A quantitative analysis of current security concerns and solutions for cloud computing

Abstract

The development of cloud computing services is speeding up the rate in which the organizations outsource their computational services or sell their idle computational resources. Even though migrating to the cloud remains a tempting trend from a financial perspective, there are several other aspects that must be taken into account by companies before they decide to do so. One of the most important aspect refers to security: while some cloud computing security issues are inherited from the solutions adopted to create such services, many new security questions that are particular to these solutions also arise, including those related to how the services are organized and which kind of service/data can be placed in the cloud. Aiming to give a better understanding of this complex scenario, in this article we identify and classify the main security concerns and solutions in cloud computing, and propose a taxonomy of security in cloud computing, giving an overview of the current status of security in this emerging technology.

An Analysis of Cloud Computing Information Security Challenges.

“…If the data is migrated to a location with different laws, it becomes difficult for the user to configure the policies to comply with the new legal jurisdictions [4]. Moreover the data can be located in more than one location having different security laws and in the case of a dispute the issue of jurisdiction arises as to which laws are applicable [32,30,29].E-discovery which happens when a CSP hardware is seized for an investigation claim by a user related to the laws of a geographical location causes in return a risk of privacy breach of other users [33,30].…”

“…Moreover, statistics provided by the CSP on contract performance is unreliable which raises conflicts between the user and the CSP which in turn makes the statistics evaluation and determination of responsibility an issue [30].In addition the SLAs are pre-defined and non-negotiable which makes them CSP bias [29].Furthermore, auditing the security of the CSP is hard to carry out and agree upon in the SLA [4].…”

A Deep Study on Security Vulnerabilities in Virtualization at Cloud Computing

“…More specifically, cloud describes the use of a collection of distributed services, applications, information and infrastructure comprised of pools of compute, network, information and storage resources [4]. These components can be manipulated, provisioned, implemented and decommissioned using an on demand utility-like model of allocation and consumption.…”

CloudIDEA: A Malware Defense Architecture for Cloud Data Centers

“…The trade-off between protection costs and attack costs will be a major output of this analysis. Another economic aspect is the minimization of the VM's downtime during the migration to prevent a monetary [48] and a reputational loss [16] for the cloud provider. The service provider commits to a certain level of service, which is described by a SLA.…”