Cloud implementation security challenges

Bamiah, Mervat Adib; Brohi, Sarfraz Nawaz; Chuprat, Suriayati; Brohi, Muhammad Nawaz

doi:10.1109/iccctam.2012.6488093

Cited by 9 publications

(9 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These APIs have significant roles in provisioning, monitoring, orchestration and management of the processes running in a cloud computing environment [53].…”

Section: No Security Issues Definition Si16 Insecure Interfaces Api'smentioning

confidence: 99%

See 1 more Smart Citation

Classification of Critical Cloud Computing Security Issues for Banking Organizations: A Cloud Delphi Study

Elzamly¹,

Hussin²,

Basari³

2016

IJGDC

View full text Add to dashboard Cite

show abstract

“…These APIs have significant roles in provisioning, monitoring, orchestration and management of the processes running in a cloud computing environment [53].…”

Section: No Security Issues Definition Si16 Insecure Interfaces Api'smentioning

confidence: 99%

“…Accesses to key stores have to be limited to the authorized personnel who require the individual keys. These keys ought to be under policies governing them [53].…”

Section: Si40 Identity/access Managementmentioning

confidence: 99%

Classification of Critical Cloud Computing Security Issues for Banking Organizations: A Cloud Delphi Study

Elzamly¹,

Hussin²,

Basari³

2016

IJGDC

View full text Add to dashboard Cite

show abstract

“…But not all cloud vendors encrypted their VM disks. VM disk encryption also meets some limitations such as shared resources with other tenants, mounting data [12]. Many cloud vendors still manage their VMs which only use normal user and password.…”

Section: Snapshot Crackingmentioning

confidence: 99%

A Demonstration of Malicious Insider Attacks inside Cloud IaaS Vendor

Nguyen¹,

Chau²,

Jung³

et al. 2014

IJIET

View full text Add to dashboard Cite

Abstract-Until now, many researches have carried out analyzing the vulnerabilities as well as finding the defense strategies for malicious insider (MI) at cloud environment. However, all these previous works only considered the perspective of MI attacks that are originated from tenant side in a public cloud. Furthermore, in these existing works, the MI attack techniques are only basically and abstractly described. Without the proof of concept, MI attacks are just theoretical threats. In this paper, we consider the scenario that MI executes the attack inside the Cloud IaaS vendor. Moreover, in order to show the realistic of MI attacks in the scenario, this paper introduces three concrete MI attacks with a proof of concept implementation based on existing tools. Three introduced MI attacks in this paper are: memory scanning, template poisoning, and snapshot cracking. The demonstration result shows that MI attacks inside cloud IaaS vendor are no longer potential threats but realistic issues that we need to consider.Index Terms-CloudStack, malicious insider, insider threats, cloud computing, cloud security, security threats.

show abstract

“…Indeed, cloud services are accessed and managed by clients via software interface and insecure applications programming interfaces [31]. These, APIs have significant roles in provisioning, monitoring, orchestration and management of the processes running in a cloud computing environment [75]. Some of the security concerns include cyber-attacks and illegitimate control over user accounts [75].…”

Section: Cloud Security Models: Security and Cloud Db Managementmentioning

confidence: 99%

“…These, APIs have significant roles in provisioning, monitoring, orchestration and management of the processes running in a cloud computing environment [75]. Some of the security concerns include cyber-attacks and illegitimate control over user accounts [75].…”

Section: Cloud Security Models: Security and Cloud Db Managementmentioning

confidence: 99%

A New Conceptual Framework Modelling for Cloud Computing Risk Management in Banking Organizations

Elzamly¹,

Hussin²,

Naser³

et al. 2016

IJGDC

View full text Add to dashboard Cite

Despite much research and progress in the areas of cloud computing project, many cloud computing projects have a very high failure rate when it comes to the banking organizations. The aim of this study is to propose a new conceptual framework modelling for cloud computing risk management in banking organizations. There are the main five stages for a successful cloud computing framework in a banking organization as described in Figure 1: Cloud mobility and cloud banking applications, cloud service models, cloud deployment models, cloud risk management models, and cloud security models. As a future work, we will apply the framework in the real banking world to mitigate and control the security issues. A successful framework modelling for cloud computing risk management will greatly improve the probability of cloud computing success in banking organizations.

show abstract

Cloud implementation security challenges

Cited by 9 publications

References 15 publications

Classification of Critical Cloud Computing Security Issues for Banking Organizations: A Cloud Delphi Study

Classification of Critical Cloud Computing Security Issues for Banking Organizations: A Cloud Delphi Study

A Demonstration of Malicious Insider Attacks inside Cloud IaaS Vendor

A New Conceptual Framework Modelling for Cloud Computing Risk Management in Banking Organizations

Contact Info

Product

Resources

About