Incident response with AWS detective controls

Tykholaz, D. та Banakh, R. та Mychuda, L. та Piskozub, A. та Kyrychok, Roman (2024) Incident response with AWS detective controls Cybersecurity Providing in Information and Telecommunication Systems II 2024, 3826. с. 190-197. ISSN 1613-0073

Текст D_Tykholaz_R_Banakh_L_Mychuda_A_Piskozub_R_Kyrychok_CPITS_2024_3826.pdf Download (2MB)

Анотація

Loss of access to an Amazon Web Services (AWS) account can be caused by a variety of factors, ranging from human errors to hacks. Such incidents can have serious consequences for both companies and individuals, especially in the context of safeguarding critical data and ensuring business continuity. One of the most effective strategies for preventing AWS account loss is automating security configurations and incident response processes. Utilizing AWS Detective Controls tools in combination with deployment through Terraform addresses these challenges, enhancing security and resilience to potential attacks. The combined use of AWS Detective Controls and Terraform enables organizations to achieve enhanced security and efficiently respond to incidents. AWS Detective Controls acts as a constant monitoring environment, detecting potential threats and giving administrators the ability to quickly react to any incidents that could cause account loss. Terraform automates security configuration processes across the entire infrastructure, ensuring unified security rules for all AWS services. With such solutions, organizations can control their AWS accounts at a more advanced level, reducing the risk of account loss and ensuring protection against cyber threats. This is especially important in today’s world, where cloud services play a key role in business processes and data protection. This topic is particularly relevant because securing information systems in cloud environments such as AWS presents a significant challenge for many companies. Research into investigating incidents using AWS Detective Controls helps improve awareness and establish new or improved approaches to detecting various security threats and swiftly responding to breaches. The results of such research will be useful for any organization using AWS, as well as for cybersecurity researchers, especially those working to improve the protection of cloud infrastructures.

Тип елементу :	Стаття
Ключові слова:	information security; cybersecurity; AWS; account loss; cybersecurity; data protection; incident response; AWS Detective Controls; Terraform; security automation; threat detection; security-as-code; cloud service provide; DevSecOps; cloud environment; breaches
Типологія:	Статті у базах даних > Scopus
Підрозділи:	Факультет інформаційних технологій та математики > Кафедра інформаційної та кібернетичної безпеки ім. професора Володимира Бурячка
Користувач, що депонує:	Павло Миколайович Складанний
Дата внесення:	06 Груд 2024 08:18
Останні зміни:	06 Груд 2024 08:18
URI:	https://elibrary.kubg.edu.ua/id/eprint/50157

Actions (login required)

Перегляд елементу