Addressing cloud computing security issues

Future Generation Computer Systems

Volumn 28, Issue 3, 2012, Pages 583-592

  Zissis, Dimitrios ^a   Lekkas, Dimitrios ^a  

^a UNIVERSITY OF THE AEGEAN   (Greece)

Author keywords

Cloud computing security; Information and communication security; Public key infrastructure; Trust; Trusted Third Party

Indexed keywords

COMPUTING SECURITY; INFORMATION AND COMMUNICATION; PUBLIC KEY INFRASTRUCTURE; TRUST; TRUSTED THIRD PARTIES;

CLOUDS; COMPUTER GRAPHICS; COMPUTER SYSTEMS; GRID COMPUTING; PUBLIC KEY CRYPTOGRAPHY; SECURITY OF DATA; SOFTWARE ARCHITECTURE;

CLOUD COMPUTING;

EID: 79959557055     PISSN: 0167739X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.future.2010.12.006     Document Type: Article

References (32)

1. K. Stanoevska-Slabeva, and T. Wozniak Grid and Cloud Computing-A Business Perspective on Technology and Applications 2010 Springer-Verlag Berlin, Heidelberg
2. National Institute of Standards and Technology, The NIST Definition of Cloud Computing, Information Technology Laboratory, 2009.
3. E. Naone, Technology overview, conjuring clouds, MIT Technology Review, JulyAugust, 2009.
4. Merrill Lynch, The cloud wars: $100+ billion at stake, Merrill Lynch, 2008.
5. D. Harris, Why 'grid' doesn't sell, 2008.
6. G. Reese Cloud Application Architectures: Building Applications and Infrastructure in the Cloud Theory in Practice 2009 O'Reilly Media
7. B. Rajkumar, C. Yeo, S. Venugopal, and S. Malpani Cloud computing and emerging IT platforms: vision, hype, and reality for delivering computing as the 5th utility Future Generation Computer Systems 2009
8. D. Artz, and Y. Gil A survey of trust in computer science and the semantic web Journal of Web Semantics: Science, Services and Agents on the World Wide Web 2007
9. DoD Computer Security Center, Trusted computer system evaluation criteria, DoD 5200.28-STD, 1985.
10. A. Nagarajan, and V. Varadharajan Dynamic trust enhanced security model for trusted platform based Future Generation Computer Systems 2010 10.1016/j.future.2010.10.008
11. International Telecommunication Union, X-509 | ISO/IEC 9594-8, The directory: Public-key and attribute certificate frameworks, ITU, X-Series, 2001.
12. D. Lekkas Establishing and managing trust within the public key infrastructure Computer Communications 26 16 2003
13. A. Giddens The Consequences of Modernity 1991 Polity Press UK
14. K. Tserpes, F. Aisopos, D. Kyriazis, and T. Varvarigou Service selection decision support in the Internet of services Economics of Grids, Clouds, Systems, and Services Lecture Notes in Computer Science vol. 6296 2010 16 33 10.1007/978-3-642-15681-62
15. R. Sherman Distributed systems security Computers & Security 11 1 1992
16. D. Lekkas, S. Gritzalis, and S. Katsikas Quality assured trusted third parties for deploying secure Internet-based healthcare applications International Journal of Medical Informatics 2002
17. National Institute of Standards and Technology. Guide for mapping types of information and information systems to security categories, NIST 800-60, 2008.
18. Gartner. Assessing the security risks of cloud computing, Gartner, 2008.
19. Cloud Security Alliance. Top threats to cloud computing, Cloud Security Alliance, 2010.
20. R. Sherman Distributed systems security Computers & Security 11 1 1992
21. D. Polemi Trusted third party services for health care in Europe Future Generation Computer Systems 14 1998 51 59 (Pubitemid 128401571)
22. S. Castell, Code of practice and management guidelines for trusted third party services, INFOSEC Project Report S2101/02, 1993.
23. Commission of the European Community. Green paper on the security of information systems, ver. 4.2.1, 1994.
24. VeriSign. Directories and publickey infrastructure (PKI), Directories and PublicKey Infrastructure, PKI.
25. A. Alshamsi, and T. Saito A technical comparison of IPSec and SSL Cryptology 2004
26. Cloud Identity Summit, Secure the cloud now, Cloud identity summit, Retrieved on 10/11/2010 from: http://www.cloudidentitysummit.com/.
27. Internet 2, Shibboleth [Online] 2007, Retrieved on 10/11/2010 from: http://shibboleth.internet2.edu/.
28. Internet 2, FAQ on SAML and Shibboleth relationship, Shibboleth, Internet 2, 2010. Retrieved on 10/11/2010 from: http://shibboleth.internet2.edu/ Shibboleth-SAML-FAQ.html.
29. UK Federation Information Centre, UK federation information centre, 2007.
30. C.P. Pfleeger, and S.L. Pfleeger Security in Computing 2002 Prentice Hall
31. B. Lang, I. Foster, F. Siebenlist, R. Ananthakrishnan, T. Freeman, Attribute based access control for grid computing, 2008.
32. James B.D. Joshi, Walid G. Aref, Arif Ghafoor, and Eugene H. Spafford Security models for web-based applications Communications of the ACM 44 2 2001