Setting Up and Exploration of Security in a Hybrid Cloud

Public Cloud services offer various compute and storage resources. However, organisations often require the large number of resources offered by public cloud providers, as well as the security associated with on-premise servers. This scenario is optimal to make use of a hybrid model combining public and private cloud infrastructures. In this paper, we propose a hybrid cloud infrastructure for document storage of a university. AWS S3 is used for the public cloud storage and Ceph for the private cloud storage. The hybrid cloud setup will store documents that the university authorizes to be made public, like research publications, study material etc on the public cloud and confidential documents/files on the private cloud. A sequence of tests are designed to explore security vulnerabilities in the hybrid cloud infrastructure, like data in motion, data at rest, web application vulnerabilities, and ways to mitigate any such potential vulnerabilities are explored.