Cloud Computing security - Trends and research directions

Proceedings - 2011 IEEE World Congress on Services, SERVICES 2011

Volumn , Issue , 2011, Pages 524-531

  Sengupta, Shubhashis ^a   Kaulgud, Vikrant ^a   Sharma, Vibhu Saujanya ^a  

^a Accenture Services Pvt Ltd India   (India)

Author keywords

Cloud Computing; Data integrity and confidentiality; Security; Survey; Trusted Computing

Indexed keywords

BUSINESS APPLICATIONS; CLOUD SERVICES; COMPUTING SECURITY; DATA INTEGRITY; ENTERPRISE APPLICATIONS; HOLISTIC VIEW; IDENTITY MANAGEMENT; LEGAL COMPLIANCE; PROCESS SECURITY; RESEARCH DIRECTIONS; SECURITY; SECURITY AND PRIVACY; SOFTWARE PLATFORMS; TRUSTED COMPUTING; VIRTUALIZATIONS;

ACCESS CONTROL; COMPUTER PRIVACY; SURVEYS;

CLOUD COMPUTING;

EID: 80053414558     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SERVICES.2011.94     Document Type: Conference Paper

References (40)

1. Amazon Elastic Compute Cloud web services, http://aws.amazon.com/ec2
2. SalesForce Force.com Platform as a service, http://developer.force.com
3. NetSuite SaaS portal, http://www.netsuite.com
4. Gartner DataQuest Forecast on Public Cloud Services DocID G00200833, June 2, 2010
5. Chow,R.,Gotlle,P.,Jakobsson, E.S.,Staddon,J., Masuoka,R., and Molina,J. Controlling Data in the Cloud: Outsourcing Computation without Outsourcing Control. Proceedings of the 2009 ACM workshop on Cloud computing security, 2009
6. Gellman, R., Privacy in the Cloud: Risks to Privacy and Confidentiality in Cloud Computing. Technical Report prepared for World Privacy Forum, 2009
7. Novell Inc. survey on cloud computing, http://www.novell.com/news/press/ novell-survey-revealswidespread-and-accelerating-enterprise-adoption-of- privateclouds
8. Telecommunication Industry Association, TIA-942: Data Center Standards Overview, http://tiaonline.org
9. Carpenter, M., Liston, t., and Skoudis, E, Hiding Virtualization from Attackers and Malware. IEEE Security and Privacy Magazine, 2007
10. Ristenport, T., Tromer, E., Shacham, H., and Savage, S., Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds. Proceedings of the 16th ACM conference on Computer and Communication Security, 2009
11. MIT Exo-kernel operating system. http://pdos.csail.mit.edu/exo.html
12. Czajkowski, G., Application Isolation in the Java Virtual Machine. ACM SIGPLAN Notices, vol 35, issue 10. Oct 2000
13. M. Jensen, N. Gruschka, and R. Herkenhoner, A survey of attacks on web services. Computer Science Research and Development (CSRD), Springer Berlin/Heidelberg. 2009.
14. Google Gears at http://gears.google.com
15. http://www.zdnet.com/blog/projectfailures/mediamax-thelinkup-when-the- cloud-fails/999
16. IBM Homomorphic Encryption research page, http://domino.research.ibm.com/ comm/researchprojects.nsf/pages/security.homoenc.html
17. Plank, J.S., Erasure codes for Storage Applications.,Tutorial given at FAST-2005: 4th Usenix Conference on File and Storage Technologies San Francisco, CA. December, 2005
18. Zhong, S., Yang, Z., and Wright, R., Privacy-Enhancing k - anonymization of Customer Data, Proceedings of the 24th ACM Symposium on Principles of Databases. 2005
19. Storage Network Industry Alliance, http://www.snia.org
20. Cloud Security Alliance, http://www.cloudsecurityalliance.org
21. OpenID foundation website, http://www.openid.net
22. http://specs.xmlsoap.org/ws/2006/12/federation/wsfederation.pdf
23. http://epic.org/privacy/cloudcomputing/google /ftc031709.pdf
24. http://ciocoo.com/clouds-and-data-jurisdiction-282/
25. Ruan, K., Cloud Forensics: Challenges and Opportunities, Presentation from Center of Cybercrime and Investigation. University College, Dublin
26. Open Grid Forum's OCCI specification, http://www.occiwg.org/
27. Trusted Computing Group, http://www.trustedcomputinggroup.org
28. Garfinkel, T., Pfaff,B., Chow, J., Rosenblum, M., and Boneh, D., Terra: A Virtual Machine-Based Platform for Trusted Computing, Proceedings of ACM Symposium on Operating Systems Principles. 2003
29. Ateniese, G., Burns, R., and Curtmola, R., Provable Data Possession in Untrusted Stores, Proceedings of the 14th ACM conference on Computer and Communication Security, 2007
30. Necula, G., C., Proof-carrying code, Proceedings of 24th ACM SIGPLAN-SIGACT symposium on Principles of Programming Languages, 1997
31. Cryptographic Message Syntax standard at http://www.ietf.org/rfc/rfc2630. txt
32. Lindell, Y., and Pinkas, B., Privacy Preserving Data Mining, Proceedings of 20th Annual International Cryptology Conference. 2000
33. Boneh, D., and Crescenzo, G., D., Public Key Encryption with Keyword Search, Proceedings of Advances in Cryptology, EuroCrypt 2004. Lecture Notes in Computer Science, Springer
34. Chor, B., Goldreich, O., Kushilevitz, E., and Madhu Sudan, Private Information Retrieval, Proceedings of the 36th Annual 1EEE conference on foundation of Computer Science. 1995
35. OAuth community site, http://www.oauth.net
36. http://blogs.wsj.com/digits/2009/03/08/1214/
37. Reddy, K.K.M, Macko, P., and Seltzer, M., Provenance for the cloud. Proceedings of the 8th USENIX conference on File and storage technologies, 2010
38. http://www.oasis-open.org/committees/provision/
39. National Institute of Standards and Technology (NIST), http://www.nist.gov
40. NIST, Guidelines on Security and Privacy in Public Cloud Computing, http://csrc.nist.gov/publications. 2011