An Examination of Cyber Security Solutions in Public and Private IaaS Infrastructures

Abstract

The digital transformation is a dynamic process that unfolds within the data and information cycle, aimed at maximizing the efficiency businesses derive from data and information. For the structuring and sustenance of this process require information processing resources, typically sourced from cloud computing infrastructures. In this context, the aim of this study is to scrutinize the cyber security measures provided by both public and private IaaS infrastructures, aiding businesses in their selection process for digital transformation. To address the objectives of this research, a mixed-methods approach was adopted, integrating both qualitative and quantitative research techniques. The study is structured around two primary research questions. The first research question (RQ1) seeks to delineate the cyber security measures in Amazon AWS EC2, Google Cloud CE, and Proxmox VE IaaS (Internet as a Service) infrastructures. The second research question (RQ2) aims to identify the similarities and differences in cyber security measures across these infrastructures. Additionally, to verify the findings derived from (RQ1) ensure the credibility of the study, and to experimentally examine cyber security measures within these infrastructures, the study adopts an experimental research method from quantitative analysis techniques and the hypothesis (H0) " The findings obtained as a result of RQ1 are confirmed in AWS EC2 and Google Cloud CE IaaS infrastructures" is tested. As a result of the experimental research, hypothesis H0 was accepted. A review of existing literature, there has been encountered no research that concurrently examines, compares, and experimentally verifies the cybersecurity measures across both public and private IaaS infrastructures. Therefore, this study can be considered to make an original contribution to the existing body of knowledge by addressing an important gap in the literature on the comparative and experimental evaluation of cyber security practices in public and private IaaS infrastructures.