评估开发人员在不同云提供商的地形开发中采用安全政策的情况
Alexandre Verdet1, Mohammad Hamdaqa1,2, Leuson Da Silva1
1Polytechnique Montreal, Montreal, Canada.
概括
这项研究分析了云计算中的基础设施即代码 (IaC) 安全实践. 访问策略被广泛采用,但在AWS,Azure和谷歌云中,静止加密经常被忽视.
科学领域:
- 计算机科学 计算机科学
- 软件工程 软件工程 软件工程
- 云安全 云安全 云安全
背景情况:
- 基础设施作为代码 (IaC) 通过脚本实现了云基础设施的自动化管理.
- 采用IAC引入了错误配置,漏洞和隐私问题的风险.
- 在IAC的安全依赖于从业者的知识和明确的政策实施.
研究的目的:
- 实证地调查云环境中采用脚本安全最佳实践的情况.
- 分析实践者如何在Terraform文件中实施主要云提供商的安全政策.
- 识别开源云项目中普遍存在和被忽视的安全实践.
主要方法:
- 实证分析了812个开源GitHub项目,使用Terraform为AWS,Azure和谷歌云.
- 使用Checkov和Tfsec工具进行静态分析,扫描配置文件以实现安全策略.
- 采用和忽视的安全最佳实践的分类和量化.
主要成果:
- 访问控制策略是所有分析的云提供商中最常采用的安全实践.
- 在研究的Terraform项目中,休息加密是最少采用的安全政策.
- 在采用和忽视安全策略方面,AWS和Azure表现出类似的模式.
结论:
- 虽然访问政策是常见的,但在实施其他关键安全措施 (如静止加密) 方面存在重大差距.
- 云计算从业者需要进一步的指导,以有效地减轻基础设施漏洞.
- 在IAC实践中需要更广泛的行业采用全面的安全政策.
相关概念视频
Legal Guidelines for Documentation
1.3K
The legal guidelines for nursing documentation are essential for ensuring accurate, professional, and ethical recording of patient care. The guidelines are discussed here:
1.3K
Distribution Reliability and Automation
103
Distribution reliability in electrical power systems is critical for ensuring an uninterrupted power supply to consumers at minimal cost. According to IEEE Standard Terms, reliability is the probability that a device will function without failure over a specified time period or amount of usage. For electric power distribution, this translates to maintaining continuous power supply and addressing customer concerns over power outages. Several indices, as defined by IEEE Standard 1366-2012, are...
103
Ethical Standards I
768
The American Nurses Association (ANA) created and implemented the first nationally accepted Code of Ethics for Nurses with Interpretive Statements. The Code of Ethics is a living document regularly updated by the ANA and establishes an ethical standard that is non-negotiable for nurses in all roles and settings.
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
768
Schemas
11.5K
A schema is a mental construct consisting of a cluster or collection of related concepts (Bartlett, 1932). There are many different types of schemata, and they all have one thing in common: schemata are a method of organizing information that allows the brain to work more efficiently. When a schema is activated, the brain makes immediate assumptions about the person or object being observed.
11.5K
Issues And Trends In Healthcare Delivery System
5.6K
The issues and trends in healthcare delivery are constantly changing. The COVID-19 pandemic is one recent issue that wreaked havoc on healthcare systems, causing a shortage of healthcare workers, high demand for medicines and supplies, and increased medical expenditure due to a lack of insurance. Other issues include rising healthcare costs and care fragmentation.
Cost Containment
Payment for healthcare services has historically promoted adoption of costly and often unnecessary or inefficient...
Cost Containment
Payment for healthcare services has historically promoted adoption of costly and often unnecessary or inefficient...
5.6K
Conformity
44.9K
Conformity is the change in a person’s behavior to go along with the group, even if that person does not agree with the group.
44.9K


