A systematic review of security threats and countermeasures in SaaS

Abstract

Among the service models provided by the cloud, the software as a service (SaaS) model has had the greatest growth. This service model is an attractive option for organizations, as they can transfer part or all of their IT functions to a cloud service provider. However, there is still some uncertainty about deciding to carry out a migration of all data to the cloud, mainly due to security concerns. The SaaS model not only inherits the security problems of a traditional application, but there are unique attacks and vulnerabilities for a SaaS architecture. Additionally, some of the attacks in this environment are more devastating due to nature of shared resources in the SaaS model. Some of these attacks and vulnerabilities are not yet well known to software designers and developers. This lack of knowledge has negative consequences as it can expose sensitive data of users and organizations. This paper presents a rigorous systematic review using the SALSA framework to know the threats, attacks and countermeasures to mitigate the security problems that occur in a SaaS environment. As part of the results of this review, a classification of threats, attacks and countermeasures in the SaaS environment is presented.

A Structural Framework for Assessing the Digital Resilience of Enterprises in the Context of the Technological Revolution 4.0

“…The analysis of direct results indicates the importance of remote work (RW) [46,49,50,83] and supports the positive role of digital security (SI) in the ability of companies to make core digital investments [44,45]. At the same time, the use of IT solutions and applications (DX) and migration to cloud technologies (CM) [57][58][59] have an important role to play in increasing digital core capacity (DO) [81].…”

“…Among the cloud service models, the software as a service model (SaaS) has been an option chosen by many organizations [57] because they are able to transfer some or all of their IT features to a cloud service provider. Other companies migrate their databases to various complete, flexible, and cost-effective cloud platforms for developing, running, and managing applications-platform as a service (PaaS) [58].…”

Una revisión de procesos de implementación para sistemas de riego automatizado

“…Este trabajo de investigación utiliza el framework SALSA (Valoración, Síntesis y Análisis) (Grant & Booth, 2009), buscando garantizar la precisión metodológica, sistematización, y reproducibilidad (Mengist et al, 2020) del tema, diferentes trabajos (De Pace et al, 2020;DÍaz De León Guillén et al, 2020;Fernández del Amo et al, 2018) aplican el framework a fin de reducir los riesgos relacionados con la publicación y aumentar la aceptabilidad de la obra. El primer paso es el Protocolo, seguido de la Búsqueda, el tercer paso es la Evaluación, continuando con la Síntesis, y finalmente se realiza el análisis.…”