text:
The Threat of Coexisting With an Unknown Tenant in a Public Cloud
- Jane Garrett
- 1 years ago
- Views:
1 royal holloway The Threat of Coexisting With an Unknown Tenant in a Public Cloud An examination of the vulnerabilities of the cloud, with a focus on the issues of attackers ability to load malicious programs on to the same virtual machine your organisation is using. By Jacobo Ros Chez Ciechanowicz
2 The Threat of Coexisting With an Unknown Tenant in a Public Cloud If we want to protect our network, we add firewalls other network security devices. So far this has worked reasonably well, even though networks systems get more more complex every day. But the rise of the cloud has broken the very foundation of this idea. Now an attacker does not need to penetrate several perimeters to reach sensitive data. Instead, he can rent a virtual machine in a cloud service, from there compromise different targets, thereby avoiding many of the usual security procedures. To underst why how this happens it is necessary to go back to the properties of the cloud that allow this situation: virtualisation multitenancy. enables the resources of a physical machine to be divided or shared through multiple environments which may or may not be aware of the others. These environments are known as virtual machines (VMs). Though multi-tenancy is not defined as an essential characteristic for cloud computing, it is indeed an important part. The main idea behind multi-tenancy is several tenants (or users) coexisting in the same infrastructure. Like the tenants of a building, each one has its own flat but they all live in the same structure. In Infrastructure-as-a-Service (IaaS) cloud environments, multi-tenancy makes use of virtualisation technologies to increase resource utilisation, load balancing, scalability, reliability. This allows the cloud service providers to maximise use of their infrastructure by multiplexing their physi- 2
3 cal machines with virtualisation then assigning the VMs to different clients when required. This could lead to different users coexisting in the same environment. So, in a nutshell, an attacker can rent one of these VMs instantly be shoulder to shoulder with several potential targets. With several users sharing the same physical machine, traditional network security controls become almost useless. The communications between the different VMs in the same machine now go through virtual networks provided by hypervisors whose security controls are still relatively immature. Furthermore, in order to reduce its complexity, the hypervisor does not have sufficient capability to monitor the communications. But there is a bigger problem than the fact that communications between VMs cannot be monitored analysed. Cloud service providers create a dangerous lack of trust between the different VMs by allowing them to coexist without fully comprehending the risks that this can pose. Tenants indeed have a false sense of isolation security, not noticing other tenants who could possibly have harmful intentions against them. Of course, the most insecure state is when you totally believe yourself to be completely secure. The entire situation above gives an attacker a privileged position to perform malicious activities in the cloud, especially in IaaS clouds. That does still not mean the attacker can gain any real profit from it since the coexistent VMs may not be attractive targets. But what if the attacker could select a target somehow manage to locate its malicious VM in the same physical machine? Of course it is not an easy task, the concept of the cloud should not allow it, but it can be possible. There are just a few a VM-to-VM documented attacks but they generally consist of three main steps: 1. locate the target VM place a malicious VM next to it. 2. Gather information about the target VM. 3. Compromise the target VM. Locate place. Mapping the cloud cloud cartography mainly depends on the characteristics of the cloud service provider, so there is no general process to do it. There is not yet much research about this, but some is focused on Amazon s EC2 contains claims that it might also work on other IaaS clouds which provide similar functionality. 3
4 The process used to map the cloud consists of two stages. First it is necessary to enumerate the public services using external probes (for example, nmap, hping, wget). Cloud service providers usually provide an internal DNS service to map public to private IP addresses. So, the second step will be to map the IP addresses of the public services that responded to the first step, to their internal IP addresses. In Amazon s EC2 scenario, two VMs that have the same creation parameters (e.g. region instance type) have a high chance of being co-residents; the creation parameters are also related to the assigned internal IP addresses. So the attacker will first search for the internal IP address using the two steps noted above. Then, because there is a relation between the internal IP address the VMs creation parameters, the attacker can narrow down the search for the right parameters, thereby drastically reducing the number of instances needed before a co-resident placement is achieved. To determine the location of a target, an attacker could use networkbased checks, such as performing a route trace to the target checking the number of hops, or using side-channel vulnerabilities to analyse possible co-residence. The only step left in this phase is to create a VM on the desired machine. The simplest way to do this is by trial error: creating several VMs during a period of time, using the appropriate parameters, checking for co-residence. If the VM instance is not created on the target VM s physical machine, then the VM is terminated another one is launched. This takes advantage of the placement algorithms that tend to launch new VMs with similar parameters on the same physical machine. Because the idea of cloud computing is to maximise resources, if a VM is not being used, it is suspended, re-launched when needed. So an attacker monitors for the activity of the target VM until it is instanced then launches a VM fast enough to be assigned the same physical environment. Gathering compromising. Once the malicious VM has been placed near the target, information about the target is gathered through different side-channels such as measuring the cache usage, or estimating the traffic rate. This could provide valuable information in order to accomplish the last phase of the attack, namely compromising the target, but it is not always the case. If, for example, several VMs are placed in the same physical machine then measuring cache usage may not reveal enough about the target VM since other tenants are accessing the cache too. ly, the target VM can be compromised using either of two different 4
5 vectors. The attacker might decide to attack the VM directly through the compromise of side-channels like memory or virtual networks. This kind of attack is known as a VM-to-VM attack, the goal is to break the isolation of the VM. On the other h, instead trying to attack a VM directly, an attacker could compromise the hypervisor, thereby gaining access to all the resources obtaining full control over the physical machine. In theory, securing the hypervisor against takeover should be feasible since it has much less code than an operating system, but the truth is that the requirements of cloud services force the hypervisor to provide more functionality than ideally it should, thereby increasing its complexity the chances of it being compromised. The most effective way to protect against a threat is to prevent it; so, even though it is important to harden all the elements involved in cloud computing to achieve total isolation between VMs, special attention should be taken to ensure first of all that an attacker cannot select where to place a malicious VM. Of course, the risk of rom VMs being compromised will still be present that is why all the elements must still be hardened, but the attacker would no longer be able to select a specific target. This would mean that if an attacker starts a VM, the chances are high that he will barely know anything about the other VMs coexisting on the same physical machine. Those VMs may have nothing of interest to the attacker. This situation will leave the attacker blindly searching throughout the cloud service. Even if there is an interesting target, it will be complicated for the attacker to recognise its importance. Lack of knowledge about that potential target will further reduce the probability of the VM being compromised. To ensure the safety of their clients, to prepare a good defence strategy plan, the cloud service provider must develop a framework to map the network topology of its cloud. Furthermore, romly assigning internal IP addresses restricting the use of the internal DNS would prevent a malicious VM from scanning the inside of the cloud. Monitoring the creation of VMs is also a good practice to prevent brute-force attacks. A shift to the cloud is inevitable, for many it has to be done. But, as with everything nowadays related to technology, security must be kept 5
6 in mind at all times. Cloud computing adds new vectors for an attacker, because of its immaturity, every aspect of the cloud must be carefully investigated for weakness. multiplies the available resources, but needs to properly isolate each VM. maximises the use of resources, but VMs with different security needs must be separated to minimise their exposure. The ease of an attacker to target a specific VM is what might scare users most, so those cloud service providers that want to highlight security as their insignia should start by hardening their methods for assigning VMs in the cloud. n About the authors: Jacobo Ros successfully pursued his MSc Information Security at Royal Holloway, completing it in Currently he works as a security consultant for the London-based security company Context Information Security. He is mainly involved in security assessment activities, performing web application infrastructure penetration tests. Chez Ciechanowicz is a course director supervisor at Royal Holloway s information security group. His special interests are in risk analysis security management. 6
Evripidis Paraskevas (ECE Dept. UMD) 04/09/2014
Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds (T. Ristenpart, Eran Tromer, Hovav Schacham and Stefan Savage CCS 2009) Evripidis Paraskevas (ECE Dept. UMD) 04/09/2014More information
HEY, YOU, GET OFF OF MY CLOUD: EXPLORING INFORMATION LEAKAGE IN THIRD-PARTY COMPUTE CLOUDS T. Ristenpart, H. Shacham, S. Savage UC San Diego E. Tromer MIT CPCS 722: Advanced Systems Seminar Ewa Syta GETMore information
Cloud computing security
Cloud computing security Exploring information leakage in third-party compute clouds Yangchun Fu November 18 th, 2011 Outline 1 Introduction 2 EC2 cloud cartography 3 Co-residence 4 side-channel cross-vmMore information
Hey, You, Get Off of My Cloud! Exploring Information Leakage in Third-Party Clouds. Thomas Ristenpart, Eran Tromer, Hovav Shacham, Stefan Savage
Hey, You, Get Off of My Cloud! Exploring Information Leakage in Third-Party Clouds Thomas Ristenpart, Eran Tromer, Hovav Shacham, Stefan Savage UCSD MIT UCSD UCSD Today s talk in one slide Third-partyMore information
Computer Science. About PaaS Security. Donghoon Kim Henry E. Schaffer Mladen A. Vouk
About PaaS Security Donghoon Kim Henry E. Schaffer Mladen A. Vouk North Carolina State University, USA May 21, 2015 @ ICACON 2015 Outline Introduction Background Contribution PaaS Vulnerabilities and CountermeasuresMore information
Security in the Cloud: The threat of coexist with an unknown tenant on a public environment. Ros, Jacobo
Security in the Cloud: The threat of coexist with an unknown tenant on a public environment. Ros, Jacobo Student Number: 100692179 Supervisor: Chez Ciechanowicz Submitted as part of the requirements forMore information
Proactively Secure Your Cloud Computing Platform
Proactively Secure Your Cloud Computing Platform Dr. Krutartha Patel Security Engineer 2010 Check Point Software Technologies Ltd. [Restricted] ONLY for designated groups and individuals Agenda 1 CloudMore information
Security of Cloud Computing
Security of Cloud Computing Fabrizio Baiardi firstname.lastname@example.com 1 Syllabus Cloud Computing Introduction Definitions Economic Reasons Service Model Deployment Model Supporting Technologies VirtualizationMore information
A Measurement Study on Co-residence Threat inside the Cloud
A Measurement Study on Co-residence Threat inside the Cloud Zhang Xu, College of William and Mary; Haining Wang, University of Delaware; Zhenyu Wu, NEC Laboratories America https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/xuMore information
Cloud Computing Governance & Security. Security Risks in the Cloud
Cloud Computing Governance & Security The top ten questions you have to ask Mike Small CEng, FBCS, CITP Fellow Analyst, KuppingerCole This Webinar is supported by Agenda What is the Problem? Ten CloudMore information
Top virtualization security risks and how to prevent them
E-Guide Top virtualization security risks and how to prevent them There are multiple attack avenues in virtual environments, but this tip highlights the most common threats that are likely to be experiencedMore information
Control your corner of the cloud.
Chapter 1 of 5 Control your corner of the cloud. From the halls of government to the high-rise towers of the corporate world, forward-looking organizations are recognizing the potential of cloud computingMore information
Bio-inspired cyber security for your enterprise
Bio-inspired cyber security for your enterprise Delivering global protection Perception is a network security service that protects your organisation from threats that existing security solutions can tMore information
Securing Industrial Control Systems on a Virtual Platform
Securing Industrial Control Systems on a Virtual Platform How to Best Protect the Vital Virtual Business Assets WHITE PAPER Sajid Nazir and Mark Lazarides firstname.lastname@example.com 9 Feb, 2016 firstname.lastname@example.com information
SHIV SHAKTI International Journal of in Multidisciplinary and Academic Research (SSIJMAR) Vol. 4, No. 5, October 2015 (ISSN 2278 5973)
SHIV SHAKTI International Journal of in Multidisciplinary and Academic Research (SSIJMAR) Vol. 4, No. 5, October 2015 (ISSN 2278 5973) Cloud Computing: Security Issues In Infrastructure-As-A-Service ModelMore information
Cloud security CS642: Computer Security Professor Ristenpart h9p://www.cs.wisc.edu/~rist/ rist at cs dot wisc dot edu University of Wisconsin CS 642
Cloud security CS642: Computer Security Professor Ristenpart h9p://www.cs.wisc.edu/~rist/ rist at cs dot wisc dot edu University of Wisconsin CS 642 Announcements Take- home final versus in- class HomeworkMore information
Secure your Virtual World with Cyberoam
White paper Secure your Virtual World with Cyberoam www.cyberoam.com Virtualization The Why and the What... Rising Data Center costs... Ever-increasing demand for data storage... Under-utilized processors...More information
HONEYPOT SECURITY. February 2008. The Government of the Hong Kong Special Administrative Region
HONEYPOT SECURITY February 2008 The Government of the Hong Kong Special Administrative Region The contents of this document remain the property of, and may not be reproduced in whole or in part withoutMore information
Impact of Denial of Service Attack on the Virtualization in Cloud Computing
Impact of Denial of Service Attack on the Virtualization in Cloud Computing Kanika 1 and Navjot Sidhu 2 1,2 Centre for Computer Science and Technology, Central University of Punjab, Bathinda, India E-mal:More information
Security Management of Cloud-Native Applications. Presented By: Rohit Sharma MSc in Dependable Software Systems (DESEM)
Security Management of Cloud-Native Applications Presented By: Rohit Sharma MSc in Dependable Software Systems (DESEM) 1 Outline Context State-of-the-Art Design Patterns Threats to cloud systems SecurityMore information
Appendix to; Assessing Systemic Risk to Cloud Computing Technology as Complex Interconnected Systems of Systems
Appendix to; Assessing Systemic Risk to Cloud Computing Technology as Complex Interconnected Systems of Systems Yacov Y. Haimes and Barry M. Horowitz Zhenyu Guo, Eva Andrijcic, and Joshua Bogdanor CenterMore information
UNCLASSIFIED Version 1.0 May 2012
Secure By Default: Platforms Computing platforms contain vulnerabilities that can be exploited for malicious purposes. Often exploitation does not require a high degree of expertise, as tools and adviceMore information
Can PCI DSS Compliance Be Achieved in a Cloud Environment?
royal holloway Can Compliance Be Achieved in a Cloud Environment? Organisations are considering whether to run -based systems in a cloud environment. The security controls in the cloud may be sufficientMore information
CSE543 Computer and Network Security Module: Cloud Computing
CSE543 Computer and Network Security Module: Computing Professor Trent Jaeger 1 Computing Is Here Systems and Internet Infrastructure Security (SIIS) Laboratory 2 Computing Is Here Systems and InternetMore information
001011 1100010110 0010110001 010110001 0110001011000 011000101100 010101010101APPLICATIO 0 010WIRELESS110001 10100MOBILE00010100111010 0010NETW110001100001 10101APPLICATION00010 00100101010WIRELESS110More information
whitepaper Cloud Servers: New Risk Considerations
whitepaper Cloud Servers: New Risk Considerations Overview...2 Cloud Servers Attract e-criminals...2 Servers Have More Exposure in the Cloud...3 Cloud Elasticity Multiplies Attackable Surface Area...3More information
Securing Virtual Applications and Servers
White Paper Securing Virtual Applications and Servers Overview Security concerns are the most often cited obstacle to application virtualization and adoption of cloud-computing models. Merely replicatingMore information
Network performance in virtual infrastructures
Network performance in virtual infrastructures A closer look at Amazon EC2 Alexandru-Dorin GIURGIU University of Amsterdam System and Network Engineering Master 03 February 2010 Coordinators: Paola GrossoMore information
Use Case Brief NETWORK SECURITY
Use Case Brief NETWORK SECURITY As Datacenter architectures have incorporated virtualization, new application topologies, and new programming constructs such as Docker Containers, new security gaps haveMore information
Securing Cloud Infrastructures with Elastic Security
Securing Cloud Infrastructures with Elastic Security White Paper September 2012 SecludIT 1047 route des dolines, 06560 Sophia Antipolis, France T +33 489 866 919 firstname.lastname@example.com http://secludit.com CoreMore information
DISTRIBUTED SYSTEMS [COMP9243] Lecture 9a: Cloud Computing WHAT IS CLOUD COMPUTING? 2
DISTRIBUTED SYSTEMS [COMP9243] Lecture 9a: Cloud Computing Slide 1 Slide 3 A style of computing in which dynamically scalable and often virtualized resources are provided as a service over the Internet.More information
Unmasking Virtualization Security. Eric A. Hibbard, CISSP, CISA Hitachi Data Systems
Eric A. Hibbard, CISSP, CISA Hitachi Data Systems SNIA Legal Notice The material contained in this tutorial is copyrighted by the SNIA unless otherwise noted. Member companies and individual members mayMore information
Hyper-V Network Virtualization Gateways - Fundamental Building Blocks of the Private Cloud
Hyper-V Network Virtualization Gateways - nappliance White Paper July 2012 Introduction There are a number of challenges that enterprise customers are facing nowadays as they move more of their resourcesMore information
Critical Security Controls
Critical Security Controls Session 2: The Critical Controls v1.0 Chris Beal Chief Security Architect MCNC email@example.com @mcncsecurity on Twitter The Critical Security Controls The Critical SecurityMore information
ENISA Cloud Computing Security Strategy
ENISA Cloud Computing Security Strategy Dr Giles Hogben European Network and Information Security Agency (ENISA) What is Cloud Computing? Isn t it just old hat? What is cloud computing ENISA s understandingMore information
Security Challenges of Cloud Providers ( Wie baue ich sichere Luftschlösser in den Wolken )
23.11.2015 Jan Philipp Manager, Cyber Risk Services Enterprise Architect Security Challenges of Cloud Providers ( Wie baue ich sichere Luftschlösser in den Wolken ) Purpose today Introduction» Who I amMore information
The Challenges of Securing Hosting Hyper-V Multi-Tenant Environments
#1 Management and Security for Windows Server and Hyper-V The Challenges of Securing Hosting Hyper-V Multi-Tenant Environments by Brien M. Posey In the not too distant past, VMware was the hypervisor ofMore information
IBM Cloud Security Draft for Discussion September 12, 2011. 2011 IBM Corporation
IBM Cloud Security Draft for Discussion September 12, 2011 IBM Point of View: Cloud can be made secure for business As with most new technology paradigms, security concerns surrounding cloud computingMore information
Learn the essentials of virtualization security
Learn the essentials of virtualization security White Paper Table of Contents 3 Introduction 4 Hypervisor connectivity and risks 4 Multi-tenancy risks 5 Management and operational network risks 5 StorageMore information
Intrusive vs. Non-Intrusive Vulnerability Scanning Technology
WHITE PAPER Intrusive vs. Non-Intrusive Vulnerability Scanning Technology Retina Network Security Scanner Table of Contents The Smash-and-Grab: Taking the Low Road 3 The Smooth Caper: Taking the High RoadMore information
Testing Network Virtualization For Data Center and Cloud VERYX TECHNOLOGIES
Testing Network Virtualization For Data Center and Cloud VERYX TECHNOLOGIES Table of Contents Introduction... 1 Network Virtualization Overview... 1 Network Virtualization Key Requirements to be validated...More information
The Cloud, Virtualization, and Security
A Cloud: Large groups of remote servers that are networked to allow centralized, shared data storage and online access to computer services or resources A Cloud: Large groups of remote servers that areMore information
Trend Micro Cloud Protection
A Trend Micro White Paper August 2015 Trend Micro Cloud Protection Security for Your Unique Cloud Infrastructure Contents Introduction...3 Private Cloud...4 VM-Level Security...4 Agentless Security toMore information
Ensuring security the last barrier to Cloud adoption
Ensuring security the last barrier to Cloud adoption Publication date: March 2011 Ensuring security the last barrier to Cloud adoption Cloud computing has powerful attractions for the organisation. ItMore information
Cloud Infrastructure Services for Service Providers VERYX TECHNOLOGIES
Cloud Infrastructure Services for Service Providers VERYX TECHNOLOGIES Meeting the 7 Challenges in Testing and Performance Management Introduction With advent of the cloud paradigm, organizations are transitioningMore information
Firewalls Overview and Best Practices. White Paper
Firewalls Overview and Best Practices White Paper Copyright Decipher Information Systems, 2005. All rights reserved. The information in this publication is furnished for information use only, does notMore information
WHAT ARE THE BENEFITS OF OUTSOURCING NETWORK SECURITY? Contents Introduction.... 3 What Types of Network Security Services are Available?... 4 Penetration Testing and Vulnerability Assessment... 4 CyberMore information
Dedicated or Cloud Servers
100TB.com Dedicated or Cloud Servers which should you choose? Dedicated or cloud servers which should you choose? Introduction For the past few years, the primary focus for much of the hosting industryMore information
PCI DSS Virtualization Guidelines. Information Supplement: PCI Data Security Standard (PCI DSS) Version: 2.0 Date: June 2011
Standard: Version: 2.0 Date: June 2011 Author: PCI Data Security Standard (PCI DSS) Virtualization Special Interest Group PCI Security Standards Council Information Supplement: PCI DSS Virtualization GuidelinesMore information
SURVEY ON VIRTUALIZATION VULNERABILITIES Indumathy M Department of MCA, Acharya Institute of Technology, Bangalore, (India) ABSTRACT Virtualization plays a major role in serving the organizations to reduceMore information
Virtualisation security: Virtual machine monitoring and introspection
Virtualisation security: Virtual machine monitoring and introspection ISATION Increasingly, critical systems are being virtualised in the name of cost savings. At the same time, there has been an increaseMore information
UMHLABUYALINGANA MUNICIPALITY FIREWALL MANAGEMENT POLICY Firewall Management Policy Approval and Version Control Approval Process: Position or Meeting Number: Date: Originator: Recommended by DirectorMore information
Security Model for VM in Cloud
Security Model for VM in Cloud 1 Venkataramana.Kanaparti, 2 Naveen Kumar R, 3 Rajani.S, 4 Padmavathamma M, 5 Anitha.C 1,2,3,5 Research Scholars, 4Research Supervisor 1,2,3,4,5 Dept. of Computer Science,More information
External Supplier Control Requirements
External Supplier Control s Cyber Security For Suppliers Categorised as Low Cyber Risk 1. Asset Protection and System Configuration Barclays Data and the assets or systems storing or processing it mustMore information
Keep you computer running Keep your documents safe Identity theft Spreading infection Data Integrity (DPA: Data Protection Act)
Security Analysis E-Commerce Security 2008 Matthew Cook Network & Security Manager Loughborough University Why bother? Keep you computer running Keep your documents safe Identity theft Spreading infectionMore information
Learn the Essentials of Virtualization Security
Learn the Essentials of Virtualization Security by Dave Shackleford by Dave Shackleford This paper is the first in a series about the essential security issues arising from virtualization and the adoptionMore information
Study on Cloud security in Japan
Study on Cloud security in Japan 2011/February Professor Yonosuke HARADA INSTITUTE of INFORMATION SECURITY (C) ITGI Japan Content 1 Background 2 Survey 2.1 Respondents 2.2 User on cloud services 2.3 RiskMore information
Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds
Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds Thomas Ristenpart Eran Tromer Hovav Shacham Stefan Savage Dept. of Computer Science and Engineering UniversityMore information
Stephen Coty Director, Threat Research
Emerging threats facing Cloud Computing Stephen Coty Director, Threat Research Cloud Environments 101 Cloud Adoption is Gaining Momentum Cloud market revenue will increase at a 36% annual rate AnalystMore information
The Magazine for IT Security. May 2010. issue 3. sör alex / photocase.com
The Magazine for IT Security May 2010 sör alex / photocase.com free digital version made in Germany issue 3 Luiz Fotolia.com Clouds or storm clouds? Cloud Computing Security by Javier Moreno Molinero Gradually,More information
VIRTUALIZATION SECURITY OPTIONS: CHOOSE WISELY With Kaspersky, now you can. kaspersky.com/business Be Ready for What s Next One Size Does Not Fit All 1 For virtualization security, there s no one sizeMore information
24 July 2013 TimeTec Cloud Security FACING SECURITY CHALLENGES HEAD-ON - by Mr. Daryl Choo, Chief Information Officer, FingerTec HQ Cloud usage and trend Cloud Computing is getting more common nowadaysMore information
Abstract. Cloud Computing: The Future is Containers. Larry Gene Hastings Jr. firstname.lastname@example.com
Running Head: CLOUD COMPUTING: THE FUTURE IS CONTAINERS Abstract Cloud Computing: The Future is Containers by Larry Gene Hastings Jr. firstname.lastname@example.com Term Paper for Fulfillment of ICTN 6875More information
A Review on Zero Day Attack Safety Using Different Scenarios
Available online www.ejaet.com European Journal of Advances in Engineering and Technology, 2015, 2(1): 30-34 Review Article ISSN: 2394-658X A Review on Zero Day Attack Safety Using Different ScenariosMore information
Hands-on Hacking Unlimited
About Zone-H Attacks techniques (%) File Inclusion Shares misconfiguration SQL Injection DNS attack through social engineering Web Server external module intrusion Attack against the administrator/userMore information
WHITE PAPER. An Introduction to Network- Vulnerability Testing
An Introduction to Network- Vulnerability Testing C ONTENTS + Introduction 3 + Penetration-Testing Overview 3 Step 1: Defining the Scope 4 Step 2: Performing the Penetration Test 5 Step 3: Reporting andMore information
Concierge SIEM Reporting Overview
Concierge SIEM Reporting Overview Table of Contents Introduction... 2 Inventory View... 3 Internal Traffic View (IP Flow Data)... 4 External Traffic View (HTTP, SSL and DNS)... 5 Risk View (IPS AlertsMore information
Does your Citrix or Terminal Server environment have an Achilles heel?
CRYPTZONE WHITE PAPER Does your Citrix or Terminal Server environment have an Achilles heel? Moving away from IP-centric to role-based access controls to secure Citrix and Terminal Server user access cryptzone.comMore information
Vodafone Cloud & Hosting Services. Gary Goodenough 13 th November 2015
Vodafone Cloud & Hosting Services Gary Goodenough 13 th November 2015 1 So, you ll all know Vodafone for these 2 But, we also do this and this 3 4 Market trends and customer challenges Your World/ OurMore information
Database Security, Virtualization and Cloud Computing
Whitepaper Database Security, Virtualization and Cloud Computing The three key technology challenges in protecting sensitive data in modern IT architectures Including: Limitations of existing databaseMore information
Analysis of Cloud Computing Vulnerabilities
International Journal of Innovation and Scientific Research ISSN 2351-8014 Vol. 2 No. 2 Jun. 2014, pp. 308-312 2014 Innovative Space of Scientific Research Journals http://www.ijisr.issr-journals.org/More information
Virtual Machine in Data Center Switches Huawei Virtual System
Virtual Machine in Data Center Switches Huawei Virtual System Contents 1 Introduction... 3 2 VS: From the Aspect of Virtualization Technology... 3 3 VS: From the Aspect of Market Driving... 4 4 VS: FromMore information
An Introduction to Network Vulnerability Testing
CONTENTS Introduction 3 Penetration Testing Overview 4 Step 1: Defining the Scope 4 Step 2: Performing the Penetration Test 5 Step 3: Reporting and Delivering Results 6 VeriSign SecureTEST 7 Common VulnerabilityMore information
Cloud Security: Evaluating Risks within IAAS/PAAS/SAAS
Cloud Security: Evaluating Risks within IAAS/PAAS/SAAS Char Sample Security Engineer, Carnegie Mellon University CERT Information Security Decisions TechTarget Disclaimer Standard Disclaimer - This talkMore information
Why Leaks Matter. Leak Detection and Mitigation as a Critical Element of Network Assurance. A publication of Lumeta Corporation www.lumeta.
Why Leaks Matter Leak Detection and Mitigation as a Critical Element of Network Assurance A publication of Lumeta Corporation www.lumeta.com Table of Contents Executive Summary Defining a Leak How LeaksMore information
Nessus. A short review of the Nessus computer network vulnerability analysing tool. Authors: Henrik Andersson Johannes Gumbel Martin Andersson
Nessus A short review of the Nessus computer network vulnerability analysing tool Authors: Henrik Andersson Johannes Gumbel Martin Andersson Introduction What is a security scanner? A security scannerMore information
AN INVESTIGATION OF SECURITY THEME FOR CLOUD COMPUTING Mrs. J. Pavithra 1 Mr. A. Naveen 2 1 (MRIT, Hyderabad, India, firstname.lastname@example.com) 2 (Asst. Professor, MRIT, Hyderabad, India, email@example.com)More information
Information Security Organizations trends are becoming increasingly reliant upon information technology in
DATASHEET PENETRATION TESTING SERVICE Sales Inquiries: firstname.lastname@example.com Visit us: http://www.spentera.com Protect Your Business. Get Your Service Quotations Today! Copyright 2011. PT. Spentera. All RightsMore information
FIREWALLS VIEWPOINT 02/2006 31 MARCH 2006 This paper was previously published by the National Infrastructure Security Co-ordination Centre (NISCC) a predecessor organisation to the Centre for the ProtectionMore information
Virtual Machines and Security Paola Stone Martinez East Carolina University November, 2013.
Virtual Machines and Security Paola Stone Martinez East Carolina University November, 2013. Keywords: virtualization, virtual machine, security. 1. Virtualization The rapid growth of technologies, nowadays,More information
Secure Cloud Computing with a Virtualized Network Infrastructure
Secure Cloud Computing with a Virtualized Network Infrastructure Fang Hao, T.V. Lakshman, Sarit Mukherjee, Haoyu Song Bell Labs Cloud Security: All or Nothing? Amazon EC2 Government Cloud Shared computing,More information
040020305-Penetration Testing 2014
Comprehensive Questions/Practical Based :- 040020305-Penetration Testing 2014 1. Demonstrate the installation of BackTrack using Live DVD. Also list all the steps. 2. Demonstrate the installation of BackTrackMore information
Security Auditing in a Virtual Environment
Security Auditing in a Virtual Environment Security auditing considerations within a Virtual Environment Increasing and widespread use of the virtual platform can be seen as a direct response by enterprisesMore information
5 Best Practices to Protect Your Virtual Environment
CONTENTS OF THIS WHITE PAPER Security Virtualization s Big Hurdle..1 Why Old-STyle Protections Fall short..2 Best Practices...3 Create A VM Service Good List... 3 Monitor and Protect the Hypervisor...More information
Top 3 Undiscovered Vulnerabilities IPsonar Finds on a First Scan
Top 3 Undiscovered Vulnerabilities IPsonar Finds on a First Scan A publication of Lumeta Corporation www.lumeta.com Introduction Large enterprises function in an ever-expanding IP space and often haveMore information
Intrusion Detection Systems and Supporting Tools. Ian Welch NWEN 405 Week 12
Intrusion Detection Systems and Supporting Tools Ian Welch NWEN 405 Week 12 IDS CONCEPTS Firewalls. Intrusion detection systems. Anderson publishes paper outlining security problems 1972 DNS created 1984More information
Cisco IPS Tuning Overview
Cisco IPS Tuning Overview Overview Increasingly sophisticated attacks on business networks can impede business productivity, obstruct access to applications and resources, and significantly disrupt communications.More information
CLOUD COMPUTING SECURITY HP Labs G-Cloud A Secure Cloud Infrastructure Frederic Gittler Cloud and Security Laboratory, HP Labs Covering A few words about HP Labs An outline of Cloud Computing BusinessMore information
solution brief PCI COMPLIANCE ON AWS: HOW TREND MICRO CAN HELP AWS AND PCI DSS COMPLIANCE To ensure an end-to-end secure computing environment, Amazon Web Services (AWS) employs a shared security responsibilityMore information
SECURITY CONCERNS AND SOLUTIONS FOR CLOUD COMPUTING 1. K.SURIYA Assistant professor Department of Computer Applications Dhanalakshmi Srinivasan College of Arts and Science for Womren Perambalur Mail: email@example.com information
A Decision Maker s Guide to Securing an IT Infrastructure
A Decision Maker s Guide to Securing an IT Infrastructure A Rackspace White Paper Spring 2010 Summary With so many malicious attacks taking place now, securing an IT infrastructure is vital. The purposeMore information
7 Ways OpenStack Enables Automation & Agility for KVM Environments
7 Ways OpenStack Enables Automation & Agility for KVM Environments Table of Contents 1. Executive Summary 1 2. About Platform9 Managed OpenStack 2 3. 7 Benefits of Automating your KVM with OpenStack 1.More information
STRATEGIC WHITE PAPER. Securing cloud environments with Nuage Networks VSP: Policy-based security automation and microsegmentation overview
STRATEGIC WHITE PAPER Securing cloud environments with Nuage Networks VSP: Policy-based security automation and microsegmentation overview Abstract Cloud architectures rely on Software-Defined NetworkingMore information
IBM Cloud Academy Conference ICACON 2015
by Eman Hossny, Sherif Khattab, Fatma Omara, Hesham Hassan Faculty of Computers and Information, Cairo University IBM Cloud Academy Conference ICACON 2015 Background Motivation Objective BTB Service EASI-CLOUDSMore information
How to Grow and Transform your Security Program into the Cloud
How to Grow and Transform your Security Program into the Cloud Wolfgang Kandek Qualys, Inc. Session ID: SPO-207 Session Classification: Intermediate Agenda Introduction Fundamentals of Vulnerability ManagementMore information
Effective End-to-End Cloud Security
Effective End-to-End Cloud Security Securing Your Journey to the Cloud Trend Micro SecureCloud A Trend Micro & VMware White Paper August 2011 I. EXECUTIVE SUMMARY This is the first paper of a series ofMore information
Security in Cloud Computing using Virtualization-Level
Security in Cloud Computing using Virtualization-Level Ravishankar M P (1), Archana C (2), Yashaswi N P (3) (1) Assistant Professor, Computer Science & Engineering Department, Coorg Institute of Technology,More information
Security Issues in Cloud Computing
Security Issues in Cloud Computing Dr. A. Askarunisa Professor and Head Vickram College of Engineering, Madurai, Tamilnadu, India N.Ganesh Sr.Lecturer Vickram College of Engineering, Madurai, Tamilnadu,More information
Residual risk. 3 Compliance challenges (i.e. right to examine, exit clause, privacy acy etc.)
Organizational risks 1 Lock-in Risk of not being able to migrate easily from one provider to another 2 Loss of Governance Control and influence on the cloud providers, and conflicts between customer hardeningMore information


text:
Manufactured by
ONLY FOR X-PLANE 9.5 (or higher) C152II.
• Four different paints with maximum details and realistic textures - Polygon optimized model - Includes: Interactive virtual cockpit - Full moving parts: Ailerons, elevators, rudders, flaps, rolling wheels
• Animated sections such as: doors, pilot and copilot's window, ashtray, copilot seat, glove compartment, sun visor, fresh air control
• realistic lights: Navigation lights, beacons, landing lights - 3D modeled pilot and cockpit area - Real Propeller - Many details as: pitot pressure chamber, antennas, chocks, pitot tube cover
• Realistic textures and original paint designs - Custom panel and gauges - Realistic light effects on gauges - Nightlight effects on panel
• Full checklist - Similar behavior compared to the real airplane - Real weight and balance - PDF document with information - 1 person on board
• Windows 7, Vista, XP, MAC OS 10.3.9 (or higher) and Linux compatible.
Positive SSL

subset: commoncrawl


text: To get from Maddaloni to Vicenza by train you can catch one of the 15 trains that everyday travel between these two cities. The first train to Vicenza leaves from Maddaloni at 06:04 and the last train departs at 15:59. If you choose a local train the trip lasts on average 06:15 hours. For your trip from Maddaloni to Vicenza by train you can choose to leave from one of Maddaloni main stations: Maddaloni Inferiore On Wanderio you can compare all schedules, fares and railway companies to Vicenza and book the best itinerary starting from Maddaloni.


text:
15 Comments
Dazzudeboy Artist
nice placement)+1
mrdavenport Artist from NC, United States
nice one! saw this on teefury. +1
LukeLukeLuke Artist
placement is perfect. print!!!!!
cool design.. voted
derekfilley Human
Reminds me of a sunflower… Illuminator's right, reminds me of a Spirograph. I loved that toy!
I'm digging the placement. Has a retro feel to it – right on!
gilmoreart Artist from United States
pretty cool Andy!
SantoMuerto Artist
This is a insane piece of artwork. I like to know how you did it. Great job. Voted 4 Ya
illuminator Human
Cool! Reminds me of the spyrograph toy I used to have when I was a kid. :)
BootsBoots Artist from Pennsylvania, United States
Nice, Andy. Agreed that the placement is awesome.
theinfinityloop Artist
Nice and summery. I like it! +1
the placement and the dots turn this from bleh to amazing
wispofcloud Human
Beautiful! Love the intense colors. Saw this in your post on tee fury. :) +1
I voted a long time ago, just thought I left a comment. great job andy


text: The Aerie, Yearbook of University of North Texas, 1990 Aerie 1990 Aerie University of North Texas Flanagain, Sharon Gaw, Kristen McPherson, Mickey Dudley, Christine Gibson, Daniel Chin, Craig Lynass, Kathryn Martens, Brian Polm, Melissa Keffer, Lindsay University of North Texas Josten's Printing and Publishing 1990 English Yearbook for University of North Texas in Denton, Texas includes photos of and information about the school, student body, professors, and organizations. Index starts on page 316. North Texas State Normal College -- Students -- Yearbooks. North Texas State Teachers College -- Students -- Yearbooks. North Texas State College -- Students -- Yearbooks. North Texas State University -- Students -- Yearbooks. University of North Texas -- Students -- Yearbooks. Education - Colleges and Universities Education - Yearbooks People Social Life and Customs - Clubs and Organizations Sports and Recreation Arts and Crafts opening student life administration portraits greeks organizations arts entertainment sports advertisements United States - Texas - Denton County - Denton Into Modern Times, 1939-Present 1989-1990 Yearbook 336 p. : ill. ; 32 cm. Text oclc: 16414766 https://digital.library.unt.edu/ark:/67531/metapth61055/ ark: ark:/67531/metapth61055