Security on distributed systems: Cloud security versus traditional IT

IBM Journal of Research and Development

Volumn 58, Issue 1, 2014, Pages

  Himmel, M Azua ^a   Grossman, F ^b  

^a Barclays   (United Kingdom)

^b PACE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CLOUD COMPUTING; INVESTMENTS; MOBILE SECURITY;

CAPITAL INVESTMENT; CLOUD COMPUTING ENVIRONMENTS; CLOUD COMPUTING SERVICES; DISTRIBUTED SYSTEMS; IDENTIFICATION OF RISKS; QUALITATIVE APPROACH; RISK MITIGATION STRATEGY; SECURITY AND PRIVACY;

NETWORK SECURITY;

EID: 84901933057     PISSN: 00188646     EISSN: 21518556     Source Type: Journal    
DOI: 10.1147/JRD.2013.2287591     Document Type: Article

References (34)

1. S. K. Crook, C. J. Kolodgy, S. Hudson, and S. D. Drake, "Worldwide mobile security 2011-2015 forecast and analysis," IDC, Framingham, MA, USA, Rep., Mar. 2011.
2. C. Arthur, "Half of UK population owns a smartphone," in Guardian, London, U.K., 2011. [Online]. Available: http://www.guardian.co.uk/technology/2011/oct/31/half-uk-population-owns-smartphone
3. S. Ramgovind, M. M. Eloff, and E. Smith, "The management of security in cloud computing," in Proc. ISSA, Aug. 2010, pp. 1-7.
4. C. Liebert and M. Posey, "Security highlights from the 2010 U.S. WAN manager survey," IDC, Framingham, MA, USA, Rep., Jan. 2011. [Online]. Available: http://www.idc.com/research/viewdocsynopsis.jsp?containerId=226221§ionId= null&elementId=null&pageType=SYNOPSIS.
5. T. Mather, S. Kumaraswamy, and S. Latif, Cloud Security and PrivacyVAn Enterprise Perspective on Risks and Compliance. Sebastopol, CA, USA: O'Reilly Media, 2009.
6. M. Christodorescu, R. Sailer, D. L. Schales, D. Sgandurra, and D. Zamboni, "Cloud security is not (just) virtualization security: A short paper," in Proc. ACM Workshop Cloud Comput. Sec., New York, NY, USA, 2009, pp. 97-102.
7. B. R. Kandukuri, R. Paturi V, and A. Rakshit, "Cloud security issues," in Proc. IEEE Int. Conf. Services Comput., Bangalore, India, 2009, pp. 517-520.
8. L. Edward, K. Amokrane, D. Lourdeaux, and J. Barthes, "An ontology for managing a virtual environment for risk prevention," in Proc. 1st Int. Conf. Integr. Intell. Comput., 2010, pp. 62-67.
9. C. Cachin and M. Schunter, "A cloud you can trust: How to ensure that cloud computing's problemsVData breaches, leaks, service outagesVDon't obscure its virtues," in Proc. ICITST, Dec. 2001, pp. 214-219, IEEE.
10. P. Zech, "Risk-based security testing in cloud computing environments," in Proc. 4th IEEE Int. Conf. Softw. Testing, Verification Validation, Berlin, Germany, Mar. 21-25, 2011, pp. 411-414.
11. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage, "Hey, you, get off of my cloud: Exploring information leakage in third-party compute clouds," in Proc. ACM Conf. CCS, Chicago, IL, USA, Nov. 9-13, 2009, pp. 199-212.
12. G. J. Skulmoski, F. T. Hartman, and J. Krahn, "The Delphi method for graduate research," J. Inf. Technol. Educ., vol. 6, no. 1, pp. 1-21, 2007.
13. C. Okoli and S. D. Pawlowski, "The Delphi method as a research tool: An example design considerations and applications," Inf. Manage., vol. 42, no. 1, pp. 15-29, Dec. 2004.
14. D. Morton, "IBM mainframe operating systems: Timeline and brief explanation for the IBM system/360 and beyond," IBM, Armonk, NY, USA, Rep., Sep. 2011. [Online]. Available: http://www.demorton.com/Tech/##OSTL.pdf.
15. T. J. Bittman and L. Leong, "Virtual machines will slow in the enterprise, grow in the cloud," Gartner, Stamford, CT, USA, Rep. No. G00210732, Mar. 4, 2011.
16. E. C. G. T. Sacconaghi and M. R. Shah, "IT hardware: Does a move to large public clouds and data centers hurt or help server OEMs?" Bernstein Res., London, U.K., Rep., Apr. 6, 2011.
17. Richard, "Amazon says AWS outage was a FRe-mirroring Storm," in Cloud News Daily, Accessed Dec. 14, 2011. [Online]. Available: http://cloudnewsdaily.com/2011/04/amazon-saysaws-outage-was-a-re-mirroring-storm/
18. K. Oberle and M. Fisher, "ETSI CLOUDVInitial standardization requirements for cloud services," in Proc. GECON, 2010, pp. 105-115.
19. T. Rings, J. Grabowski, and S. Schulz, "On the standardization of a testing framework for application deployment on grid and cloud infrastructures," in Proc. Adv. Syst. Testing VALID Lifecycle Conf., 2010, pp. 99-107.
20. T. J. Bittman, "The road map from virtualization to cloud computing," Gartner, Stamford, CT, USA, Rep. No. G00210845, Mar. 3, 2011.
21. S. A. Almulla and C. Y. Yeun, "Cloud computing security management," in Proc. ICESMA, Sharjah, United Arab Emirates, 2010, pp. 1-7.
22. D. Chappell, Introducing the Azure Services Platform: An Early Look at Windows Azure, .Net Services, SQL Services, and Live Services, Oct. 2008, Report.
23. IBM X-Force 2011-Mid-Year Trend and Risk Report, IBM Corporation, Armonk, NY, USA, Sep. 2011.
24. E. Pinheiro, W. Weber, and L. A. Barroso, "Failure trends in a large disk drive population," in Proc. 5th USENIX Conf. FAST, 2007, p. 2.
25. F. Brown and R. Ragan, "Pulp google hackingVThe next generation search engine hacking arsenal," in Proc. Black Hat, Las Vegas, NV, USA, 2011, pp. 1-70. [Online]. Available: https://media.blackhat.com/bh-us-11/Brown/BH-US-11-BrownRagan-Pulp-Google.pdf.
26. J. Browne, Brewer's CAP Theorem, Accessed Jan. 11, 2009. [Online]. Available: http://www.julianbrowne.com/article/viewer/brewers-cap-theorem
27. K. D. Mitnick and W. L. Simon, The Art of Deception: Controlling the Human Element of Security. Hoboken, NJ, USA: Wiley, 2003.
28. S. Ghemawat, H. Gobioff, and S. Leung, "The google file system," in Proc. Symp. Oper. Syst. Principles, Lake George, NY, USA, Oct. 19-22, 2003, pp. 29-43.
29. VMware vSphere 4.0-Security Hardening Guide, VMware, Palo Alto, CA, USA, May 2010, pp. 1-70, Report.
30. B. S. G. Linden and J. York, "Amazon.com recommendations: Item-to-item collaborative filtering," IEEE Internet Comput., vol. 7, no. 1, pp. 76-80, Jan./Feb. 2003.
31. M. Azua, The Social Factor : Innovate, Ignite, and Win through Mass Collaboration And Social Networking. Upper Saddle River, NJ, USA: IBM Press, 2009.
32. S. Siewert and G. Scott, "Next Generation Scalable and Efficient Data Protection," in Proc. Intel Develop. Forum, 2011, pp. 1-30. [Online]. Available: http://ecee.colorado.edu/~siewerts/SF11-STOS004-101F.pdf.
33. S. Subashini and V. Kavitha, "A survey on security issues in service delivery models of cloud computing," J. Netw. Comput. Appl., vol. 34, no. 1, pp. 1-11, Jan. 1, 2011.
34. B. Schroeder and G. A. Gibson, "Disk failures in the real world: What does an MTTF of 1,000,000 hours mean to you?" in Proc. 5th USENIX Conf. FAST, San Jose, CA, USA, 2007, pp. 1-16.