Cloud Computing: Security Issues Overview and Solving Techniques Investigation

Cloud computing provides computing resources, platforms, and applications as a service in a flexible, cost-effective, and efficient way. Cloud computing has integrated with industry and many other fields in recent years, which prompted researchers to look into new technologies. Cloud users have moved their applications, data and services to the Cloud storage due to the availability and scalability of Cloud services. Cloud services and applications are provided through the Internet-based on a pay-per-use model. Plenty of security issues are created due to the migration from local to remote computing for both Cloud users and providers. This paper discusses an overview of Cloud computing, as well as a study of security issues at various levels of Cloud computing. The article also provides a complete review of security issues with their existing solutions for a better understanding of specific open research issues.

Over the three industrial revolutions, man has achieved great achievements. But besides that great success will always go hand in hand with many problems that arise. Because the rate at which technology develops is directly proportional to the threats it poses. The emergence of new technology requires researchers and students to pay attention to discover new threats to make it reliable and user-friendly. In the meantime 4.0 cloud computing is a new technology model. Security issues in cloud computing are considered one of the biggest obstacles besides the broad benefits of cloud computing. New concepts introduced by the cloud create new challenges for the security community. Addressing these challenges requires, in addition to the ability to cultivate and adjust security measures developed for other systems, to propose new security policies, models and protocols to address optimal and effective cloud security challenges. In this article, we provide comprehensive research on cloud security including classification of known security threats and advanced practices in attempting to address these threats. The paper also provides classification dependency and provides solutions in the form of preventive action rather than proactive action.

Cloud computing and big data: Technologies and applications

Most cloud users and officialdoms have a great interest in adoption and use cloud services like cloud storage to store their data on cloud environment. With the speedy growing in cloud computing technology, user's data security and privacy in cloud computing technology is the utmost dangerous issues because data owner stores their sensitive data onto remote cloud storage. However, successful retrieval of confidential data and computation on confidential data is hard to succeed by traditional cryptographic algorithm. Hence, to warrant the cloud security we are using the cryptographic algorithms that supports for computation over encrypted data. In this, Homomorphic cryptographic algorithm is one such technique that has interested homomorphic cryptographic algorithm used to secure user data in cloud server. It performs computation on cipher texts data can be operated directly without affecting the confidentiality of the encryption algorithms. We have established a framework for security of data on a cloud storage by using fully homomorphic cryptographic algorithm. Indeed, In this study, we have evaluated complexity of three homomorphic cryptographic algorithm those are SDC FHE, Paillier and RSA with encryption time, decryption time, throughput and memory usage

Cloud computing platform provides on-demand access of services, and these services can also be customised, which enables the customers to use these services as per their requirement and they also need to pay according to their uses. Recent advancements in the field of cloud computing and internet technologies have attracted the organisations to shift their businesses on cloud. However, moving data and applications to a third party services provider also raises critical concern for security and privacy. Availability of cloud services is one of the most important security issues which directly affect the business of the cloud service providers and also its customers. Distributed denial of service (DDoS) attack on cloud is the root cause that challenges the availability of cloud services. This paper presents taxonomy of security issues in cloud, taxonomy of DDoS attacks in cloud, and taxonomy of DDoS defence mechanisms in cloud environment. We have also discussed, analysed, and compared some well-known methods for DDoS attack defence in cloud on different parameters that will help the victim to understand the risk and also assists them to select the proper defence technique to protect their cloud system from DDoS attacks.

Enhancement of Security in Cloud Maas and JUJU Using Foxiproxy

IT sector is growing day by day, its data and energy costs are also increasing, which needs to access the high-end computing capabilities. To fulfill these requirements, there is a need to shift from traditional computing practices to new computing practices that give access to a broader network, unlimited resources, and enables self-service on demand at a reasonable cost using pay per use method. All these requirements can be fulfilled with cloud computing. Cloud Computing has a number of advantages as well as disadvantages. Security is a major threat to the cloud computing because the data placed on cloud servers is always vulnerable as there are lots of attackers on the internet who tries to compromise the security of the cloud. To overcome this issue, we use security appliances in the form of physical machines or by virtualization. A significant amount of power is consumed by security appliances which not only leads to the high energy costs but also a major threat to the environment as carbon-dioxide is released. So there is a need to find optimal solutions for providing security in cloud computing environment in an efficient manner. In this paper, a comprehensive survey on existing cloud security frameworks has been done. Based upon the limitations on existing frameworks a new framework has been proposed to provide security in virtual networks that is based on Intrusion Detection and Prevention System (IDPS) and its prototype implementation has also been done.

Cloud computing provides a way to deliver a variety of services through the internet. These services mainly include servers, storage, computing, networks, and so on. Cloud computing has brought massive changes to the way resources and data can be managed. Hence, many organizations and individuals are adopting cloud technology for storing their data and are accessing different resources from the cloud. The only concern for large-scale adoption of the cloud is the security issue. It will be always challenging to select a trustworthy cloud service among the large pool of available services. In this chapter, a trust-based cloud service selection mechanism is proposed. The proposed method computes the trustworthiness of cloud service by considering its performance and recommendations. Also, a method to compute trust values for the cloud users on basis of behaviour and recommendation is proposed. Wireless sensor networks (WSNs) consist of sensor nodes that monitor the surrounding environment and collect a large amount of data. In this chapter, an integrated framework for WSNs and cloud computing is proposed so that the data is stored efficiently in the cloud and accessed by trustworthy users and services. The major contribution of the chapter is to integrate machine learning techniques with the traditional trust model to improve the performance of trust evaluation. The fuzzy-c means algorithm is applied to compute the trust levels for cloud services and cloud users. The results show that the proposed method performs better than the existing relevant techniques.

Cloud computing consists of three fundamental service models: infrastructure-as-a-service, platform-as-a service and software-as-a-service. The technology “cloud computing” comprises four deployment models: public cloud, private cloud, hybrid cloud and community cloud. This chapter describes the six cloud service and deployment models, the association each of these services and models have with physical/virtual networks. Cloud service models are designed to power storage platforms, infrastructure solutions, provisioning and virtualization. Cloud computing services are developed to support shared network resources, provisioned between physical and virtual networks. These solutions are offered to organizations and consumers as utilities, to support dynamic, static, network and database provisioning processes. Vendors offer these resources to support day-to-day resource provisioning amid physical and virtual machines.

Cloud computing is becoming increasingly attractive both in commercial and government sectors because of the significant cost reduction in their IT operations. The technical benefits of cloud environment (and its service-oriented capabilities) are the availability of computing resources those can quickly be engaged for service execution and released when no longer needed. As the cloud services moving to the mainstream computing, the issues of ownership and the chain of custody of customer data are becoming very critical. In this talk, I will discuss various cloud security issues, and the role and responsibilities of cloud service providers since the secure cloud environment is essential for providing uninterrupted services to customers. This talk will introduce various metrics for cyber security coverage, and demonstrate a tool, called MEGHNAD for estimating security coverage for cloud services. This tool can serve as a specialized Cloud Doctor in prescribing the right combination of security tools for different cloud services and according to the level of security assurance required. It will useful to a cloud provider who wants to incorporate security insurance as part of their Service Level Agreements (SLA).

Cloud computing provides the ability to utilize scalable, distributed computing environments via the Internet. Over the years, cloud computing has grown from being a promising business concept to a fast growing sector in IT organizations. It has emerged as a promising hosting platform that allows an intelligent usage of a collection of applications, information and infrastructure comprised of pools of computer, network and storage resources. However, enterprise customers are still reluctant to deploy their business in the cloud. Security is one of the key factor which hampers growth of cloud computing. Some of the fundamental security challenges are data storage security, data transmission security, application security and security related to third-part resources. This paper focuses on security issues arising from the usage of cloud services.

Cloud computing has paved an excellent platform for the emergence of cost-effective technological solutions. However, security and privacy issues still remain as a stringent challenge during service catering. Explicitly, the service utility anomalies are liable to cause severe privacy and security issues in cloud service delivery. So, the overall performance of cloud service consumption and end-user applications’ service levels utility is degraded. The open access and distributed nature of the cloud computing is the major reason for its vulnerability to intruders. The security and privacy in cloud services have many challenges and problems still open for research. This paper proposes an intrusion detection method capable of detecting nine categories of attacks in two stages. This paper focuses on establishing a network-based intrusion detection mechanism using machine learning techniques. A model will be constructed with a supervised learning methodology using historical network flowdata and flowdata collected from the Internet.

With the development of cloud computing, cloud security issues have become increasingly prominent. As an important part of cloud computing network security, intrusion detection system has attracted people's attention. How to make the system's response decision has become the focus of the research. For the characteristics of cloud computing attackdefence behaviour, a security intrusion detection of cloud computing based on game theory is proposed. By modelling the behaviours of cloud service provider and cloud malicious user, the best strategies were analysed respectively. According to the sensitivity analysis, the interaction between the parameters in the model was analysed, and it can help to make the cloud computing intrusion detection strategy.

Today cloud technologies and their applications are implementing in various ICT infrastructures. It has led to increased attention to the problems of cyber threats, the growth of which is inseparably linked with the growth of ICT. In this paper the analysis of the existing models, systems and methods for cyber threats detection was carried out for their disadvantages defining. A model of cloud service has been developed; it allows to ensure the security of cloud service based on cloud computing and conduct appropriate simulations. Improved method for cyber threats detection has been developed, it allows to detect cyber threats in cloud services and classify them. The developed method was experimentally investigated using NSL-KDD data base as well as simulation tools RStudio and CloudSim. It was proved the correctness of its work and the possibility of application in cloud services as well as increase efficiency of cloud system security by 48.02%. In addition, a cloud service model has been developed that can be used to build cloud services based on the various cloud computing architecture. In the future, based on the proposed method and model, appropriate tools for detecting and classifying cyber threats in cloud services can be developed. It is significant because it can be autonomous functional unit of SIEM as well as other instrumental tools of CSIRT/SOC.KeywordsInformation technologyCloud ServiceInformation securityCyber threatDetectionIdentificationNSL-KDD

Cloud computing security (sometimes referred to simply as security) is an evolving sub- domain of Computer security, Network security and, more broadly, Information security It refers to a broad set of policies, technologies, and controls deployed to protect data, applications, and the associated infrastructure of cloud computing. Cloud security is not to be confused with security software offerings that are cloud-based (a.k.a. security-as-a-service).There are a number of security issues/concerns associated with cloud computing but these issues fall into two broad categories: Security issues faced by cloud providers (organizations providing software, platform, or infrastructure as a service via the cloud) and security issues faced by their customers. In most cases, the provider must ensure that their infrastructure is secure and that their clients' data and applications are protected while the customer must ensure that the provider has taken the proper security measures to protect their information. The extensive use of virtualization in implementing cloud infrastructure brings unique security concerns for customers or tenants of a public cloud service. Virtualization alters the relationship between the OS and underlying hardware - be it computing, storage or even networking. This introduces an additional layer - virtualization - that itself must be properly configured, managed and secured .Specific concerns include the potential to compromise the virtualization software, or hyper visor. While these concerns are largely theoretical, they do exist. Cloud computing offers great potential to improve productivity and reduce costs, but at the same time it possesses many security risks. In this paper we identify the possible security attacks on clouds including: Denial of Service attack, Authentication attack Man-in-the Middle attack, Wrapping attacks, Malware-Injection attacks, Flooding attacks, Browser attacks, and also Accountability checking problems. We identify the root causes of these attacks and propose specific solutions. In this paper, the authors discuss security issues for cloud computing and present a layered framework for secure clouds and then focus on two of the layers, i.e., the storage layer and the data layer. In particular, the authors discuss a scheme for secure third party publications of documents in a cloud. Next, the paper will converse secure federated query processing with map Reduce and Hardtop, and discuss the use of secure co-processors for cloud computing. Finally, the authors discuss XACML implementation for Hardtop and discuss their beliefs that building trusted applications from untrusted components will be a major aspect of secure cloud computing. Keywords : Accountability, Authentication attacks, Computer security, Cloud Computing, Flooding attacks, Hypervisor, Virtualization, Wrapping attacks, Browser attacks, secure clouds.