Varnost računalništva v oblaku

Brelih, Anja (author), Trček, Denis (mentor)

Računalništvo v oblaku je vseprisotna in hitro rastoča računalniška paradigma, ki odjemalskim napravam omogoča vsesplošen dostop do podatkov in aplikacij. Eksponentna rast pa prinaša tudi varnostna vprašanja, katerih razumevanje ter obravnavanje je ključnega pomena za uspešno uporabo rešitev v oblaku. Magistrsko delo se osredotoča na raziskavo in predstavitev varnostnih mehanizmov za računalništvo v oblaku ter identifikacijo ranljivosti in napadov. V okviru pregleda varnostnih groženj se v nalogi navežemo tudi na Cloud Security Alliance, ki v svojih poročilih identificira glavne grožnje za računalništvo v oblaku. V okviru magistrskega dela je bila realizirana spletna aplikacija za shranjevanje podatkov s hibridnim tajnopisjem, ki uporablja mikrostoritveno arhitekturo, prilagojeno za oblak. Aplikacija zagotavlja varnost (1) na nivoju upravljanja identitete, upravičenosti in dostopa, (2) na nivoju omrežja in (3) na nivoju podatkov z uporabo metod hibridnega tajnopisja ter s steganografijo.

• Language: Slovenian
• Keywords: računalništvo v oblaku, varnost, zasebnost, varnost podatkov v oblaku
• Work type: Master's thesis
• Typology: 2.09 - Master's Thesis
• Organization: FRI - Faculty of Computer and Information Science
• Year: 2023
• PID: 20.500.12556/RUL-150905
• COBISS.SI-ID: 166757635
• Publication date in RUL: 25.09.2023

Secondary language

• Language: English
• Title: Cloud Computing Security

Abstract

Cloud computing is an ubiquitous and rapidly growing computing\break paradigm that enables client devices to access data and applications. Exponential growth also brings along security issues that are critical to understand and address for the successful deployment of cloud solutions. This Master's thesis focuses on the research and presentation of security mechanisms for cloud computing and the identification of vulnerabilities and attacks. As part of the review of security threats, the thesis also refers to the Cloud Security Alliance, which identifies the main threats to cloud computing in its reports. As part of the Master thesis, a web application for data storage with hybrid encryption was implemented using a cloud-native microservice architecture. The application provides security (1) at the identity, entitlement and access management level, (2) at the network level, and (3) at the data level using hybrid encryption methods and steganography.

• Keywords: cloud computing, security, privacy, cloud data security