A quantitative analysis of current security concerns and solutions for cloud computing

Journal of Cloud Computing

Volumn 1, Issue 1, 2012, Pages 1-18

  Gonzalez, Nelson ^a   Miers, Charles ^a,c   Redígolo, Fernando ^a   Simplício, Marcos ^a   Carvalho, Tereza ^a   Näslund, Mats ^b   Pourzandi, Makan ^b  

^a UNIVERSITY OF SÃO PAULO   (Brazil)

^b ERICSSON RESEARCH   (Sweden)

^c SANTA CATARINA STATE UNIVERSITY   (Brazil)

Author keywords

[No Author keywords available]

Indexed keywords

CLOUD COMPUTING SECURITIES; CLOUD COMPUTING SERVICES; COMPUTATIONAL RESOURCES; CURRENT STATUS; EMERGING TECHNOLOGIES;

CLOUD COMPUTING;

EID: 84926426310     PISSN: None     EISSN: 2192113X     Source Type: Journal    
DOI: 10.1186/2192-113X-1-11     Document Type: Article

References (77)

1. IDC: Cloud Computing 2010 - An IDC Update. 2009.
2. Armbrust M, Fox A, Griffith R, Joseph AD, Katz RH, Konwinski A, Lee G, Patterson DA, Rabkin A, Stoica I, Zaharia M: Above the Clouds: A Berkeley View of Cloud Computing. 2009.
3. Rimal BP, Choi E, Lumb I: A Taxonomy and, Survey of Cloud Computing Systems. Fifth International Joint Conference on INC, IMSand IDC, NCM '09, CPS 2009. pp 44-51.
4. Shankland S: HP's Hurd dings cloud computing, IBM. 2009.
5. Catteddu D, Hogben G: Benefits, risks and recommendations for information security. 2009.
6. CSA: Security Guidance for Critical Areas of Focus in Cloud Computing. 2009.
7. Mather T, Kumaraswamy S: Cloud Security and privacy: An Enterprise Perspective on Risks and Compliance. 1st edition. 2009. O'Reilly Media.
8. Chen Y, Paxson V, Katz RH: What's New About Cloud Computing Security? 2010.
9. Mell P, Grance T: The NIST Definition of Cloud Computing. 2009.
10. Ibrahim AS, Hamlyn-Harris J, Grundy J: Emerging Security Challenges of Cloud Virtual Infrastructure. Proceedings of APSEC 2010Cloud Workshop, APSEC '10 2010.
11. Gonzalez N, Miers C, Redígolo F, Carvalho T, Simplício M, Naslund M, Pourzandi M: A quantitative analysis of current security concerns and solutions for cloud computing. In Proceedings of 3rd IEEECloudCom. Athens/Greece: IEEE Computer Society; 2011.
12. Hubbard D, Jr LJH, Sutton M: Top Threats to Cloud Computing. 2010.
13. Tompkins D: Security for Cloud-based Enterprise Applications. 2009.
14. Jensen M, Schwenk J, Gruschka N, Iacono LL: On Technical Security Issues in Cloud Computing. IEEE Internation Conference on CloudComputing 2009. pp 109-116.
15. TrendMicro: Cloud Computing Security - Making Virtual Machines Cloud-Ready. 2010.
16. Genovese S: Akamai Introduces Cloud-Based Firewall. 2009.
17. Hulme GV: CloudPassage aims to ease cloud server security management. 2011.
18. Oleshchuk VA, Køien GM: Security and Privacy in the Cloud - A Long-Term View. Security and Privacy in the Cloud - ALong-Term View. In: 2nd International Conference on WirelessCommunications, Vehicular Technology, Information Theory andAerospace and Electronic Systems Technology (Wireless VITAE), WIRELESSVITAE '11 2011. pp 1-5,.
19. Google: Google App Engine. 2011.
20. Google: Google Query Language (GQL). 2011.
21. StackOverflow: Does using non-SQL databases obviate the need for guarding against SQL injection? 2011.
22. Rose J: Cloudy with a chance of zero day. 2011.
23. Balkan A: Why Google App Engine is broken and what Google must do to fix it. 2011.
24. Salesforce: Salesforce Security Statement. 2011.
25. Espiner T: Salesforce tight-lipped after phishing attack. 2007.
26. Yee A: Implications of Salesforce Phishing Incident. 2007.
27. Salesforce: Security Implementation Guide. 2011.
28. Li H, Dai Y, Tian L, Yang H: Identity-Based Authentication for Cloud Computing. Proceedings of the 1st International Conference on CloudComputing, CloudCom '09 2009.
29. Amazon: Elastic Compute Cloud (EC2). 2011.
30. Kaufman C, Venkatapathy R: Windows Azure Security Overview. 2010.
31. McMillan R: Google Attack Part of Widespread Spying Effort. 2010.
32. Mills E: Behind the China attacks on Google. 2010.
33. Arrington M: Google Defends Against Large Scale Chinese Cyber Attack: May Cease Chinese Operations. 2010.
34. Bosch J: Google Accounts Attacked by Phishing Scam. 2009.
35. Telegraph T: Facebook Users Targeted By Phishing Attack. 2009.
36. Pearson S: Taking account of privacy when designing cloud computing services. Proceedings of the 2009 ICSE Workshop onSoftware Engineering Challenges of Cloud Computing, CLOUD '09 2009.
37. Musthaler L: Cost-effective data encryption in the cloud. Network World 2009.
38. Yan L, Rong C, Zhao G: Strengthen Cloud Computing Security with Federal Identity Management Using Hierarchical Identity-Based Cryptography. Proceedings of the 1st International Conference onCloud Computing, CloudCom '09 2009.
39. Tech C: Examining Redundancy in the Data Center Powered by the Cloud and Disaster Recovery. 2010.
40. Lyle M: Redundancy in Data Storage. 2011.
41. Dorion P: Data destruction services: When data deletion is not enough. 2010.
42. Mogull R: Cloud Data Security: Archive and Delete (Rough Cut). 2009.
43. Messmer E: Gartner: New security demands arising for virtualization, cloud computing. 2011.
44. Ristenpart T, Tromer E, Shacham H, Savage S: Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds. In Proceedings of the 16th ACM conference on Computer andcommunications security, CCS '09. New York, NY, USA, ACM; 2009. pp 199-212,.
45. Chow R, Golle P, Jakobsson M, Shi E, Staddon J, Masuoka R, Molina J: Controlling data in the cloud: outsourcing computation without outsourcing control. In Proceedings of the 2009 ACM workshop on, Cloud computing security, CCSW '09. New York, NY, USA, ACM,; 2009. pp 85-90,.
46. Sadeghi AR, Schneider T, Winandy M: Token-Based Cloud Computing - Secure Outsourcing of Data and Arbitrary Computations with Lower Latency. Proceedings of the 3rd international conferenceon Trust and trustworthy computing, TRUST '10 2010.
47. Brandic I, Dustdar S, Anstett T, Schumm D, Leymann F: Compliant Cloud Computing (C3): Architecture and Language Support for User-driven Compliance Management in Clouds. 2010 IEEE 3rdInternational Conference on Cloud Computing 2010. pp 244-251,.
48. Brodkin J: Gartner: Seven cloud computing security risks. 2008.
49. Kandukuri BR, Paturi R, Rakshit A: Cloud Security Issues. Proceedings of the 2009 IEEE International Conference on ServicesComputing, SCC '09 2009.
50. Winterford B: Amazon EC2 suffers huge outage. 2011.
51. Clarke G: Microsoft BPOS cloud outage burns Exchange converts. 2011.
52. Shankland S: Amazon cloud outage derails Reddit, Quora. 2011.
53. Young E: Cloud Computing - The role of internal audit. 2009.
54. CloudAudit: A6 - The automated audit, assertion, assessment and assurance API. 2011.
55. Anand N: The legal issues around cloud computing. 2010.
56. Hunter S: Ascending to the cloud creates negligible e-discovery risk. 2011.
57. Sharon D, Nelson JWS: Virtualization and Cloud Computing: benefits and e-discovery implications. 2011.
58. Bentley L: E-discovery in the cloud presents promise and problems. 2009.
59. Zierick J: The special case of privileged users in the sloud. 2011.
60. Dinoor S: Got Privilege? Ten Steps to Securing a Cloud-Based Enterprise. 2010.
61. Pavolotsky J: Top five legal issues for the cloud. 2010.
62. ENISA: About ENISA. 2011.
63. CSA: About. 2011.
64. CSA: CSA TCI Reference Architecture. 2011.
65. CSA: Security Guidance for Critical Areas of Focus in Cloud Computing V3. 0. 2011.
66. Ramireddy S, Chakraborthy R, Raghu TS, Rao HR: Privacy and Security Practices in the Arena of Cloud Computing - A Research in Progress. AMCIS 2010 Proceedings, AMCIS '10; 2010.
67. NIST: NIST Cloud Computing Reference Architecture: SP 500-292. 2011.
68. Youseff L, Butrico M, Silva DD: Toward a Unified Ontology of Cloud Computing. Grid Computing Environments Workshop, 2008. GCE '08; 2008. pp 10, 1,.
69. Johnston S: Sam Johnston: taxonomy: the 6 layer cloud computing stack. 2008.
70. Linthicum D: Defining the cloud computing framework. 2009.
71. Doelitzscher F, Reich C, Knahl M, Clarke N: An autonomous agent based incident detection system for cloud environments. Third IEEEInternational Conference on Cloud Computing Technology and Science, CloudCom 2011, CPS; 2011.
72. Oltsik J: Information security, virtualization, and the journey to the cloud. 2010.
73. Wallom D, Turilli M, Taylor G, Hargreaves N, Martin A, Raun A, McMoran A: myTrustedCloud: Trusted Cloud Infrastructure for Security-critical Computation and Data Managment. Third IEEE InternationalConference on Cloud Computing Technology and Science, CloudCom, CPS; 2011.
74. Dabrowski C, Mills K: VM Leakage and Orphan Control in Open-Source Clouds. Third IEEE International Conference on CloudComputing Technology and Science, CloudCom, CPS; 2011.
75. Chadwick DW, Casenove M: Security APIs for My Private Cloud. Third IEEE International Conference on Cloud Computing Technologyand Science, CloudCom, CPS; 2011.
76. Claybrook B: How providers affect cloud application migration. 2011.
77. CSA: Interoperability and portability. 2011.