accessed January 25, 2024 [Online]. Available: https://cloud.google.com /security/ai?hl=en
• V. Oleksiuk and O. Oleksiuk, “The practice of developing the academic cloud using the proxmox ve platform,” Educational Technology Quarterly, vol. 1 no. 4, pp. 605-616, 2021.
• S. A. Algarni, M. R. Ikbal, R. Alroobaea, A. S. Ghiduk, and F. Nadeem, “Performance evaluation of xen, kvm, and proxmox hypervisors,” International Journal of Open Source Software and Processes, vol. 9, no. 2, pp. 39-54, 2018.
• M. G. Mihalos, S. I. Nalmpantis, and K. Ovaliadis, “Design and implementation of firewall security policies using linux iptables,” Journal of Engineering Science and Technology Review, vol. 12, no. 1, pp. 80-86, 2019.
• Y. Ariyanto, B. Harijanto, V. A. Firdaus, and S. N. Arief, “Performance analysis of proxmox ve firewall for network security in cloud computing server implementation,” in IOP Conference Series: Materials Science and Engineering, in The 1st Annual Technology, Applied Science, and Engineering Conference, East Java, Indonesia, 2020, pp. 1-6.
• Google Cloud, ”Vm Manager.” Accessed January 23, 2024 [Online]. Available: https://cloud.google.com/compute/docs/vm -manager
• “Hydra documentation,” Accessed January 23, 2024 [Online]. Available: https://www.kali.org/tools/hydra/
• Proxmox, ”Proxmox VE ZFS.” Accessed January 23, 2024 [Online]. Available: https://pve.proxmox.com/wiki/ZFS on L inux
• B. P. Dinachali, S. Jabbehdari, and H. H. S. Javadi, “A pricing approach for optimal use of computing resources in cloud federation,” The Journal of Supercomputing, vol. 79, no. 3, pp. 3055-3094, 2023.
• U. Lichtenthaler, “Profiting from digital transformation? combining data management and artificial intelligence,” International Journal of Service Science, Management, Engineering, and Technology, vol. 12, no. 5, pp. 68-79, 2021.
• Y. Chen, X. Pan, P. Liu, and W. Vanhaverbeke, “How does digital transformation empower knowledge creation? evidence from chinese manufacturing enterprises,” Journal of Innovation and Knowledge, vol. 9, no. 2, pp. 1-15, 2024.
• S. Saeed, S. A. Altamimi, N. A. Alkayyal, E. Alshehri, and D. A. Alabbad, “Digital transformation and cybersecurity challenges for businesses resilience: Issues and recommendations,” MDPI Sensors, vol. 23, no. 15, pp. 1-20, 2023.
• A. Brown, M. Gupta, and M. Abdelsalam, “Automated machine learning for deep learning based malware detection,” Computers and Security, vol. 137, no. 2, pp. 1-17, 2024.
• M. Oyler-Castrillo, N. B. Agostini, G. Sznaier, and D. Kaeli, “Machine learning-based malware detection using recurrent neural networks,” presented at the IEEE MIT Undergraduate Research Technology Conference (URTC), Cambridge, MA, USA, 2019, pp. 1-4.