Importance Of Cloud Security In The Public Sector

A successful IT system is something that is composed of several different functional components to make it a whole. It takes each component to efficiently work so that the entire system runs smoothly. When one or more parts of the system are not properly working it can affect the entire IT system as a whole and render it completely vulnerable to people with malicious intentions. In this paper I will discuss the role of each component in it and shed some light as to why each is needed.

Defense in depth identifies the need for many security layers to be utilised in defense of the system from the bottom as physical security to the top as Data security.

Introduction: - for my research project, I would like to explore about the cyber security measures. Cybersecurity covers the fundamental concepts underlying the construction of secure systems from the hardware to the software to the human computer interface, with the use of cryptography to secure interactions. These concepts are easily augmented with hands-on exercises involving relevant tools and techniques. We have different types of computer related crimes, cybercrimes, computer related offenses, federal approaches defenses. The information resources management has the technical matters for which IT are widely known. Cyber resources and cyber power as well as cyber security. We have spent a lot of time talking about many different high level critical infrastructure protection concepts we have general rule stayed away from cyber security explaining the ins and out of how the NIPP and NRF work together to ensure that we can live our daily live in relative comfort.

The Department of Homeland Security (DHS) is Incharge of shielding our country’s crucial infrastructure from physical and cyber dangers. Of the varied kinds of infrastructure, cyberspace is crucial constituting the information regarding the government and business operations, crisis management and readiness information, and our crucial digital and process control systems. Safeguarding these critical resources and infrastructure is

Today however, a new type of warfare has emerged and occurs when outside entities conduct an attack on a power grid, network, or both with the intent of causing damage. This type of warfare is called cyber warfare. In the United States computers control everything. It is no secret that hostile countries and terrorist organizations are cognizant and they know our economy, security, and infrastructure can be crippled by a successful cyber-attack. Examples of potential targets for cyber terrorists include military bases, water systems, banking facilities, air traffic control centers and power plants. Even the Commander in Chief, President Obama has stated the threat of a cyber war is real and we must prepare for it and increase our security measures. First, this paper will discuss cyberterrorism and cyber-attacks as they pose a direct threat to national security and the economy. Then, we will review cyber-attacks against the U.S. from China, Iran, and Russia along with the impact and possible ramifications from those attacks. Finally, this paper discusses U.S. strategies to minimize the impact of cyber-attacks.

2.4.7 Rapid intrusion detection and response procedures: KIU should have mechanisms in place to reduce the risk of undetected system intrusions. Computing systems are never perfectly secure. When a security failure occurs and an attacker is "in" the institution's system, only rapid detection and reaction can minimize any damage that might occur. Techniques used to identify intrusions include intrusion detection systems (IDS) for the network and individual servers (i.e., host computer), automated log correlation and analysis, and the identification and analysis of operational

In cutting edge business situations that depend vigorously on data innovation, the system security review or evaluation is a crucial part of system support and repair. A system security advisor will regularly play out a review as the primary stage in giving counseling administrations to a business. Notwithstanding, these establishment building reviews, organizations should likewise perform system security reviews or appraisals all the time to guarantee ideal execution.

The cyber threats affect both government and non-governmental organizations. An attack on these organizations can have an impact on the economy. For instance, an attack on the banking infrastructure or stock market can affect then country’s economic operations. There are various organizations

2. DSB Task Force, “Resilient Military Systems and the Advanced Cyber Threat,” Defense Science Board, 18 January 2013, http://www.acq.osd.mil/dsb/reports/ResilientMilitarySystems. CyberThreat.pdf.

"Something that has been mentioned indirectly a few times already is the concept of defense in depth. The concept of defense in depth originated from the military and was seen as a way to delay rather than prevent an attack. As an information security tactic, it is based on the concept of layering more than one control. These controls can be physical, administrative, or technical in design. We have looked at a variety of physical controls in this chapter such as locks, doors, fences, gates, and barriers. Administrative controls include policies

The defense in depth concept is constructed to rapidly characterize, attribute, and respond to attacks and is given the name Defense of The Grid System or DTGS. The DTGS provides the capability to monitor, detect, analyze, and respond to unauthorized activity, as well as unintentional, non-malicious user errors within the iSOC, Tops, and Gen, components of the DTGS. For the DTGS system and its monitored component systems, must detect attacks and respond quickly (e.g. limiting access, excising users, or even disconnecting from the network.) The DTGS Interface Control Document (ICD) addresses five operational capabilities: DTGS defense from cyber-attack, maintaining service while under attack, recovering from cyber-attack and reduce vulnerabilities, monitoring Information Assistance (IA) of the DTGS.

All of us have an opinion about Cloud computing. Leaders in the industry think of it as a form of outsourcing, largely eliminates operational responsibilities, and offers substantial scalability and elasticity, the ability to store large amounts of data that is available only to authorized applications or users.

Imagine if you were an employee of a large credit card corporation such as Visa or MasterCard. You can make up to $90,000 a year but all of a sudden your bank account was $0.00 along with all your coworkers, bosses and the company stock dropped to zero. There would be panic, chaos and disorder due to everyone losing their money. The culprit of such a chaotic situation was a result of a cyber-attack by a hacker. The cyber attacker hacked into the system and caused the databases to transfer all of the money into some bank accounts elsewhere. This is just one example of cyber terrorism and all the damage it is can do to people lives. Businesses corporations are usually not targets of terrorism, but government databases usually are targeted. Cyber terrorist often try to hack into government databases and steal information that would be valuable to America but dangerous in the hands of terrorist. Through cyber-attacks information for nuclear weapons, shut down codes or other government secrets can be gained by a number of terrorist organizations. “ cyber-attacks on our nation private sector and government networks have increased dramatically in the past decade” ( www.fbi.gov) This increase in attacks means that there is a higher chance that terrorist can shut major power grids and leave millions without power or disrupt the stock market to cause mass panic in the

Cloud computing is vast and so are the security threats. When a company opts for cloud computing, it will consider the advantages, but some of the companies fail to consider the vulnerabilities that might lead to data lost and misuse.

Firewalls is categorized as a preventive control which is used as a defense shield around IT systems to keep intruders and hacking from occurring, whereas, an Intrusion Detection System (IDS) which is categorized as a detective control is used to detect intrusions that have already occurred (Cavusoglu, Mishra, & Raghunathan, 2005). However, IDSs are not