3. The CSP should use well defined Data backup and redundant data storage to make data recovery possible. 6)Address Resolution Protocol (ARP) Poisoning Address Resolution Protocol (ARP) is used in the TCP/IP to resolve an IP address (logical) at the sender side into MAC address (physical) address at the receiver side. The ARP cache stores a table that maps all the IP address of the networked devices and their corresponding MAC addresses. An attacker can exploit some weakness in the ARP protocol to map an IP address of the network to one malicious MAC, and then update the ARP cache with this malicious MAC address. To mitigate this attack it is possible to use static ARP entries, this technique can work for small networks like private clouds; but on large scale clouds it is better to use other techniques such as port security features that locks a specific port on the switch ( or network device) to a specific IP address . D)Network Level Security attacks Cloud computing depends mainly on the existing networks infrastructure such as LAN, MAN and WAN; that is the reason cloud computing is exposed to the same security attacks. These attacks may be originated from users outside the cloud or a malicious insider residing between the user and the CSP and trying to corrupt the data to/from the cloud. 1) Domain Name System (DNS) attacks In the Internet, hosts are defined by names that are easy to remember by humans, while computers deal with numbers. Each connected computer to the Internet has a globally unique Internet Protocol (IP). The Domain Name System (DNS) converts host names into corresponding Internet Protocol (IP) addresses using a distributed database scheme. Internet DNS servers are subject to different types of attacks such as: ARP cache poisoning domain hijacking, and attacks. 1) Domain hijacking Domain hijacking is defined as changing the name of a domain without the knowledge or permission from the domain’s owner or creator. Domain hijacking enables intruders to access sensitive corporate information and perform illegal activity such as phishing, where a website is replaced by an identical website that records private information. One of the possible ways to make domain hijacking very difficult is proposed by Internet Corporation for Assigned Names and Numbers (ICANN) which forces a 60-day waiting period between a change in registration
3. The CSP should use well defined Data backup and redundant data storage to make data recovery possible. 6)Address Resolution Protocol (ARP) Poisoning Address Resolution Protocol (ARP) is used in the TCP/IP to resolve an IP address (logical) at the sender side into MAC address (physical) address at the receiver side. The ARP cache stores a table that maps all the IP address of the networked devices and their corresponding MAC addresses. An attacker can exploit some weakness in the ARP protocol to map an IP address of the network to one malicious MAC, and then update the ARP cache with this malicious MAC address. To mitigate this attack it is possible to use static ARP entries, this technique can work for small networks like private clouds; but on large scale clouds it is better to use other techniques such as port security features that locks a specific port on the switch ( or network device) to a specific IP address . D)Network Level Security attacks Cloud computing depends mainly on the existing networks infrastructure such as LAN, MAN and WAN; that is the reason cloud computing is exposed to the same security attacks. These attacks may be originated from users outside the cloud or a malicious insider residing between the user and the CSP and trying to corrupt the data to/from the cloud. 1) Domain Name System (DNS) attacks In the Internet, hosts are defined by names that are easy to remember by humans, while computers deal with numbers. Each connected computer to the Internet has a globally unique Internet Protocol (IP). The Domain Name System (DNS) converts host names into corresponding Internet Protocol (IP) addresses using a distributed database scheme. Internet DNS servers are subject to different types of attacks such as: ARP cache poisoning domain hijacking, and attacks. 1) Domain hijacking Domain hijacking is defined as changing the name of a domain without the knowledge or permission from the domain’s owner or creator. Domain hijacking enables intruders to access sensitive corporate information and perform illegal activity such as phishing, where a website is replaced by an identical website that records private information. One of the possible ways to make domain hijacking very difficult is proposed by Internet Corporation for Assigned Names and Numbers (ICANN) which forces a 60-day waiting period between a change in registration
Security%20Issues%20and%20Challenges.docx