Michael Soltys
This paper re-examines the content of a standard advanced course in Cybersecurity from the perspective of Cloud Computing. More precisely, we review the core concepts of Cybersecurity, as presented in a senior undergraduate or graduate class, in light of the Amazon Web Services (AWS) cloud.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
继续探索
SkyEye: When Your Vision Reaches Beyond IAM Boundary Scope in AWS Cloud
本文提出协作式多主体 IAM 枚举框架 SkyEye，突破单一主体权限视野限制，实现对 AWS IAM 配置的完整态势感知，以应对授权不足带来的安全挑战。
Microarchitectural Security of AWS Firecracker VMM for Serverless Cloud Platforms
本文调查了 AWS Firecracker VMM 抵御微架构攻击的安全性，发现其无法有效抵御 Spectre 和 MDS 等攻击，表明 AWS 夸大了其安全性且部署指导不完整。
Secure IAM on AWS with Multi-Account Strategy
本文针对小型组织云安全架构薄弱的问题，提出基于 AWS 的多账户策略，通过资产分离和最小权限原则实现低成本、高安全性的访问控制与运营管理。
Electricity and gas meter reading is a time consuming task, which is done manually in most cases. There are some approaches proposing use of smart meters that report their readings automatically. However, this solution is expensive and requires (1) replacement of the existing meters, even when they are functional and new, and (2) large changes of the whole system dealing with the meter readings. This paper presents results of a project on automation of the meter reading process for the standard (non-smart) meters using computer vision techniques, focusing on the comparison of two computer visi…
Ontological Approach toward Cybersecurity in Cloud Computing
互联网的广泛部署使得能够建立一种新兴的IT交付模式，即，云计算。尽管基于云计算的服务发展迅速，但其安全方面仍处于发展的初级阶段。为了保护云计算中的网络安全，需要确定和讨论将在其中交换的网络安全信息。为此，我们提出了一个本体论的方法，在云计算的网络安全。基于非云计算环境下的实际网络安全操作，构建了网络安全操作信息本体。为了探讨云计算中必要的网络安全信息，将本体论应用于云计算。通过讨论，我们确定了云计算的基本变化，如数据-资产解耦，并阐明了变化所需的网络安全信息，如数据来源和资源依赖信息。
The advancement and the proliferation of information systems among enterprises have given rise to understanding cybersecurity. Cybersecurity practices provide a set of techniques and procedures to protect the systems, networks, programs and data from attack, damage, or unauthorised access. Such cybersecurity practices vary and are applied differently to different types of enterprises. The purpose of this research is to compare the critical cybersecurity threats and practices in the cloud context among micro, small, and medium enterprises. By conducting a survey among 289 micro, small and mediu…
In this chapter, we review how the EU cybersecurity regulatory framework impacts providers of cloud computing services. We examine the evolving regulatory treatment of cloud services as an enabler of the EU's digital economy and question whether all cloud services should be treated as critical infrastructure. Further, we look at how the safeguarding and incident notification obligations under the General Data Protection Regulation ('GDPR') and the Network and Information Systems Directive ('NISD') apply to cloud providers. We also consider the proposed revision of the NISD and look at newly de…
Generating up to date, well labeled datasets for machine learning (ML) security models is a unique engineering challenge, as large data volumes, complexity of labeling, and constant concept drift makes it difficult to generate effective training datasets. Here we describe a simple, resilient cloud infrastructure for generating ML training and testing datasets, that has enhanced the speed at which our team is able to research and keep in production a multitude of security ML models.
Jupyter has become the go-to platform for developing data applications but data and security concerns, especially when dealing with healthcare, have become paramount for many institutions and applications dealing with sensitive information. How then can we continue to enjoy the data analysis and machine learning opportunities provided by Jupyter and the Python ecosystem while guaranteeing auditable compliance with security and privacy concerns? We will describe the architecture and implementation of a cloud based platform based on Jupyter that integrates with Amazon Web Services (AWS) and uses…
Putting a Padlock on Lambda -- Integrating vTPMs into AWS Firecracker
针对云托管PaaS产品缺乏TPM可信计算能力的问题，研究将虚拟TPM设备集成到AWS Firecracker虚拟机管理程序中，经性能测试与攻击面分析验证，其带来的小幅性能下降和攻击面增加是可接受的权衡。
An AI-Driven VM Threat Prediction Model for Multi-Risks Analysis-Based Cloud Cybersecurity
针对云虚拟化中VM面临的多类安全风险，本文提出MR-TPM，通过量化配置、管理及用户行为风险并利用机器学习分类器预测威胁，实验表明其可将安全威胁降低88.9%。
ACSE-Eval: Can LLMs threat model real-world cloud infrastructure?
本文提出ACSE-Eval数据集，含100个生产级AWS场景，用于评估大语言模型的云威胁建模能力，发现GPT 4.1和Gemini 2.5 Pro表现最佳，并开源数据集与评估方法。
Evaluating Behavioral Context for Interpretable IAM Policy Risk Scoring in Cloud Environments
本文评估行为与环境上下文对IAM策略风险评分的增量价值，使用AWS基准和可解释提升机模型，证明完整上下文模型显著提升分析师优先级预测准确性。
Enhancing Critical Infrastructure Cybersecurity: Collaborative DNN Synthesis in the Cloud Continuum
针对关键基础设施在云连续体中的网络安全挑战，本文提出利用训练好的边缘云模型合成中心云模型的方法，以降低计算复杂性和保持入侵检测准确性，并通过与传统及协作技术对比验证其有效性。
The use of Artificial Intelligence (AI) and Machine Learning (ML) to solve cybersecurity problems has been gaining traction within industry and academia, in part as a response to widespread malware attacks on critical systems, such as cloud infrastructures, government offices or hospitals, and the vast amounts of data they generate. AI- and ML-assisted cybersecurity offers data-driven automation that could enable security systems to identify and respond to cyber threats in real time. However, there is currently a shortfall of professionals trained in AI and ML for cybersecurity. Here we addres…
Cybersecurity in the Quantum Era: Assessing the Impact of Quantum Computing on Infrastructure
本文探讨量子计算对关键基础设施和云服务的影响，提出九个关键组件的安全蓝图，以增强对量子威胁的防御能力。
In cybersecurity courses, it is quite challenging to do hands-on activities that involve many components of the Internet, such as bringing down the Internet, attacking a blockchain, etc. To solve this problem, we have developed an open-source Internet Emulator, which is a Python library, consisting of the classes for each essential element of the Internet, including autonomous system, network, host, router, BGP router, Internet exchange, etc. It also includes the classes for a variety of services, including Web server, DNS, Botnet, Darknet, Blockchain, and more are being developed. Using these…
Automatic Association of Cloud Security Controls and Quantifiable Metrics for Certification
针对欧洲云服务网络安全认证计划中安全控制与可量化指标关联靠手动、耗时且易出错的问题，提出基于句子变换器的自动化方法，经实验其性能优于基线，凸显了基于变压器方法在云安全认证合规流程中的潜力。
Reflection of Federal Data Protection Standards on Cloud Governance
本研究聚焦云治理领域的数据泄露风险防范问题，结合立法权限与多项数据安全措施，梳理相关法律要求与最小权限原则等技术框架，并结合主流云服务商AWS的应用场景展开分析。
Using Honeybuckets to Characterize Cloud Storage Scanning in the Wild
本文通过部署数百个 AWS S3 蜜桶分析云存储扫描攻击，发现攻击者偏好针对技术行业商业组织的存储桶，并会下载、篡改内容，甚至利用桶中文档尝试获取服务器未授权访问。
A Hybrid Intrusion Detection System with a New Approach to Protect the Cybersecurity of Cloud Computing
提出一种基于能量谷优化器（EVO）特征选择与监督机器学习的混合入侵检测系统（HyIDS），在多个数据集上取得高准确率，优于灰狼优化器。
Industrial Control System (ICS) is a general term that includes supervisory control & data acquisition (SCADA) systems, distributed control systems (DCS), and other control system configurations such as programmable logic controllers (PLC). ICSs are often found in the industrial sectors and critical infrastructures, such as nuclear and thermal plants, water treatment facilities, power generation, heavy industries, and distribution systems. Though ICSs were kept isolated from the Internet for so long, significant achievable business benefits are driving a convergence between ICSs and the Intern…
A Non-Invasive Cloud-Based Migration Strategy for Post-Quantum Cybersecurity in Smart HVAC Systems: Architecture, Implementation, and Empirical Evaluation
提出一种非侵入式后量子密码学代理，在不改动设备、固件或云的前提下，通过树莓派网关实现ML-KEM和ML-DSA，以应对量子威胁，并验证了其低延迟、高并发及抗侧信道攻击能力。
DDoS Attacks in Cloud Computing: Detection and Prevention
本文系统分析了云计算中体量型、协议型和应用层DDoS攻击的特征与影响，梳理了数据包过滤、入侵检测、机器学习等检测技术及防火墙、速率限制、CPP和ELD等预防机制，并评估其在不同场景下的有效性，为提升网络安全防护提供指导。
Quantum Computing and Cybersecurity Education: A Novel Curriculum for Enhancing Graduate STEM Learning
本文提出并评估了一门名为EE 597的研究生课程，通过仿真和云量子硬件将量子安全与经典硬件安全相结合，以体验式学习应对量子计算带来的新兴安全威胁，实验显示学生理解显著提升且反馈积极。
扫码添加微信好友，提出您的宝贵建议 👇
💡 备注请填写：网站反馈
发表机构由 AI 从论文文本抽取，如发现错误，欢迎反馈修正建议。