An overview of insider attacks in cloud computing

Abstract

Summary Cloud computing offers the potential for significant cost reductions and increased agility for users. However, security concerns continue to be raised as a potential barrier to uptake for private, community and public clouds. A report from the European Network and Information Security Agency on the Priorities for Research on Current and Emerging Network Technologies highlighted trusted cloud models as one of its top priorities for further research. More recently—September 2012—Carnegie Mellon University's computer emergency response team have released a paper describing insider threats to cloud computing as a direction for new research. Further, a project completed at the University of Warwick in 2010 investigated security aspects of cloud computing and in particular the potential for cascade effects. This research involved a detailed modelling of the threat and vulnerability landscape, including the incentives and motivations that might drive attackers. One of the conclusions is that insider threats potentially pose the most significant source of risk. This paper presents the progress made on furthering this research by investigating what attacks are available to insiders together with the damage and implications of such attacks. Copyright © 2014 John Wiley & Sons, Ltd.

Cloud Computing (SaaS) Adoption as a Strategic Technology: Results of an Empirical Study

“…Notwithstanding, the literature also reveals that obstacles and difficulties exist in organizations' adoption of cloud computing, such as reticence regarding information security and protection against nonauthorized access [14,15], the absence of knowledge on the privacy capabilities of service providers [16], a lack of understanding between the organization and the cloud provider as to service scope and 2 Mobile Information Systems implementation [17], technical barriers [18], and financing problems that companies in certain sectors might have to address the required investment in technology and qualified IT personnel, especially in the case of small and medium enterprises [11,19].…”

A Novel Method to Detect Encrypted Data Exfiltration

“…If the responsibility of providing these services to the user is one task, the other important task is to ensure that these services are being provided while also ensuring the important features of privacy and security. As shown in [13,14], insider threats potentially pose the most significant source of risk and it is the major threat to cloud user's privacy and security.…”

Authentication, Tamper Localization and Rectification Algorithm With Privacy Preservation of Image for the Cloud Using Hmac

“…An insider attack with the cloud is easier to perform as whole image is stored on cloud [15], [14] and has far greater impact than an attack in a traditionalinfrastructure [17]. A method that provides image compression along with image security uses a combination of EZW for authentication& chaos for security proposed in [19].…”