Title
Security risks and their management in cloud computing
Abstract
Cloud computing provides outsourcing of resources bringing economic benefits. The outsourcing however does not allow data owners to outsource the responsibility of confidentiality, integrity and access control, as it still is the responsibility of the data owner. As cloud computing is transparent to both the programmers and the users, it induces challenges that were not present in previous forms of distributed computing. Furthermore, cloud computing enables its users to abstract away from low-level configuration such as configuring IP addresses and routers. It creates an illusion that this entire configuration is automated. This illusion is also true for security services, for instance automating security policies and access control in cloud, so that individuals or end-users using the cloud only perform very high-level (business oriented) configuration. This paper investigates the security challenges posed by the transparency of distribution, abstraction of configuration and automation of services by performing a detailed threat analysis of cloud computing across its different deployment scenarios (private, bursting, federation or multi-clouds). This paper also presents a risk inventory which documents the security threats identified in terms of availability, integrity and confidentiality for cloud infrastructures in detail for future security risks. We also propose a methodology for performing security risk assessment for cloud computing architectures presenting some of the initial results.
Year
DOI
Venue
2012
10.1109/CloudCom.2012.6427574
CloudCom
Keywords
DocType
Citations 
future security risk,data owner,access control,security threat,security risk assessment,cloud computing,security policy,entire configuration,cloud infrastructure,security service
Conference
13
PageRank 
References 
Authors
0.95
9
5
Name
Order
Citations
PageRank
Karim Djemame142346.71
Afnan Ullah Khan2382.23
Manuel Oriol372146.18
Ming Jiang4607.66
Mariam Kiran512117.83