 |
As the cloud is under constant threat of being attacked every second it is essential to make sure its configuration and the services used in the cloud are always under consistent and up-to-date configuration, because misconfiguration can compromise the cloud and its components by exposing its assets by making it a target for cyber attacks. As we mentioned earlier, according to coalfire, 40% of organizations are concerned about cloud misconfiguration. For example, a misconfigured Amazon S3 bucket has resulted in exposure of 48,270 personally identifiable information from Australian employees working in government agencies and banks. The exposed data included passwords, employees names and personal information like phone numbers, emails and credit card numbers. In another incident, the Tea Party PAC(TPPCF) publicly exposed around half a million US voters data through its Amazon S3 bucket. Here we can see a screen of exposed data that had pdf documents with campaign strategies and also personal information collected about voters. We can just see how critical it is when the cloud is misconfigured.
|
IEEE/ICACT20210224 Slide.09
[Big Slide]
[YouTube]