ARUSH:Automated Runtime Universal Scanner for Hybrid Cloud computing

Abstract

With the shift of leading companies to the cloud, so comes the risk of data leaks and breaches because of many possible misconfigurations in the setup of various cloud computing environments. Though many solutions have come up, each is platform-specific, and none of them targets multiple or hybrid cloud platforms all together. This work proposes one such solution where three major public cloud platforms are supported, and the main focus is on the storage services provided by them. Since there is no such open-source solution that supports multiple cloud platforms, the program in this work is supposed to provide such a solution. Each cloud platform provides native SDK libraries for issuing API calls to the platform. These API calls aim to query the currently employed configuration for the storage services at the very least if not change. The solution can combine all the libraries into a single driver program. The program can facilitate security management of storage accounts across multiple as well hybrid cloud services and opens possibilities for automation and routine security and audit checks.