Master's Thesis : Hybrid infrastructure security : cloud and on-premise

Abstract

Nowadays cloud development attracts companies thanks to new services offered. Gambit Financial Solutions is motivated by moving to the cloud to offer in the near future its financial solutions directly via a secure cloud infrastructure. Its second motivation is to discharge the company of any hardware maintenance on the premises. This master thesis focuses on the securization and the migration of a Gambit service from an on the premises cloud to a hybrid cloud infrastructure. The approach followed for the migration starts by the study of cloud computing and the current on the premises infrastructure. The study continues with an upstream analysis on Cloud Provider Services and their vulnerabilities. Then the implementation of the two migration solutions on a cloud provider is described. Finally, security was tested using penetration testing techniques.Results obtained showed that Azure Cloud suits well for Gambit’s needs. Migration phase was profitable to get acquainted with cloud services. It also highlights the limitations on resource control. Penetration testing were performed without highlighting several application security risks. Solutions in real conditions shown better performance for one solution between the two. Indeed, WebApplication Service proposed by Azure cloud is more efficient than deploying a website like the equivalent on a cloud of the premises virtual machine. Finally, the solution kept by Gambit shows that we solve the problem of migrating securely a service from on the premises to Azure Cloud platform.