ANALYSIS OF INFORMATION PROTECTION STRATEGIES AGAINST INSIDER ATTACKS IN CLOUD COMPUTING

Strizhkov Vladislav Alexandrovich

The subject of the research is the problem of the insider threat to information security in organizations using the cloud computing platform. The object of the study is security as one of the main problems when planning the implementation of the cloud. The author delves into the nature and manifestation of insider attacks, and considers various strategies to counter the malicious actions of insiders. Emphasis is placed on the dilemma of convenience and security of cloud environments, which, on the one hand, free organizations from the burden of data management and storage costs, but at the same time are more vulnerable to malicious impact. The main result of the study is the identification and formulation of relevant and priority vectors for the development of existing methods for ensuring the security of information from malicious actions of insiders in the cloud environment. A special contribution of the author is a fresh look at understanding the insider threat and a designated approach to countering this threat, which combines the detection of behavioral anomalies both on the basis of data from technical monitoring tools and from social and information networks, taking into account the psychological profiling of employees of the organization.

Keywords:insider threat, internal intruder, misuse of access, cloud computing, network activity monitoring, information security