ENHANCING SECURITY IN DIRECT FILE UPLOAD TO CLOUD STORAGE SERVICES

Abstract

Websites have started to allow users to upload files directly to cloud platforms due to the growing reliance on cloud storage services for managing massive amounts of user data. Due to the participation of several parties, including online users, web servers, and cloud storage providers, this strategy presents additional security issues even if it offers more ease and scalability. We give the first thorough security analysis of this direct upload approach in this work. We do extensive testing across the top 500 Alexa-ranked websites after conducting a thorough research that identifies six different kinds of vulnerabilities. According to our research, 182 websites (36.4%) make use of cloud storage services, and a detailed examination of 28 well-known websites with upload capabilities reveals that every one of them has at least one vulnerability. We found 79 previously undiscovered vulnerabilities in total, which we appropriately notified to the relevant platforms, including well-known sites like Google, Reddit, and CSDN. The favorable reactions demonstrate the usefulness of our conclusions. We investigate these problems' underlying causes in further detail and offer practical solutions. The goal of this effort is to help academics and developers create better secure online applications by offering insightful information about the security implications of cloud-based file uploads