Attack surfaces: A taxonomy for attacks on cloud services

Proceedings - 2010 IEEE 3rd International Conference on Cloud Computing, CLOUD 2010

Volumn , Issue , 2010, Pages 276-279

  Gruschka, Nils ^a   Jensen, Meiko ^b  

^a NEC LABORATORIES EUROPE   (Germany)

^b RUHR UNIVERSITY BOCHUM   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

CLOUD COMPUTING; CLOUD SERVICES; SECURITY RISKS; WORK-IN-PROGRESS;

TAXONOMIES;

GRID COMPUTING;

EID: 77957955892     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CLOUD.2010.23     Document Type: Conference Paper

References (10)

1. J. Heiser and M. Nicolett, "Assessing the security risks of cloud computing," Gartner Report, 2009. [Online]. Available: http://www.gartner. com/DisplayDocument?id=685308.
2. P. Mell, "Nist presentation on effectively and securely using the cloud computing paradigm v26," Oct 2009.[Online]. Available: http://csrc.nist.gov/groups/SNS/cloud-computing/index.html.
3. L. Lowis and R. Accorsi, "On a classification approach for soa vulnerabilities," in COMPSAC (2), 2009, pp. 439-444.
4. M. Marlinspike, "Null prefix attacks against ssl/tls certificates," Thoughtcrime.org White Paper, 2009.
5. D. Brumley, "invisible intruders: rootkits in practice," USENIX, 1999.
6. N. Gruschka and L. Lo Iacono, "Vulnerable Cloud: SOAP Message Security Validation Revisited," in ICWS '09: Proceedings of the IEEE International Conference on Web Services. Los Angeles, USA: IEEE, 2009.
7. M. McIntosh and P. Austel, "XML signature element wrapping attacks and countermeasures," in SWS '05: Proceedings of the 2005 workshop on Secure web services. New York, NY, USA: ACM Press, 2005, pp. 20-27.
8. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage, "Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds," in CCS '09: Proceedings of the 16th ACM conference on Computer and communications security. New York, NY, USA: ACM, 2009, pp. 199-212.
9. M. Jensen, J. Schwenk, N. Gruschka, and L. Lo Iacono, "On technical security issues in cloud computing," in Proceedings of the IEEE International Conference on Cloud Computing (CLOUD-II), 2009.
10. M. Jensen, N. Gruschka, and N. Luttenberger, "The Impact of Flooding Attacks on Network-based Services," in Proceedings of the IEEE International Conference on Availability, Reliability and Security, 2008.