Cloud computing security threats and responses

Sabahi, Farzad

doi:10.1109/iccsn.2011.6014715

Cited by 207 publications

(97 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Despite the benefits cloud storage may bring to users through convenience and lower cost, it also may bring security concerns. These worries have been identified by various researchers (CSA 2010(CSA , 2013aGTISC and GTRI 2013;Sabahi 2011;Shaikh and Haider 2011) who conclude that security concerns are increasing significantly every year.…”

Section: Measuring Security In Cloud Storagementioning

confidence: 99%

Using Goal-Question-Metric (GQM) Approach to Assess Security in Cloud Storage

Yahya

Walters

Wills

2017

Enterprise Security

View full text Add to dashboard Cite

Abstract. Assessing the security of data stored in cloud storage can be carried out by developing goal-based measurement items. The measurement items can be utilized to construct a security assessment model based on practical needs. The measurement items can assist in acquiring support decision making on the implementation of a security frameworks. This paper discusses the GoalQuestion-Metrics (GQM) approach and its application towards constructing measurement items for a security metric. It also attempts to provide practical guidance and example of measurements using GQM. An application of the GQM paradigm towards the development of a security metric is presented. The metrics obtained will assist organizations to meet their requirements for a cloud storage security framework.

show abstract

Section: Measuring Security In Cloud Storagementioning

confidence: 99%

Using Goal-Question-Metric (GQM) Approach to Assess Security in Cloud Storage

Yahya

Walters

Wills

2017

Enterprise Security

View full text Add to dashboard Cite

show abstract

“…In particular, services must be constantly available to the users and if interrupted, a solid recovery system should be ready for recovery and business continuity. Availability is important and could result in a business close down, if cloud services continuity is break down [4,29]. There are many reasons for the continuity breakdown such as DDoS attacks, hardware failure, and physical disaster.…”

Section: G) Traditional Security Business Continuity and Disaster Rementioning

confidence: 99%

“…Hypervisor is important in order to maintain the security, integrity and privacy of users and overall system context [29,31]. A VM's actions must be restricted to the level that has been granted from the contract agreement.…”

Section: M) Virtualizationmentioning

confidence: 99%

“…Data protection is achieved through network protection both virtual and physical, data integrity, data segregation, data sanitization, data backup, hardware and data cryptography. Solid computation techniques, strong isolation, proper hardware maintenance, sanitization and strong cryptography are factors that should be taken into account in the whole data lifecycle management [26][27][28][29]. Insecure interfaces and Application Programming Interfaces (APIs), malicious insiders, shared technology issues, data loss or leakage, data location and recovery are the main threats related to this security issue.…”

Section: E) Information Management and Data Securitymentioning

confidence: 99%

“…Therefore, an application needs to ensure security from both internal and external malicious environment. In particular, the level of the access of employees or cloud clients, to physical and virtual assets, can take advantage of them in such a way that data confidentiality could be compromised or even control of cloud services could be taken, without the risk of detection [3,4,29]. The area includes issues like authentication, authorization of the user to access the application, monitor the application, a secure SDLC, security assurance program, application penetration testing, and other relevant areas.…”

Section: J) Application Securitymentioning

confidence: 99%

See 2 more Smart Citations

Towards the design of secure and privacy-oriented information systems in the cloud: Identifying the major concepts

Kalloniatis

Mouratidis

Manousakis

et al. 2014

Computer Standards & Interfaces

View full text Add to dashboard Cite

Cloud computing is without a doubt one of the most significant innovations presented in the global technological map. This new generation of technology has the potential to positively change our lives since on the one hand it provides capabilities that make our digital lives much easier, than before, while on the other hand it assists developers in creating services that can be disseminated easier and faster, than before, and with significantly less cost.However, one of the major research challenges for the successful deployment of cloud services is a clear understanding of security and privacy issues on a cloud environment, since the cloud architecture has dissimilarities comparing to the traditional distributed systems.Such differences might introduce new threats and require different treatment of security and privacy issues. Nevertheless, current security and privacy requirements engineering techniques and methodologies have not been developed with cloud computing in mind and fail to capture the unique characteristics of such domain. It is therefore important to understand security and privacy within the context of cloud computing and identify relevant security and privacy properties and threats that will support techniques and methodologies aimed to analyze and design secure cloud based systems. The contribution of this paper to the literature is two-fold. Firstly, it provides a clear linkage between a set of critical cloud computing areas with security and privacy threats and properties. Secondly, it introduces a number of requirements for analysis and design methodologies to consider for security and privacy concerns in the cloud.3

show abstract