Secure user authentication in cloud computing management interfaces

Soares, Liliana F. B.; Fernandes, Diogo A. B.; Freire, Mário M.; Inácio, Pedro R. M.

doi:10.1109/pccc.2013.6742763

Cited by 14 publications

(5 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Forensic response can also be an issue for the tenants similarly to legal related issues. Another source of issue in cloud computing is the usage of mobile devices much like other computing devices [10], [11], [66]. Device loss and the possibility for an adversary to access resources illegitimately is deemed to be a major concern.…”

Section: A Security Challenges In Cloud Computing For Healthcarementioning

confidence: 99%

“…According to Cloud Security Alliance (CSA) [11], the security guidance for key areas in cloud computing include data lose or leakage, account or service hijacking, insecure interface, denial of service [12] and malicious insider. Other areas of cloud computing which require attention are data breaches, abuse of cloud services [13], [14], insufficient due diligence and insecure VM migration [14], [15].…”

Section: A Security Challenges In Cloud Computing For Healthcarementioning

confidence: 99%

See 1 more Smart Citation

Comparative Analysis of Threat Modeling Methods for Cloud Computing towards Healthcare Security Practice

Yeng¹,

Wolthusen²,

Yang³

2020

IJACSA

View full text Add to dashboard Cite

Healthcare organizations consist of unique activities including collaborating on patients care and emergency care. The sector also accumulates high sensitive multifaceted patients' data such as text reports, radiology images and pathological slides. The large volume of the data is often stored as Electronic Health Records (EHR) which must be frequently updated while ensuring higher percentage up-time for constant availability of patients' records. Healthcare as a critical infrastructure also needs highly skilled IT personnel, Information and Communication Technology (ICT) and infrastructure with regular maintenance culture. Fortunately, cloud computing can provide these necessary services at a lower cost. But with all thees enormous benefits of cloud computing, it is characterized with various information security issues which is not enticing to healthcare. Amid many threat modelling methods, which of them is suitable for identifying cloud related threats towards the adoption of cloud computing for healthcare? This paper compared threat modelling methods to determine their suitability for identifying and managing healthcare related threats in cloud computing. Threat modelling in pervasive computing (TMP) was identified to be suitable and can be combined with Attack Tree (AT), Attack Graph (AG) and Practical Threat Analysis (PTA) or STRIDE (spoofing, tampering, repudiation, information disclosure, denial of service and elevation of privilege). Also Attack Tree (AT) could be complemented with TMP, AG and STRIDE or PTA. Healthcare IT security professionals can hence rely on these methods in their security practices, to identify cloud related threats for healthcare. Essentially, privacy related threat modeling methods such as LINDDUN framework, need to be included in these synergy of cloud related threat modelling methods towards enhancing security and privacy for healthcare needs.

show abstract

Section: A Security Challenges In Cloud Computing For Healthcarementioning

confidence: 99%

Section: A Security Challenges In Cloud Computing For Healthcarementioning

confidence: 99%

Comparative Analysis of Threat Modeling Methods for Cloud Computing towards Healthcare Security Practice

Yeng¹,

Wolthusen²,

Yang³

2020

IJACSA

View full text Add to dashboard Cite

show abstract

“…In [10], Soares, et. al. state that the emergence of mobile computing also makes authentication a priority, and has been reinforcing the need to build stronger and more resilient mechanisms; and simultaneously providing the means to develop new authentication mechanisms, namely Multi-Factor Authentication (MFA) schemes.…”

Section: Related Workmentioning

confidence: 99%

Stronger authentication for password credential Internet Services

Booth

Andersson

2017

2017 Third International Conference on Mobile and Secure Services (MobiSecServ)

View full text Add to dashboard Cite

Abstract-Most Web and other on-line service providers ("Internet Services") only support legacy ID (or email) and password (ID/PW) credential authentication. However, there are numerous vulnerabilities concerning ID/PW credentials. Scholars and the industry have proposed several improved security solutions, such as MFA, however most of the Internet Services have refused to adopt these solutions. Mobile phones are much more sensitive to these vulnerabilities (so this paper focuses on mobile phones). Many users take advantage of password managers, to keep track of all their Internet Service profiles. However, the Internet Service profiles found in password managers, are normally kept on the PC or mobile phone's disk, in an encrypted form. Our first contribution is a design guideline, whereby the Internet Service profiles never need to touch the client's disk. Most users would benefit, if they had the ability to use MFA, to login to a legacy Internet Service, which only supports ID/PW credential authentication. Our second contribution is a design guideline, whereby users can choose, for each legacy ID/PW Internet Service, which specific MFA they wish to use. We have also presenting conceptual design guidelines, showing that both of our contributions are minor changes to existing password managers, which can be implemented easily with low overhead.

show abstract

“…C Threat is harm or unauthorized access that might occur due to vulnerability and destroy organization assets, organization operations or system information C Vulnerability is any weakness in information system, system security procedures, internal controls or implementation that could be exploited or triggered by a threat resources (Bertino et al, 2010) Cloud computing threats: Cloud Security Alliance (CSA) (Soares et al, 2013) as a security assurance provider released the security guidance for critical areas in cloud computing for managing risks and understanding security threats. The most of significant threats that are related to on-demand nature of cloud computing are categorized as below:…”

Section: Security Issues Of Cloud Computingmentioning

confidence: 99%

Threat Modeling Approaches for Securing Cloud Computin

Amini¹,

Jamil²,

Ahmad³

et al. 2015

J. of Applied Sciences

View full text Add to dashboard Cite

A B S T R A C TThe cloud computing delivers services of processing data by using parallel and high computational processors virtually and remotely. This is very useful and beneficial to enterprises that have limitations in terms of processing resources, data storages and man power. However, one of the main challenge in cloud computing is data security. Supposed each user has an access to the domain based on the privilege given by the server. However, an attacker always has the opportunity to bypass the privilege by exploring and exploiting every vulnerability and threat found in the cloud computing environment. A systematic approach to identify vulnerabilities and threats is thus very important to ensure only authorized party is allowed to access the data. In this study, several approaches of vulnerability and threat modeling are reviewed and found that none of them is suitable for the cloud computing environment. Therefore, authors presented a dynamic model of identifying vulnerabilities and threats in the cloud computing environment. The proposed model enables the organization to systematically identify vulnerability and threats and analyze the security risk when they use cloud computing services.

show abstract

Secure user authentication in cloud computing management interfaces

Cited by 14 publications

References 1 publication

Comparative Analysis of Threat Modeling Methods for Cloud Computing towards Healthcare Security Practice

Comparative Analysis of Threat Modeling Methods for Cloud Computing towards Healthcare Security Practice

Stronger authentication for password credential Internet Services

Threat Modeling Approaches for Securing Cloud Computin

Contact Info

Product

Resources

About