Multilevel classification of security concerns in cloud computing

Abstract

Cloud Security was provided for the services such as storage, network, applications and software through internet. The Security was given at each layer (Saas, Paas, and Iaas), in each layer, there are some security threats which became the major problem in cloud computing. In Saas, the security issues are mainly present in Web Application services and this issue can be overcome by web application scanners and service level agreement(SLA). In Paas, the major problem is Data Transmission. During transmission of data, some data may be lost or modified. The PaaS environment accomplishes proficiency to some extent through duplication of information. The duplication of information makes high accessibility of information for engineers and clients. However, data is never fully deleted instead the pointers to the data are deleted. In order to overcome this problem the techniques that used are encryp-tion[12], data backup. In Iaas the security threat that occurs in is virtualization and the techniques that are used to overcome the threats are Dynamic Security Provisioning(DSC), operational security procedure, for which Cloud Software is available in the market, for e.g. Eucalyptus, Nimbus 6.

A Proposed New Framework for Securing Cloud Data on Multiple Infrastructures using Erasure Coding, Dispersal Technique and Encryption

“…In the same manner, it is also vital cloud subscribers knows the security measures employed by their chosen CSP in combating the Confidentiality Intergrity Availability (CIA) security traits (Shah and Anandane, 2013). As the cloud subscriber/tenant usually have no physical control over cloud infrastructure in most cloud setup, contract agreements, service level agreements (SLA's) and providers documentation become vital in managing risks than in a traditional enterprise owned hosting environment (Hussain et. al., 2017).…”

Complications in Infrastructure as a Service Layer of Cloud and its Solution

“…Two policies of enforcement method providing reliable data by encompassing the chain of trust to map-reduce application. Similarly, security disputes in Software-as-a-Service (SaaS) layer are classified as two as attack on development tool and attack on the management tool [10]. Security attacks are on the development tool, on the Application Programming Interface (API) and attack on the publisher.…”

A Cross-Virtual Machine Network Channel Attack via Mirroring and TAP Impersonation

“…We believe that a combination of these approaches makes it possible to redirect target VM network traffic at run-time. Even encrypted network traffic, if successfully intercepted, may be readily decrypted [20] using third-party tools such as aircrack [10]. The decrypted traffic of the target VM can be used for further analysis to predict its activity, and compromise privacy.…”