
Researchers at CASED, the Center for Advanced Security Research Darmstadt, discovered vulnerabilities in the usage of the Amazon Web Services (AWS), a major cloud service provider. They were able to extract various security and privacy critical data of users and publishers who are accessing and providing services on top of Amazon´s Cloud. In collaboration with the Amazon Web Services Security Team, the affected customers have been notified and advised how to protect their data.
Cloud computing and its security aspects are one of the major focuses of the
Fraunhofer SIT Darmstadt and at CASED. In particular, the
System Security Lab headed by Prof. Dr.-Ing. Ahmad-Reza Sadeghi is actively doing research in this area where they investigate the security of real-life clouds. People involved in the AMID project are Prof. Sadeghi, Dr.-Ing. Thomas Schneider, Sven Bugiel, Stefan Nürnberger, and Thomas Pöppelmann.
Paper:
Sven Bugiel, Stefan Nürnberger, Thomas Pöppelmann, Ahmad-Reza Sadeghi, Thomas Schneider
AmazonIA: When elasticity snaps back
To appear in
18th ACM Conference on Computer and Communications Security (CCS'11).
PDF
AMID Scanner:
http://code.google.com/p/amid/
Official Press Report:
Press:
Contact:
Prof. Dr.-Ing. Ahmad-Reza Sadeghi, Dr.-Ing. Thomas Schneider