Detecting and mitigating the abuse of cloud services
The abuse of cloud services is about using the scale of the cloud provider's resources and the multi-tenancy architecture to conduct malicious activities. Some common consequences of the abuse of cloud services are as follows:
- Loss of service availability due to DDoS attacks
- Monetary loss due to the use of cloud resources being exploited for bitcoin mining without the customer's awareness
Some common examples of the abuse of cloud services are as follows:
- Using the cloud to deploy multiple servers and conducting DDoS attacks
- Using the cloud to deploy multiple expensive servers for bitcoin mining
- Using the cloud to spread email spam and phishing attacks
- Using the cloud for brute force attacks on passwords
Some best practices for detecting and mitigating against the abuse of cloud services are as follows:
- Configure billing alerts to get notified in advance about any increase...