Commentary: Cloud computing - A security problem or solution?

Information Security Technical Report

Volumn 16, Issue 3-4, 2011, Pages 89-96

  Dorey, P G ^a   Leite, A ^b  

^a UNIVERSITY OF LONDON   (United Kingdom)

^b KPMG LLP   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SECURITY OF DATA;

CLOUD SERVICES; IT ENVIRONMENTS; SECURITY CHALLENGES; SECURITY PROBLEMS; TRANSITIONAL STATE;

CLOUD COMPUTING;

EID: 84857373304     PISSN: 13634127     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.istr.2011.08.004     Document Type: Article

References (32)

1. Amazon AWS achieves ISO 27001 certification July 29, 2011 Amazon Web Services [Online] http://aws.amazon.com/about-aws/whats-new/2010/11/18/aws- achieves-iso-27001-certification/
2. Amazon cloud outage highlights need for transparency [online] s.l 2011 CRN
3. M. Armbrust, A. Fox, R. Griffith, A.D. Joseph, R. Katz, and A. Konwinski 4, s.l.: A view of cloud computing Vol. 53 2010 Communications of the ACM
4. Business assurance for the 21st century July 21, 2011 Common Assurance [Online] http://common-assurance.com/resources/Business-Assurance-for-the-21st- Century-final.pdf
5. CAMM Common assurace maturity model July 21, 2011 htp://www.common- assurance.org [Online]
6. R. Chakraborty, S. Ramireddy, T.S. Raghu, and H.R. Rao 4, s.l The information assurance practices of cloud computing vendors Vol. 12 2010 IEEE IT Professional29-37
7. Ellen Friedman, and Jerry Rosenberg The case for server consolidation:or back to the glass house? 1999 The Computer Measurement Group www.cmg.org
8. Craig Gentry Fully homomorphic encryption using ideal lattices New York, USA: Proceedings of the 41st annual ACM symposium on theory of computing, 2009 2009 Vol. Report 2009/616
9. Goldman Sachs Tectonics: Unstoppable shift to SaaS continues 2010 Goldman Sachs New York
10. R. Grossman 2, s.l: IEEE The case for cloud computing Vol. 11 2009 IEEE ITPropp 23-27
11. C. Herley The plight of the targetted attacker in a world of scale s.l. Proceedings of the 9th workshop on the economics of information security 2010
12. Intel, RSA, Vmware Preview of RSA/Intel/VMware geo-location in public clouds July 20, 2011 http://www.youtube.com/watch?v=MCVUThIUApI YouTube. [Online]
13. IT Management Microsoft technet [Online] August 5, 2010 July 29, 2011 http://social.technet.microsoft.com/Forums/en-US/itmanager/thread/ 0978808f-67d5-4c1e-aef6-9191c23192fe/
14. Kantara initiative July 20, 2011 [Online] http://kantarainitiative.org/
15. R.H. Koenen, J. Lacy, M. MacKay, and S. Mitchell The long march to interoperable digital rights management 6, s.l IEEE Vol. 92 2004 883 897 (Pubitemid 40890718)
16. N. Leavit 2, s.l Promise, will NoSQL database live up to their Vol. 43 February 2010 IEEE 12-14
17. Liberty alliance July 20, 2011 [Online] http://www.projectliberty.org/
18. Joseph Menn Microsoft ends passport push Financial Times. December 30, 2004
19. Economics and internet security: a survey of recent analytical, empirical and behavioral research. Moore, TYler and Anderson, Ross. Cambridge, Massachusetts: Computer Science Group, Harvard University. TR-03-11.
20. M. Mowbray 1, s.l The fog over the grimpen mire: cloud computing and the law Vol. 6 2009 HP Scripted
21. David Núñez, Issac Agudo, Prokopios Drogkaris, and Stefanos Gritzalis Identity management challenges for intercloud applications Crete, Greece: 1st international workshop on security and trust for applications in virtualised environments (STAVE 2011) 2011 Vol.
22. PingIdentity SAML Tutorial July 29, 2011 PingIdentity [Online] https://www.pingidentity.com/resource-center/SAML-Tutorials-and-Resources.cfm
23. Indrajit Roy, Srinath T.V. Setty, Ann Kilzer, Vitaly Shmatikov, and Emmett Witchel Airavat: security and privacy for MapReduce NSDI'10 proceedings of the 7th USENIX conference on networked systems design and implementation 2010 Usenix association Berkeley, California USA
24. Ahmad-Reza Sadeghi, Thomas Schneider, and Marcer Winandy Token-based cloud computing: secure outsourcing of data and arbitrary computations with lower latency TRUST'10 proceedings of the 3rd international conference on trust and trustworthy computing 2010 Springer Verlag Berlin Vol
25. SAFECode Fundamental practices for secure software development 2011 www.safecode.org Software Assurance Forum for Excellence in Code
26. Salesforce.com ISO 27001 certified security July 29, 2011 Salesforce [Online] http://www.salesforce.com/platform/cloud-infrastructure/security.jsp
27. S.S.Y. Shim, G. Bhalla, and V.S. Pendyala 2, s.l.: IEEE Federated identity management Vol. 38 2005 IEEE Computer pp. 120-122
28. The Jericho Forum Business Rationale for de-perimeterisation s.l 2007 www.jerichoforum.org
29. The Security for Business Innovation Council When advanced persistent threats go mainstream: building information security strategies to combat escalating threats s.l 2011 RSA Inc
30. Trusted Computing Group. [Online] [Cited: July 20, 2011] http://www.trustedcomputinggroup.org/.
31. Dai Yuefa, Bo Wu, Gu Yaqiang, Quan Zhang, and Tang Chaojing Data security model for cloud computing Proceedings of the 2009 international workshop on information security and application 2009 s.n. Qingdao, China
32. Dimitrios Zissis, and Dimitrios Lekkas Addressing cloud computing security issues Future Generation Computer Systems 2011 doi:10.1016/j.future. 2010.12.006