Security in cloud computing: Opportunities and challenges

Information Sciences

Volumn 305, Issue , 2015, Pages 357-383

  Ali, Mazhar ^a,c   Khan, Samee U ^a   Vasilakos, Athanasios V ^b  

^a NORTH DAKOTA STATE UNIVERSITY   (United States)

^b KUWAIT UNIVERSITY   (Kuwait)

^c Development Studies   (Pakistan)

Author keywords

Cloud computing; Multi tenancy; Security; Virtualization; Web services

Indexed keywords

CLOUD COMPUTING; COST EFFECTIVENESS; MOBILE CLOUD COMPUTING; SURVEYS; VIRTUALIZATION;

ADMINISTRATIVE CONTROLS; CLOUD SERVICE PROVIDERS; FUTURE RESEARCH DIRECTIONS; HARDWARE RESOURCES; MULTI TENANCIES; SECURITY; SECURITY THREATS; SECURITY VULNERABILITIES;

WEB SERVICES;

EID: 84924368818     PISSN: 00200255     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ins.2015.01.025     Document Type: Article

References (130)

1. A. Abbas, and S.U. Khan A review on the state-of-the-art privacy preserving approaches in e-health clouds IEEE J. Biomed. Health Inform. 2014 10.1109/JBHI.2014.2300846
2. A. Abbas, K. Bilal, L. Zhang, and S.U. Khan A cloud based health insurance plan recommendation system: a user centered approach Future Gener. Comput. Syst. 2014 10.1016/j.future.2014.08.010
3. R. Agrawal, Legal issues in cloud computing, in: IndicThreads.com, Conference on Cloud Computing, 2011.
4. K. Alhamazani, R. Ranjan, K. Mitra, F. Rabhi, S.U. Khan, A. Guabtni, V. Bhatnagar, An Overview of the Commercial Cloud Monitoring Tools: Research Dimensions, Design Issues, and State-of-the-Art, arXiv preprint arXiv:1312.6170, 2013.
5. M. Ali, R. Dhamotharan, E. Khan, S.U. Khan, A.V. Vasilakos, K. Li, and A.Y. Zomaya SeDaSC: secure data sharing in clouds IEEE Syst. J. 2015 10.1109/JSYST.2014.2379646
6. O.D. Alowolodu, B.K. Alese, A.O. Adetunmbi, O.S. Adewale, and O.S. Ogundele Elliptic curve cryptography for securing cloud computing applications Int. J. Comput. Appl. 66 2013
7. M.R. Anala, J. Shetty, G. Shobha, A framework for secure live migration of virtual machines, in: IEEE International Conference on Advances in Computing, Communications and Informatics, 2013, pp. 243-248.
8. A. Andrieux, K. Czajkowski, A. Dan, K. Keahey, H. Ludwig, T. Nakata, J. Pruyne, J. Rofrano, S. Tuecke, M. Xu, Web services agreement specification (WS-agreement), < http://www.ogf.org/documents/GFD.107.pdf > (accessed 26.05.14).
9. M. Aslam, C. Gehrmann, M. Bjorkman, Security and trust preserving VM migrations in public clouds, in: IEEE 11th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2012, pp. 869-876.
10. M. Balduzzi, J. Zaddach, D. Balzarotti, E. Kirda, S. Loureiro, A security analysis of amazon's elastic compute cloud service, in: Proceedings of the 27th Annual ACM Symposium on Applied Computing, 2012, pp. 1427-1434.
11. R. Bhadauria, R. Borgohain, A. Biswas, S. Sanyal, Secure Authentication of Cloud Data Mining API, arXiv preprint arXiv:1308.0824, 2013.
12. K. Bilal, S.U.R. Malik, S.U. Khan, and A.Y. Zomaya Trends and challenges in cloud data centers IEEE Cloud Comput. Mag. 1 1 2014 10 20
13. R. Bobba, H. Khurana, and M. Prabhakaran Attribute-sets: a practically motivated enhancement to attribute-based encryption Computer Security ESORICS 2009 Springer Berlin, Heidelberg 587 604
14. S. Carlin, and K. Curran Cloud computing security Int. J. Ambient Comput. Intell. 3 1 2011 14 19
15. R. Chandramouli, M. Iorga, and S. Chokhani Cryptographic key management issues and challenges in cloud services Secure Cloud Computing 2014 Springer New York 1 30 doi: 10.1007/978-1-4614-9278-8-1
16. S. Chaisiri, B. Lee, and D. Niyato Optimization of resource provisioning cost in cloud computing IEEE Trans. Services Comput. 5 2 2012 164 177
17. D. Chen, H. Zhao, Data security and privacy protection issues in cloud computing, in: International Conference on Computer Science and Electronics Engineering (ICCSEE, IEEE), vol. 1, 2012, pp. 647-651.
18. J. Che, Y. Duan, T. Zhang, and J. Fan Study on the security models and strategies of cloud computing Proc. Eng. 23 2011 586 593
19. S.M.S. Chow, Y. He, L.C.K. Hui, and S.M. Yiu Spicesimple privacy-preserving identity-management for cloud environment Applied Cryptography and Network Security 2012 Springer Berlin, Heidelberg 526 543
20. A. Corradi, M. Fanelli, and L. Foschini VM consolidation: a real case based on openstack cloud Future Gener. Comput. Syst. 32 2014 118 127
21. Cloud security alliance, security guidelines for critical areas of focus in cloud computing v3.0, 2011.
22. B. Danev, R.J. Masti, G.O. Karame, S. Capkun, Enabling secure VM-vTPM migration in private clouds, in: Proceedings of the ACM 27th Annual Computer Security Applications Conference, 2011, pp. 187-196.
23. R.D. Dhungana, A. Mohammad, A. Sharma, I. Schoen, Identity management framework for cloud networking infrastructure, in: IEEE International Conference on Innovations in Information Technology (IIT), 2013, pp. 13-17.
24. H.T. Dinh, C. Lee, D. Niyato, and P. Wang A survey of mobile cloud computing: architecture, applications, and approaches Wireless Commun. Mobile Comput. 13 18 2013 1587 1611
25. Q. Duan, Y. Yan, and A.V. Vasilakos A survey on service-oriented network virtualization toward convergence of networking and cloud computing IEEE Trans. Netw. Service Manage. 9 4 2012 373 392
26. A. Eghtesadi, Y. Jarraya, M. Debbabi, M. Pourzandi, Preservation of security configurations in the cloud, in: IEEE International Conference on Cloud Engineering (IC2E), 2014, pp. 17-26.
27. K. Fan, D. Mao, Z. Lu, J. Wu, OPS: offine patching scheme for the images management in a secure cloud environment, in: IEEE International Conference on Services Computing (SCC), 2013, pp. 587-594.
28. D. AB. Fernandes, L. FB. Soares, J.V. Gomes, M.M. Freire, and P. RM Inácio Security issues in cloud environments: a survey Int. J. Inform. Sec. 13 2 2014 113 170
29. N. Fernando, S.W. Loke, and W. Rahayu Mobile cloud computing: a survey Future Gener. Comput. Syst. 29 1 2013 84 106
30. M. Ficco, and M. Rak Stealthy denial of service strategy in cloud computing IEEE Trans. Cloud Comput. 2014 10.1109/TCC.2014.2325045
31. Y. Fu, Z. Lin, Exterior: using a dual-vm based external shell for guest-os introspection, configuration, and recovery, in: Proceedings of the 9th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments, 2013, pp. 97-110.
32. M.I. Gofman, R. Luo, P. Yang, K. Gopalan, Sparc: a security and privacy aware virtual machine check pointing mechanism, in: Proceedings of the 10th Annual ACM Workshop on Privacy in the Electronic Society, 2011, pp. 115-124.
33. N. Gonzalez, C. Miers, F. Redgolo, M. Simplcio, T. Carvalho, M. Nslund, and M. Pourzandi A quantitative analysis of current security concerns and solutions for cloud computing J. Cloud Comput. 1 1 2012 1 18
34. J. Groth, and Amit Sahai Efficient non-interactive proof systems for bilinear groups Advances in Cryptology EUROCRYPT 2008 Springer Berlin, Heidelberg 415 432
35. B. Guan, J. Wu, Y. Wang, and S.U. Khan CIVSched: a communication-aware inter-VM scheduling technique for decreased network latency between co-located VMs IEEE Trans. Cloud Comput. 2 3 2014 320 332
36. M.L. Hale, R. Gamble, Secagreement: advancing security risk calculations in cloud services, in: IEEE Eighth World Congress on Services (SERVICES), 2012, pp. 133-140.
37. M.L. Hale, R. Gamble, Risk propagation of security SLAs in the cloud, in: IEEE Globecom Workshops (GC Wkshps), 2012, pp. 730-735.
38. M.L. Hale, R. Gamble, Building a compliance vocabulary to embed security controls in cloud SLAs, in: IEEE Ninth World Congress on Services (SERVICES), 2013, pp. 118-125.
39. K. Hashizume, D.G. Rosado, E. Fernndez-Medina, and E.B. Fernandez An analysis of security issues for cloud computing J. Internet Services Appl. 4 1 2013 1 13
40. B. Hay, K. Nance, and M. Bishop Storm clouds rising: security challenges for IaaS cloud computing 44th Hawaii International Conference on System Sciences (HICSS) 2011 IEEE 1 7
41. T.D. Hoang, C. Lee, D. Niyato, and P. Wang A survey of mobile cloud computing: architecture, applications, and approaches Wireless Commun. Mobile Comput. 13 18 2013 1587 1611
42. X. He, T. Chomsiri, P. Nanda, and Z. Tan Improving cloud network security using the tree-rule firewall Future Gener. Comput. Syst. 30 2014 116 126
43. Hewlett Packard, 5 cloud security concerns you must address, Business white paper by Hewlett Packard, No. 4AA3-8247ENW, rev. 1, 2012.
44. Y. Hu, T. Li, P. Yang, K. Gopalan, An application-level approach for privacy-preserving virtual machine checkpointing, in: IEEE Sixth International Conference on Cloud Computing, 2013, pp. 59-66.
45. M. Hussain, H. Abdulsalam, SECaaS: security as a service for cloud-based applications, in: ACM Proceedings of the Second Kuwait Conference on e-Services and e-Systems, 2011, p. 8.
46. A.S. Ibrahim, J. Hamlyn-Harris, J. Grundy, M. Almorsy, Cloudsec: a security monitoring appliance for virtual machines in the iaas cloud model, in: IEEE 5th International Conference on Network and System Security (NSS), 2011, pp. 113-120.
47. W.A. Jansen, Cloud hooks: Security and privacy issues in cloud computing, in: 44th Hawaii International Conference on System Sciences (HICSS), 2011, pp. 1-10.
48. D. Jeswani, A. Verma, P. Jayachandran, K. Bhattacharya, ImageElves: rapid and reliable system updates in the cloud, in: IEEE 33rd International Conference on Distributed Computing Systems (ICDCS), 2013, pp. 390-399.
49. P. Juncheng, D. Huimin, S. Yinghui, and L. Dong Potential attacks against k-anonymity on LBS and solutions for defending the attacks Advanced in Computer Science and its Applications 2014 Springer Berlin, Heidelberg 877 883
50. T. Jung, X. Li, Z. Wan, and M. Wan Control cloud data access privilege and anonymity with fully anonymous attribute based encryption IEEE Trans. Inform. Forensics Sec. 10 1 2014 190 199
51. M. Kazim, R. Masood, M.A. Shibli, Securing the virtual machine images in cloud computing, in: Proceedings of the ACM 6th International Conference on Security of Info and Networks, 2013, pp. 425-428.
52. A.N. Khan, M.L.M. Kiah, M. Ali, S.A. Madani, and S. Shamshirband BSS: block-based sharing scheme for secure data storage services in mobile cloud environment J. Supercomput. 70 2 2014 946 976
53. A.N. Khan, M.L.M. Kiah, S.A. Madani, M. Ali, and S. Shamshirband Incremental proxy re-encryption scheme for mobile cloud computing environment J. Supercomput. 68 2 2014 624 651
54. A.N. Khan, M.L.M. Kiah, S.A. Madani, and M. Ali Enhanced dynamic credential generation scheme for protection of user identity in mobile-cloud computing J. Supercomput. 66 3 2013 1687 1706
55. A.N. Khan, M.L.M. Kiah, S.U. Khan, and S.A. Madani Towards secure mobile cloud computing: a survey Future Gener. Comput. Syst. 29 5 2013 1278 1299
56. A.R. Khan, M. Othman, S.A. Madani, and S.U. Khan A survey of mobile cloud computing application models IEEE Commun. Surv. Tutorials 16 1 2014 393 413
57. R. Latif, H. Abbas, S. Assar, and Q. Ali Cloud computing risk assessment: a systematic literature review Future Information Technology 2014 Springer Berlin, Heidelberg 285 295
58. C. Li, A. Raghunathan, and N.K. Jha A trusted virtual machine in an untrusted management environment IEEE Trans. Serv. Comput. 5 4 2012 472 483
59. J. Li, B. Li, T. Wo, C. Hu, J. Huai, L. Liu, and K.P. Lam Cyber-guarder: a virtualization security assurance architecture for green cloud computing Future Gener. Comput. Syst. 28 2 2012 379 390
60. H.Y. Lin, and W.G. Tzeng A secure erasure code-based cloud storage system with secure data forwarding IEEE Trans. Parallel Distrib. Syst. 23 6 2012 995 1003
61. B. Liu, E. Blasch, Y. Chen, A.J. Aved, A. Hadiks, D. Shen, and G. Chen Information fusion in a cloud computing era: a systems-level perspective IEEE Aerospace Electron. Syst. Mag. 29 10 2014 16 24
62. B. Liu, J. Bi, and A. Vasilakos Towards incentivizing anti-spoofing deployment IEEE Trans. Inform. Forensics Sec. 9 3 2014 436 450
63. F. Liu, P. Shu, H. Jin, L. Ding, J. Yu, D. Niu, and B. Li Gearing resource-poor mobile devices with powerful clouds: architectures, challenges, and applications IEEE Wireless Commun. 20 3 2013
64. Q. Liu, G. Wang, and J. Wu Time-based proxy re-encryption scheme for secure data sharing in a cloud environment Inform. Sci. 258 2014 355 370
65. W. Liu, S. Peng, W. Du, W. Wang, and G.S. Zeng Security-aware intermediate data placement strategy in scientific cloud workflows Knowl. Inform. Syst. 41 2 2014 423 447
66. W. Lloyd, S. Pallickara, O. David, J. Lyon, M. Arabi, and K. Rojas Performance implications of multi-tier application deployments on Infrastructure-as-a-Service clouds: towards performance modeling Future Gener. Comput. Syst. 29 5 2013 1254 1264
67. F. Lombardi, and R.D. Pietro Secure virtualization for cloud computing J. Netw. Comput. Appl. 34 4 2011 1113 1122
68. S. Marston, Z. Li, S. Bandyopadhyay, J. Zhang, and A. Ghalsasi Cloud computing the business perspective Decis. Support Syst. 51 1 2011 176 189
69. P. Mell, and T. Grance The NIST definition of cloud computing (draft) NIST Special Publ. 800 145 2011 7
70. M. Menzel, R. Ranjan, L. Wang, S.U. Khan, and J. Chen CloudGenius: a hybrid decision support method for automating the migration of web application clusters to public clouds IEEE Trans. Comput. 2014 10.1109/TC.2014.2317188
71. C. Modi, D. Patel, B. Borisaniya, A. Patel, and M. Rajarajan A survey on security issues and solutions at different layers of Cloud computing J. Supercomput. 63 2 2013 561 592
72. H. Moraes, R. Nunes, D. Guedes, DCPortalsNg: efficient isolation of tenant networks in virtualized datacenters, in: Thirteenth International Conference on Networks, 2014, pp. 230-235.
73. S.H. Na, and E.N. Huh A broker-based cooperative security-SLA evaluation methodology for personal cloud computing Sec. Commun. Netw. 2014 10.1002/sec.1086
74. Y. Neng-Hai, Z. Hao, J. Xu, W. Zhang, and C. Zhang Review of cloud computing security Acta Electron. Sinica 41 2 2013 371 381
75. Open Web Application Security Project Top 10-2013, The ten most critical Web application security risks, < https://www.owasp.org/index.php/Top10]OWASP > Top 10 for 2013 (accessed 08.04.14).
76. W. Pan, Y. Zhang, M. Yu, and J. Jing Improving virtualization security by splitting hypervisor into smaller components Data and Applications Security and Privacy XXVI 2012 Springer Berlin, Heidelberg 298 313
77. R.D. Pietro, F. Lombardi, and M. Signorini CloRExPa: cloud resilience via execution path analysis Future Gener. Comput. Syst. 32 2014 168 179
78. A. Prasad, and S. Rao A mechanism design approach to resource procurement in cloud computing IEEE Trans. Comput. 63 1 2014 17 30
79. M. Rak, N. Suri, J. Luna, D. Petcu, V. Casola, U. Villano, Security as a service using an SLA-based approach via SPECS, in: IEEE 5th International Conference on Cloud Computing Technology and Science (CloudCom), vol. 2, 2013, pp. 1-6.
80. K.S. Rao, and P.S. Thilagam Heuristics based server consolidation with residual resource defragmentation in cloud data centers Future Gener. Comput. Syst. 2014 10.1016/j.future.2014.09.009
81. M.R. Rahimi, J. Ren, C.H. Liu, A.V. Vasilakos, and N. Venkatasubramanian Mobile cloud computing: a survey, state of art and future directions Mobile Netw. Appl. 19 2 2014 133 143
82. M.R. Rahimi, N. Venkatasubramanian, S. Mehrotra, A.V. Vasilakos, MAPCloud: mobile applications on an elastic and scalable 2-tier cloud architecture, in: Proceedings of the 2012 IEEE/ACM Fifth International Conference on Utility and Cloud Computing, 2012, pp. 83-90.
83. K. Ren, C. Wang, and Q. Wang Security challenges for the public cloud IEEE Internet Comput. 16 1 2012 69 73
84. T. Ristenpart, E. Tromer, H. Shacham, S. Savage, Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds, in: Proceedings of the 16th ACM Conference on Computer and Communications Security, 2009, pp. 199-212.
85. C. Rong, S.T. Nguyen, and M.G. Jaatun Beyond lightning: a survey on security challenges in cloud computing Comput. Electr. Eng. 39 1 2013 47 54
86. S. Ruj, M. Stojmenovic, and A. Nayak Decentralized access control with anonymous authentication of data stored in clouds IEEE Trans. Parallel Distrib. Syst. 25 2 2014 384 394
87. M.D. Ryan Cloud computing security: the scientific challenge, and a survey of solutions J. Syst. Softw. 86 09 2013 2263 2268
88. M. Sadiku, S. Musa, and O. Momoh Cloud computing: opportunities and challenges IEEE Potentials 33 1 2014 34 36
89. E. Schweitzer Reconciliation of the cloud computing model with US federal electronic health record regulations J. Am. Med. Inform. Assoc. 19 2 2012 161 165
90. R. Schwarzkopf, M. Schmidt, C. Strack, S. Martin, and B. Freisleben Increasing virtual machine security in cloud environments J. Cloud Comput. 1 1 2012 1 12
91. S.K. Sah, S. Shakya, H. Dhungana, A security management for cloud based applications and services with diameter-AAA, in: IEEE International Conference on Issues and Challenges in Intelligent Computing Techniques (ICICT), 2014, pp. 6-11.
92. A. Sahai, B. Waters, Fuzzy identity-based encryption, in: Advances in Cryptology EUROCRYPT, 2005, pp. 457-473.
93. K. Salah, J.M.A. Calero, S. Zeadally, S. Al-Mulla, and M. Alzaabi Using cloud computing to implement a security overlay network IEEE Sec. Privacy 11 1 2013 44 53
94. K. Sankar, S. Kannan, and P. Jennifer On-demand security architecture for cloud computing Middle-East J. Sci. Res. 20 2 2014 241 246
95. Z. Sanaei, S. Abolfazli, A. Gani, and R. Buyya Heterogeneity in mobile cloud computing: taxonomy and open challenges IEEE Commun. Surveys Tutorials 16 1 2014 369 392
96. L. FB Soares, D. AB Fernandes, J.V. Gomes, M.M. Freire, and P. RM Inácio Cloud security: state of the art Security, Privacy and Trust in Cloud Systems 2014 Springer Berlin, Heidelberg 3 44
97. M.H. Song, Analysis of risks for virtualization technology, in: Applied Mechanics and Materials, vol. 539, 2014, pp. 374-377.
98. S.K. Sood A combined approach to ensure data security in cloud computing J. Netw. Comput. Appl. 35 6 2012 1831 1838
99. M. Sookhak, H. Talebian, E. Ahmed, A. Gani, and M.K. Khan A review on remote data auditing in single cloud server: taxonomy and open issues J. Netw. Comput. Appl. 43 2014 121 141
100. A. Srivastava, H. Raj, J. Gi-n, and P. England Trusted VM snapshots in untrusted cloud infrastructures Research in Attacks, Intrusions, and Defenses 2012 Springer Berlin, Heidelberg 1 21
101. S. Subashini, and V. Kavitha A survey on security issues in service delivery models of cloud computing J. Netw. Comput. Appl. 34 1 2011 1 11
102. J. Szefer, E. Keller, R.B. Lee, J. Rexford, Eliminating the hypervisor attack surface for a more secure cloud, in: Proceedings of the 18th ACM Conference on Computer and Communications Security, 2011, pp. 401-412.
103. Y. Tang, P.P. Lee, J.C.S. Lui, and R. Perlman Secure overlay cloud storage with access control and assured deletion IEEE Trans. Dependable Secure Comput. 9 6 2012 903 916
104. Z. Tari Security and privacy in cloud computing IEEE Cloud Comput. 1 1 2014 54 57
105. Z. Tavakoli, S. Meier, and A. Vensmer A framework for security context migration in a firewall secured virtual machine environment Information and Communication Technologies 2012 Springer Berlin, Heidelberg 41 51
106. V. Varadharajan, and U. Tupakula Counteracting security attacks in virtual machines in the cloud using property based attestation J. Network Comput. Appl. 40 2014 31 45
107. V. Vladimir, Cloud adoption issues: interoperability and security, in: Cloud Computing and Big Data, 2013, pp. 53-65.
108. Z. Wan, J. Liu, and R.H. Deng HASBE: a hierarchical attribute-based solution for flexible and scalable access control in cloud computing IEEE Trans. Inform. Forensics Sec. 7 2 2012 743 754
109. X. Wan, X.F. Zhang, L. Chen, J.X. Zhu, An improved vTPM migration protocol based trusted channel, in: IEEE International Conference on Systems and Informatics, 2012, pp. 870-875.
110. C. Wang, Q. Wang, K. Ren, N. Cao, and W. Lou Toward secure and dependable storage services in cloud computing IEEE Trans. Services Comput. 5 2 2012 220 232
111. Z. Wang, C. Wu, M. Grace, X. Jiang, Isolating commodity hosted hypervisors with hyperlock, in: Proceedings of the 7th ACM European Conference on Computer Systems, 2012, pp. 127-140.
112. B. Waters Efficient identity-based encryption without random oracles Advances in Cryptology EUROCRYPT 2005 Springer Berlin, Heidelberg 114 127
113. J. Wei, X. Zhang, G. Ammons, V. Bala, P. Ning, Managing security of virtual machine images in a cloud environment, in: Proceedings of the 2009 ACM Workshop on Cloud Computing Security, 2009, pp. 91-96
114. L. Wei, H. Zhu, Z. Cao, X. Dong, W. Jia, Y. Chen, and A.V. Vasilakos Security and privacy for storage and computation in cloud computing Inform. Sci. 258 2014 371 386
115. C. Wu, Z. Wang, X. Jiang, Taming hosted hypervisors with (mostly) deprivileged execution, in: Proceedings of the Network and Distributed System Security Symposium (NDSS), San Diego, CA, 2013.
116. H. Wu, Y. Ding, C. Winer, L. Yao, Network security for virtual machine in cloud computing, in: 5th International Conference on Computer Sciences and Convergence Information Technology, 2010, pp. 18-21.
117. M.Y. Wu, T.H. Lee, Design and implementation of cloud API access control based on OAuth, in: IEEE TENCON Spring Conference, 2013, pp. 485-489.
118. Y. Xia, Y. Liu, H. Chen, Architecture support for guest-transparent VM protection from untrusted hypervisor and physical attacks, in: IEEE 19th International Symposium on High Performance Computer Architecture, 2013, pp. 246-257.
119. Y. Xia, Y. Liu, H. Chen, B. Zang, Defending against VM rollback attack, in: IEEE/IFIP 42nd International Conference on Dependable Systems and Networks Workshops, 2012, pp. 1-5.
120. T. Xing, D. Huang, L. Xu, C. Chung, P. Khatkar, Snortflow: a openflow-based intrusion prevention system in cloud environment, in: IEEE Research and Educational Experiment Workshop, 2013, pp. 89-92.
121. Z. Xiao, and Y. Xiao Security and privacy in cloud computing IEEE Commun. Surveys Tutorials 15 2 2013 843 859
122. S. Yang, P. Lai, J. Lin, Design role-based multi-tenancy access control scheme for cloud services, in: IEEE International Symposium on Biometrics and Security Technologies (ISBAST), 2013, pp. 273-279.
123. Z. Yan, P. Zhang, and A.V. Vasilakos A survey on trust management for Internet of things J. Netw. Comput. Appl. 42 2014 120 134
124. S. Yazji, P. Scheuermann, R.P. Dick, G. Trajcevski, and R. Jin Efficient location aware intrusion detection to protect mobile devices Personal Ubiquitous Comput. 18 1 2014 143 162
125. Y.A. Younis, M. Merabti, K. Kifayat, Secure cloud computing for critical infrastructure: a survey, Technical Report, Liverpool John Moores University, United Kingdom, Tech. Rep. ISBN: 978-1-902560-27-4, 2013.
126. H. Yu, N. Powell, D. Stembridge, and X. Yuan Cloud computing and security challenges Proceedings of the 50th Annual Southeast Regional Conference 2012 ACM 298 302
127. M. Zalewski, Browser security handbook, Google Code, 2010. < https://code.google.com/p/browsersec/ > (accessed 08.04.14).
128. F. Zhang, and H. Chen Security-preserving live migration of virtual machines in the cloud J. Netw. Syst. Manage. 21 4 2013 562 587
129. F. Zhang, J. Chen, H. Chen, B. Zang, Cloudvisor: retrofitting protection of virtual machines in multi-tenant cloud with nested virtualization, in: Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles, 2011, pp. 203-216.
130. F. Zhang, J. Wang, K. Sun, and A. Stavrou HyperCheck: a hardware-assisted integrity monitor IEEE Trans. Dependable Sec. Comput. 2013 10.1109/TDSC.2013.53