Blog

Cloud storage security: comparative study (part 2)

Last time we started comparing Cloud storage security and touched Amazon AWS advantages and shortcomings. Today I am going to provide you with Windows Azure description.
2 September 2014
Cloud-based testing
Cybersecurity testing
Article by a1qa
a1qa

Last time we started comparing Cloud storage security and touched Amazon AWS advantages and shortcomings. Today software testing engineer Anna Andreeva is going to provide you with Windows Azure description.

Windows Azure

Although recently Windows Azure provided only cloud “platform as a service» (PaaS), introducing series of updates made Azure to be a full-fledged cloud infrastructure to run applications on Windows Server and Linux.  Independent performance testing showed that Windows Azure is far ahead of its competitors, thereby strengthening the leading position. So, what is included in the security package?

  • Mutual SSL-authentication. All internal traffic is sent in encrypted form, which prevents information outflow, even if it is intercepted.
  • Management of certificates and private keys. Mentioned certificates and keys are generated by a separate mechanism, which is not available from the application code. They are encrypted and stored in a secret repository. There is a possibility of an additional password protection.
  • Principle of Minimal Privilege. Custom applications running on virtual machines with minimal rights, which complicates any kind of attack, since their implementation requires escalation of privileges.
  • Data access control. Windows Azure has a simple model for managing data access. For each client’s account secret key is generated that is used to gain access to the vault, tied to this account.
  • Isolation of Hypervisor, host OS and the guest virtual machines. Client virtual machines Isolation is critical for safe sharing of disk space. Hypervisor and the root OS are responsible for isolation of guest virtual machines In Windows Azure.
  • Packet filtering. Hypervisor and the root OS filtering unsafe packet traffic.
  • VLAN Isolation. Internal data transfer is organized so that all traffic when moving from one network to another is verified by router. That protects data from listening and getting external traffic into the internal network infrastructure.
  • Removal of outdated data. To ensure a high level of security after the removal the platform checks and removes all references to the purified resource. All copies are also erased by means of scavengers.

It can be seen from the description that the security mechanisms offered by the providers, aimed at protecting domestic architecture – hardware and client VMs.

And this is natural, since for provider it is important to prevent further attacks in case of illegal capture virtual machine. i.e. access to root operating system, unauthorized listening of other client machines traffic or getting information stored on disk. The process of developing cloud web application does not differ much from the development of applications written in a regular PC. So all web application threats remain relevant in the cloud, and that is why customer is responsible for protection and secure configuration.

Summing up, the use of cloud infrastructure has a huge advantage. Stability, availability, flexibility – are the most important criteria for successful implementation of the project. However, the issue of safety here is also worth acute me as “old fashion” ones.

The artilce Cloud Storage Security: AWS Vs.Azure by Anna Andreeva was published in Network Computing online edition, you can read the full version here.

More Posts

QA for retail software
29 August 2024,
by a1qa
4 min read
QA to address key pain points in retail 
Explore how QA helps address the main challenges that retailers face when developing software.
Cybersecurity testing
Functional testing
Performance testing
Usability testing
QA for fintech
7 May 2024,
by a1qa
5 min read
Navigating the fintech frontier in 2024: QA’s role in delivering high-quality financial software 
Unveil the future of fintech innovations and learn to refine their quality with the help of software testing.
Blockchain app testing
Cybersecurity testing
Quality assurance
Telecom trends 2024
15 April 2024,
by a1qa
5 min read
QA’s role in adopting telecom trends for 2024 
Let’s dive into the transformative trends set to redefine the telco industry in 2024 and discover QA strategies to adopt them with precision.
Cloud-based testing
Cybersecurity testing
Functional testing
General
Migration testing
Performance testing
QA trends
Quality assurance
Test automation
On the pulse of 2024: optimizing the adoption of eHealth trends with QA
15 February 2024,
by a1qa
4 min read
On the pulse of 2024: optimizing the adoption of eHealth trends with QA
Generative AI, cybersecurity, AR/VR — come and explore how these trends are reshaping the future of healthcare and how QA helps implement them with confidence.
Cybersecurity testing
Functional testing
Performance testing
QA trends
Navigating the future: QA trends that will define 2024. Part 2
30 January 2024,
by a1qa
4 min read
Navigating the future: QA trends that will define 2024. Part 2
We continue exploring QA trends, helping businesses remain competitive in 2024.
Cloud-based testing
Cybersecurity testing
QA trends
Quality assurance
The year in valuable conversations: recapping 2023 a1qa’s roundtables for IT executives 
8 December 2023,
by a1qa
3 min read
The year in valuable conversations: recapping 2023 a1qa’s roundtables for IT executives 
From dissecting novel industry trends to navigating effective ways of enhancing software quality — let’s recall all a1qa’s roundtables. Join us!
Big data testing
Cybersecurity testing
Functional testing
General
Interviews
Performance testing
QA trends
Quality assurance
Test automation
Usability testing
Web app testing
black-friday
22 November 2023,
by a1qa
4 min read
Get ready for Black-Friday-to-Cyber-Monday shopping: 5 testing types to include in your QA strategy
What’s your nightmare during Black Friday and Cyber Monday shopping? If it’s a loss of sales, read about the ways to prevent this in the article.
Cybersecurity testing
Functional testing
Localization testing
Performance testing
Usability testing
6 top reasons why business should invest in software quality
9 November 2023,
by a1qa
4 min read
6 top reasons why business should invest in software quality
We congratulate you on the World Quality Day with the article by Alina Karachun, Account director at a1qa, having 10+ years of QA expertise. Delve into it to explore the reasons why businesses should prioritize software quality.
Cybersecurity testing
Functional testing
General
Interviews
Performance testing
Quality assurance
streaming services
30 October 2023,
by a1qa
3 min read
Enable crash-proof streaming platforms for Holidays season
Ho ho ho! It’s time to prepare your streaming products for the influx of viewers. Read about how to put peak-load anxiety behind by applying rigorous testing of your IT solution.
Cybersecurity testing
Functional testing
Performance testing
Usability testing

Get in touch

Please fill in the required field.
Email address seems invalid.
Please fill in the required field.
We use cookies on our website to improve its functionality and to enhance your user experience. We also use cookies for analytics. If you continue to browse this website, we will assume you agree that we can place cookies on your device. For more details, please read our Privacy and Cookies Policy.