LibGuides: CYB653 V1: Week 2 Resources

Week 2 Required Resources

AWS Penetration Testing: Beginner's guide to hacking AWS with tools such as Kali Linux, Metasploit, and Nmap
Helmus, J. (2021). AWS penetration testing beginner’s guide to hacking AWS with tools such as Kali Linux, Metasploit, and Nmap. Packt Publishing.
This book guides you through security assessments of key AWS resources, covering tests like application exploitation and permission flaws. Additionally, it provides insights on establishing private-cloud access and navigating restricted areas while offering tips for maintaining a secure cloud environment professionally.

Required Chapter Reading:
Chapter 7: Assessing and Pentesting Lambda Services
AWS Academy | Cloud Security Foundations Course
AWS Academy | Training and Certification | AWS. (n.d.). Amazon Web Services, Inc. https://www.awsacademy.com/
This course is designed to help you gain a foundational knowledge of cybersecurity principles and services for cloud computing through a guided hands-on approach. This course includes demonstrations, instructional guides, and real-life scenarios.

Continuous auditing and threat detection in multi-cloud infrastructure
Torkura, K. A., Sukmana, M. I., Cheng, F., & Meinel, C. (2021). Continuous auditing and threat detection in multi-cloud infrastructure. Computers & Security, 102, 102124.
This article proposes CSBAuditor, a novel cloud security system that continuously monitors cloud infrastructure to detect malicious activities and unauthorized changes. CSBAuditor leverages two concepts: state transition analysis and reconciler pattern to overcome security issues.
A cloud monitoring framework for self-configured monitoring slices based on multiple tools
de Carvalho, M. B., Esteves, R. P., da Cunha Rodrigues, G., Granville, L. Z., & Tarouco, L. M. R. (2013, October). A cloud monitoring framework for self-configured monitoring slices based on multiple tools. In Proceedings of the 9th International Conference on Network and Service Management (CNSM 2013) (pp. 180-184). IEEE.
In this paper, they propose a framework to address the problem of creating monitoring slices automatically independent of the monitoring solutions employed. To evaluate the proposed framework in an IaaS scenario, they developed FlexACMS, flexible automated cloud monitoring slices, which relies on modules that flexibly handle cloud platforms and monitoring solutions.