Análisis comparativo de cloud access security broker (casb) y monkey security como herramientas de seguridad y control a usuarios que administran servicios en la nube.
No hay miniatura disponible
Fecha
2019-09-02
Título de la revista
ISSN de la revista
Título del volumen
Editor
Universidad de Guayaquil. Facultad de Ciencias Matemáticas y Físicas. Carrera de Ingeniería en Networking y Telecomunicaciones
Resumen
El presente proyecto de titulación tiene como objetivo realizar un análisis comparativo entre Oracle CASB, Microsoft Cloud App Security que son dos Agentes de Seguridad para el Acceso a la Nube (CASB, de sus siglas en inglés) y una herramienta Open Source llamada Security Monkey que permite monitorear políticas y alertar sobre configuraciones inseguras en la nube. Estas soluciones surgen con la finalidad de brindar una solución a la problemática relacionada con la falta de visibilidad que tiene una empresa u organización sobre la información almacenada en la nube, este control limitado sobre los datos puede generar problemas y amenazas que incluyen fuga de datos, intercambio de recursos, disponibilidad de datos y problemas originados por una mala administración de recursos ; los tipos de investigación aplicadas son exploratoria, descriptiva, comparativa y bibliográfica; adicionalmente se incluyen entrevistas realizadas a 7 profesionales con conocimientos en seguridad y cloud computing. Para llevar a cabo la comparación de las tecnologías ya mencionadas, se realizaron varias pruebas sobre una cuenta en Amazon Web Service permitiendo de esta manera evaluar las alertas que se generan en las herramientas al detectar vulnerabilidades, cambios y actividades sospechosas.
The present project has the purpose of to realize a comparative analysis between Oracle CASB and Microsoft Cloud App Security, which are two security agents for the cloud access (CASB) and an Open Source tool called Security Monkey that allows the monitoring of policies and alerting about insecure configurations in the cloud. These solutions arise in order to improve the problem related to the lack of visibility that a company or organization has about the information stored in the cloud, a limited control the data can generate problems and threats that include data leakage, resource exchange, data availability and problems caused by mismanagement of resource; For that, this research is exploratory, descriptive, comparative and bibliographic, and includes 7 interviews with professionals with expertise and knowledge in security and cloud computing. In order to carry out the comparison between mentioned technologies, several test were done on an account in Amazon Web Service, allowing in this way the evaluation of the alerts in the tools at the moment of detecting vulnerabilities, changes and suspicious activities.
The present project has the purpose of to realize a comparative analysis between Oracle CASB and Microsoft Cloud App Security, which are two security agents for the cloud access (CASB) and an Open Source tool called Security Monkey that allows the monitoring of policies and alerting about insecure configurations in the cloud. These solutions arise in order to improve the problem related to the lack of visibility that a company or organization has about the information stored in the cloud, a limited control the data can generate problems and threats that include data leakage, resource exchange, data availability and problems caused by mismanagement of resource; For that, this research is exploratory, descriptive, comparative and bibliographic, and includes 7 interviews with professionals with expertise and knowledge in security and cloud computing. In order to carry out the comparison between mentioned technologies, several test were done on an account in Amazon Web Service, allowing in this way the evaluation of the alerts in the tools at the moment of detecting vulnerabilities, changes and suspicious activities.
Descripción
PDF
Palabras clave
Computación en la nube, seguridad, Amazon Web Service, Agentes de Seguridad para el Acceso a la Nube, Monkey Security