What is Cloud Computing and their Attacks (2020) ?

Ajj hum apko Cloud Computing ke bare mai btayge. Jaise ki hum sabhi ko yeh baat pata hai. Internet par aye din bahut sari chije nayi nayi ati rehti hai.

Pichle kuch years tak shayd apne Cloud Computing ke bare mai nahi suna hoga. Lekin aaj ke time mai apne iske bare mai bahut bar suna hoga. Kyoki yeh aaj ke time mai bahut hi popular ho gayi hai. yeh CEH ke topic mai bhi ata hai.

Kyoki hackers bhi inki services or loopholes ka fayda uthate hai. Is post mai apko sab kuch bata diya jayga. Cloud Computing ek alag se topic bhi hai. Jaha is par kaam karne vali services ko maintain karne ke bare mai btaya jata hai. Apko yaha dono jagah kis tarah se use kiya jata hai bata diya jayga.

What is Cloud Computing ?

Jaise ki naam se hi pata chalta hai Cloud hum sabhi ko Cloud ka matalb pata hai. Yeh badal hota hai jiska koi fix size nahi hota hai. Aise hi Cloud Computing ka bhi koi size nahi hota hai. Kyoki yeh bhi ek badal ki tarah kabhi badhta hai to kabhi kaam hota hai.

Cloud Computing ek aisi technique hai. Jaha Internet ke through kisi tarah ki service ko provide kiya jata hai. Apne Google ke bare mai yeh suna hoga. Ab Google ke through hum kisi bhi tarah ke heavy games ko Google ke server par khel sakte hai.

Cloud Computing

Yeh bhi Cloud Computing ki tarah hi hai. Kyoki aap game to apne Mobile par khelege. Lekin veh game Google ke server par run hogi. Asaan language mai agar kahe to Cloud Computing ek aisi technique hai. Jo users ko bahut tarah ki services unke device par hi provide karvati hai.

Jaise Storage service, platform or applications. Aaj ke time mai sabhi badi badi Companies directly ya indirectly Cloud Computing ka use karti hai. Jaise Youtube, Google, facebook, Whatsapp etc

Cloud Computing Services

Cloud Computing ke main 3 types hote hai IaaS, PaaS, SaaS. chaliye inke bare mai detail mai jante hai.

Cloud Computing

Iaas (Infrastructure as a Service)

Jaise ki naam se hi pata chalta hai. Infrastructure yeh ek aisi Virtual machines users ko provide karti hai. Jiski help se users ko naye hardware components ko lene ki jarurt nahi padti hai. Kyoki IaaS users ko yeh sabhi services Virtual tarike se users ko provide karti hai. Jaise Hard Disk, Network Connections

SaaS (Software as a Service)

Software word ane se apko yehe to samjh a gya hoga. Yeh Services Software provide karti hai. Jinki users ko jarurt hoti hai. Jaise maan lijiye apke Device mai space nahi hai. Ya kisi heavy software ko run karna chahte hai. Tab is Service ki help se aisa kiya jata hai jaise Google docs, Google maps etc

PaaS ( Platform as a service)

Yeh aise Platform ki service provide karta hai. Jinka users use karna chahte hai apne Gmail, Outlook ka use to kabhi na kabhi jarur kiya hoga. Yeh platforms isi Cloud Computing ki service par apna kaam karte hai. Jaise jab aap gmail ya Microsoft ka use karte hai. Aap kahi na kahi is Service ka use kar rahe hote hai.

Cloud Computing Modules

Private Cloud

Iska use kisi specific Organization ke liye kiya jata hai. Isme ek hi company ke sabhi services ko run kiya jata hai. Kisi or company ke kisi bhi service ko Private Cloud mai nahi rakha jata hai.

Public Cloud

Public Cloud mai use hone vali sabhi services users ke liye open hoti hai. Koi bhi user kabhi bhi in services ko use kar sakta hai. Jaise Google , Amazon . pahle to yeh sabhi companies apni services ko ek jagah par test karti hai. Uske baad yeh apni services ko public use ke liye open karti hai.

Community Cloud

Jaise ki naam se hi pata chalta hai. Ek Community mai use hone vali services jaise maan lijiye do organization hai. Dono hi ek hi tarah ki service ko provide karti hai. Aise mai veh dono ek Community Cloud ka use kar sakti hai.

Hybrid Cloud

Jaha do ya do se jada Cloud services ka ek sath use kiya jata hai. Use Hybrid Cloud kaha jata hai. Jaise Google , facebook jaise badi companies ek sath kayi tarah ki Cloud services ka use karti hai. Aise mai yeh hybrid Cloud kehlata hai.

Benefits of Cloud Computing

  • Files ko kisi bhi location se open kiya ja sakta hai or use kiya ja sakta hai.
  • kisi bhi file ko ek sath kayi jagah par share kiya ja sakta hai
  • sabhi files ya softwares ka backup hmesha rehta hai.
  • Apke pass storage space kaam hone par aap apne data ko kisi Cloud Computing service par store karke rakh sakte hai.
  • apke data ke loss hone ki responsibility Cloud Computing provide karne vali service ki hoti hai.
  • kisi bhi tarah ke additional hardware add karne ki jarurt nahi padti hai.
  • ise use karna bahut hi asan hota hai lekin ise maintain karna mushkil hota hai.
  • Files ki size ki kisi bhi tarah ki koi limit nahi hoti hai. Aap jitni chahe utni badhi file ko store bhi kar sakte hai or sath hi share bhi kar sakte hai.
  • Apko Cloud Computing ki service free mai bhi milti hai. Jaise google drive ke through lekin aap kisi trusted ka use kare ya paid service ka use kare.

Cloud Computing Vulnerabilities

Kisi bhi Cloud service dene vali company mai bhaut tarah ki kamiya payi jati hai. Sabhi ke bare mai bata pana possible nahi hai. Lekin hum apko apni taraf se puri koshish kerege apko jada se jada vulnerabilities ke bare mai bataya ja sake.

Cloud Computing

Data Breach/Loss

Agar aap kisi cloud par apna data save rakhte hai. Aise mai hackers agar kisi tarah se Cloud service ka ya apke user login ka access le lete hai. Aise mai apke data ko theft ya destroy kiya ja sakta hai.

Vaise to koi bhi Cloud storage company ki security itni weak nahi hoti hai. Lekin agar apko inke bare mai pata nahi hoga. Aise mai hackers apke through bhi kisi tarah ke attack ko kar sakte hai.

Abuse of Cloud Service

Attackers kisi cloud service ko access karne ke liye bahut tarah ke attacks ka use karte hai. Jaise password cracking, Hosting malicious data, hosting exploits on cloud platforms, captcha-solving farms. Hackers kisi tarah ki malicious file ko upload karke bhi kisi cloud service ko nuksan pahucha sakte hai.

Illegal access to the Cloud

Kisi tarh ke Illegal access milne par bhi Cloud Computing hacking ko kiya jata hai. Aisa tab hota hai jab kisi tarh ki weak authentication kisi Cloud service mai hoti hai.

Hardware failures

Kisi tarah ke hardware ke fail hone par bhi Cloud Computing hacking ki jati hai. Jaise ki hum jante hai yeh sabhi Networking devices ka use karti hai. Aise mai agar kisi tarah ka Switch ya router kaam nahi kar raha hota hai tab bhi illegal access liya ja sakta hai.

Malicious Insiders

Agar kisi tarah ki malicious file ko kisi cloud par upload kiya jata hai. Aise mai us Cloud storage company ko nuksan ho sakta hai. Kyoki jaise ki apko pahle btaya gaya hai ki kaise undetectable virus ko bnaya jata hai. Agar Antivirus ko bypass kiya ja sakta hai. Aise mai Cloud ko bhi bypass kiya ja sakta hai lekin yeh karna bahut hi jada mushkil hota hai.

Authentication Attacks

Kisi tarah ki weak security ya weak password rakhne par illegal access liya ja sakta hai. Agar two step verification ko nahi rakha jata hai. Aise mai bhi hackers unauthorized access le sakte hai. Isliye hmesha sabhi Cloud Computing systems mai two step verification ko on rakha jata hai.

Loss of Encryption keys

Jaise ki apko Cryptography mai btaya gaya hai. Kaise encryptions ke through internet par humara data safe rehta hai. Aise mai agar Encryption key kisi attacker ko mil jati hai. Veh use crack karke kisis cloud ko illegal tarike se access kar sakta hai.

Network management fail

Jaise ki sabhi Cloud system kisi na kisi network ka use karte hai. Aise mai network ke fail hone par kisi cloud computing system ko nuksan ho sakta hai. Kyoki aise mai hacker apne attacks ko perform kar sakta hai. Jab Network management fail hota hai. inke ilava bhi bahut tarah ki vulnerabilities hai

  • Modifying Network traffic
  • Supply chain failure
  • Natural Disaster
  • Loss of Operation and security logs
  • shared technology issues
  • insufficient due diligence
  • Unknown risk profiles
  • Lock-in
  • VM level attacks
  • Licensing Risks
  • Loss or Modification of Backup data

Cloud Computing attacks

Service hijacking attack ko Social engineering ki help se kiya jata hai. Social engineering ke bare mai apko pahle hi bata diya gaya hai. Aap use bhi padh sakte hai. Ek hacker Social engineering ke through bahut tarah ke attacks ko karke Service hijacking kar sakta hai. Jaise Phishing, Trojan etc.

Hacker service ko hijack karne ke liye Network sniffing ka bhi use kar sakte hai. Sniffing ke bare mai apko pahle hi bata diya hai. Sniffing ki help se data ko capture kiya ja sakta hai app use bhi jarur padhe.

Session hijacking attack ka use bhi Cloud Computing attacks mai kiya jata hai. Hackers Session hijacking ke through xss attack ko bhi perform kar sakte hai. Inke bare mai apko pahle detail mai bata diya gaya hai.

DNS attacks ka use bhi kiya jata hai DNS ka pura naam Domain name system hota hai. Is attack mai hacker Domain name ko hijack karke bhi is attack ko kar sakte hai. Sath hi DNS poisoning attack ka use karke hacker apne victim ko apni bnayi kisi website par redirect kar sakta hai.

Other Cloud Computing Attacks

SQL Injection attack ka bhi hackers karte hai iske bare mai apko pahle hi bata diya gaya hai. Cloud Computing systems mai bhi SQL injection ki vulnerability payi jati hai. Aap iske bare mai bhi padh sakte hai.

DOS attack ko bhi Cloud server par kiya jata hai. Jaise ki apko pahle bataya gaya hai. Hackers kaise kisi website par DOS ya DDOS attack karte hai. Aise hi sabhi Cloud server ki visitors ki ek limit hoti hai. Aise mai hacker DOS attack ko bhi kar sakte hai.

Wrapping attack ka use bhi hackers Cloud Computing mai karte hai. Jaise jab ek user kisi cloud server par apni kisi bhi tarah ki request ko send karta hai. Aise mai jab server se reply ata hai tab hacker bich mai connection bana leta hai. Veh server ke reply ko user tak nahi jane deta hai khud hi receive kar leta hai. Uske baad hacker dubara se kisi file ke sath apne malicious file ko send karke Cloud server par attack ko perform karta hai. Aise mai Cloud server ko yahi lagta hai ki uska connection uske user ke sath hi bana hua hai.

The Conclusion

Main umeed karta hu ki apko Cloud Computing ke bare mai ache se pata chal gaya hoga. Jaise ki apko btaya gaya hai Cloud Computing ka use alag se bhi kiya jata hai. Ethical hacking mai bhu kiya jata hai. Agar aap Cloud Computing sikhna chahte hai. Aap humare Blog se jude rahe aapko age ane vali posts mai bata diya jayga . Isme bahut tarh ki vulnerability hoti hai or unhi vulnerability ka fayda utha kar hackers attack karte hai .

Agar aap bhi Cloud service ka use karna chahte hai. Aise mai aap trusted or paid service ka hi use karen. Agar apka kisi bhi tarah ka koi question hai tab aap comment mai puch sakte hai. Aap chahe to humse contact bhi kar sakte hai humari taraf se apki puri help ki jayegi.

Thankyou

1 Comment

Leave a Reply

Your email address will not be published.


*