Secure Business Transformation and Enablement Services

Cloud, which is no longer a future trend, has led to a paradigm shift in the design of security services. With so many dynamic features offered by cloud service providers, the assessment of potential threats, cloud vulnerabilities and software security concerns can help in securing cloud customers from inside and outside threat. In this research, the goal will be to examine cloud services security, perform threat modelling and to map threats with the Mitre ATT&CK (Adversarial Tactics, Techniques and common knowledge) framework. To mitigate existing and potential attacks on critical applications of the finance sector, cloud services security will be evaluated from a cybersecurity standpoint and a few known security controls will be outlined based on security gaps in an application hosted on the cloud. The developed mitigation strategies and mapped threat model will be used to create the final risk report which will enable the current organizations to secure the existing cloud architecture

Faculty Supervisor:

Deborah Stacey

Student:

Akansha Handa

Partner:

Long View

Discipline:

Computer science

Sector:

Professional, scientific and technical services

University:

University of Guelph