Evaluating Security and Privacy in Cloud Services

Cloud computing (CC) services can offer substantial cost-effective global operational and relationship benefits if the cooperation between logistics and CC services are resilient. Potential vulnerabilities to cooperation of CC and logistics service providers can occur with respect to vital factors such as security and trust. Extant studies have demonstrated CC benefits as well as few challenges associated with CC services application. However, no extant study has examined the inter-organisational benefits based on cooperative resilience between CC and logistics service providers in terms of both capability and trust vulnerability factors. This study examines the cooperative resilience of logistics and CC service providers based on innovation diffusion theory within a supply chain risk assessment framework. Using structural equation modelling techniques, we investigate the relationship between the vulnerability factor (trust), capability factor (security) and collaboration benefits (relationship and operational) offered by CC service providers based on 236 Chinese logistics service firms’ perceptions of CC adoption. The results indicate Chinese logistics companies perceive security impediments as a major factor affecting cooperative resilience between logistics service and CC service providers.

Cloud computing services have become important to IS/IT recently. Cloud service providers (CSPs) support different types of cloud computing services (Infrastructure as a Service, Platform as a Service, and Software as a Service). There are many challenges and concerns in using cloud computing services that may cause many risks. These risks need addressing while using cloud computing. CSPs provide procedures in order to control risk areas while providing their services. There are many studies that assess risks in cloud computing services. They provide evaluation tools and/or frameworks to manage the risk in cloud computing services. Moreover, IS/IT governance is one of the most powerful ways to achieve IS/IT business alignment. The main goals of IS/IT governance are to ensure that the investments in IS/IT generate business values and to mitigate the risks associated with IS/IT. Even though there are various risks in cloud computing services, there is no comprehensive framework to support risk assessment according to user’s needs. In this paper, we aim to provide a conceptual framework for governance in cloud computing services. This framework will focus on cloud client (CC) requirements to achieve the governance.KeywordsCloud computingGovernanceRisk assessmentSLARisk control

Cloud Computing (CC) is a paradigm shift with the potential of transforming the information and communication technology (ICT) industry. ICT is an integral part of all businesses, and CC helps in lightening the burden of massive ICT investments. Thus, it is essential to understand the factors that influence CC adoption. The purpose of this study is to identify and rank critical factors for CC adoption in the Indian context. The research has adopted mixed methodology (qualitative and quantitative). Experts from 13 organizations (including 8 cloud service providers (CSPs) and 5 cloud service users (CSUs)) are interviewed. Content analysis is used to confirm existing factors and identify new factors in the Indian context. Qualitative analysis has identified four new factors, namely, ‘time to market’, ‘futuristic’, ‘resistance to change’ and ‘financial losses’ (arising from security and resource availability). The quantitative part of the research used analytic hierarchy process (AHP) and fuzzy analytic hierarchy process (FAHP) techniques to rank the factors. The analysis revealed ‘IT service cost’ and ‘time to market’ as the most critical factor through FAHP and AHP respectively. However, ‘organization size’ is reported the least critical for CC adoption through both the methods. The results also highlight divergence among the criticality of CC adoption factors using the two techniques. The study is very useful for CSPs and key decision-makers to understand the critical adoption factors and judiciously strategize for CC service promotions. It will also help users to wisely decide while making CC adoption decision.

Cloud computing provides facilities. These facilities increased demand for its using as institutions and individuals moved to the cloud service. Therefore, cloud service providers must provide services to users based on the expected quality. One of the main challenges presented by the cloud computing is the Quality of Service management. QoS management is defined as allocating resources to applications to ensure service based on reliability, performance and availability. It is necessary to allocate resources based on load balancing that allows avoiding overloading or low loading in virtual machines, and this is a challenge for researchers in the field of cloud computing. This research highlights the importance of cloud computing, its types and importance, It also reviews some researches in the field of quality assurance of service in computing.

Cloud computing is a new model for providing computing services, where computing is delivered as a service over the Internet. Cloud computing is a very popular choice among SMEs because computing services are provided at much lower prices compared to their own IT infrastructure. In the cloud computing model, computing services and data storage are outsourced to cloud service providers. Customers do not have full control over applications and their data. Therefore, an added overhead of security risks comes along, and the security of data becomes the primary concern for cloud customers when considering cloud services. This paper explores various deployment models of cloud computing services and IoT (Internet of Things), figures out associated data security issues with them, and suggests a metric-based solution to assess security provided by cloud services.

Cloud computing is a promising computing model that enables convenient and on-demand network access to a shared pool of configurable computing resources. The first offered cloud service is moving data into the cloud: data owners let cloud service providers host their data on cloud servers and data consumers can access the data from the cloud servers. This new paradigm of data storage service also introduces new security challenges, because data owners and data servers have different identities and different business interests. Therefore, an independent auditing service is required to make sure that the data is correctly hosted in the Cloud. In this paper, we investigate this kind of problem and give an extensive survey of storage auditing methods in the literature. First, we give a set of requirements of the auditing protocol for data storage in cloud computing. Then, we introduce some existing auditing schemes and analyze them in terms of security and performance. Finally, some challenging issues are introduced in the design of efficient auditing protocol for data storage in cloud computing.

SLAs are so significant in cloud computing because it establishes agreements between the cloud service providers and cloud consumers, about the quality of the providing service. SLA monitoring is the only available provision to check whether the agreed parties are following the agreement terms or not. A multistep SLA negotiation, which contains the selection of apt cloud service provider and the negotiation with the selected provider, is proposed here. An efficient SLA negotiation algorithm is also included in this negotiation method. Experimental evaluation shows that the proposed method is more efficient in resource allocation and it gives more revenue to the cloud providers.

Job scheduling system problem is a core and challenging issue in Cloud Computing. How to use Cloud computing resources efficiently and gain the maximum profits with job scheduling. Job scheduling system is one of the Cloud computing service providers’ ultimate goals. In this paper, firstly, by analysis the differentiated QoS requirements of Cloud computing resources users’ jobs, we build the corresponding non-pre-emptive priority M/G/1 queuing model for the jobs.Then, considering Cloud computing service providers’ destination which is to gain the maximum profits by offering Cloud computing resources, we built the system cost function for this queuing model. After that, based on the queuing model and system cost function, considering the goals of both the Cloud Computing service users and providers, we gave the corresponding strategy and algorithm to get the approximate optimistic value of service for each job in the corresponding no-pre-emptive priority M/G/1 queuing model. Finally, we also provide corresponding simulations and numeral results.Analysis and number results show that our approach for job scheduling system can not only guarantee the QoS requirements of the users’ jobs, but also can make the maximum profits for the Cloud computing service providers.While the economic case for cloud computing is compelling, the security challenges it poses are equally striking. In this work we strive to frame the full space of cloud-computing security issues, attempting to separate justified concerns from possible over-reactions. We examine contemporary and historical perspectives from industry, academia, government, and “black hats”. We argue that few cloud computing security issues are fundamentally new or fundamentally intractable; often what appears “new” is so only relative to “traditional”computing of the past several years. Looking back further to the time-sharing era, many of these problems already received attention. On the other hand, we argue that two facets are to some degree new and fundamental to cloud computing: the complexities of multi-party trust considerations, and the ensuing need for mutual audit ability.

Cloud computing is recently developed internet based computing paradigm where ranges of services such as data storage, applications deployment, servers, etc. are delivered over the internet. On the basis of response, cloud allocates the services through internet. The important feature of quality of service in cloud computing is secured way of protecting information over internet. The cloud service provider (CSP) should afford security for the data stored and applications developed over the cloud in terms of Privacy and Access Control. In this paper, we offer an enhanced framework with the advent of Token Generation (TG), Mutual Authentication and Cryptography. We include a secured authentication mechanism among consumer and Registration Authority (RA) in our scheme. Secondly a Token Generator (TG) is utilized for issuing tokens to the consumer for accessing their resources from the cloud depends upon their access privileges.

Cloud computing is a technological marvel that transcends conventional boundaries by utilizing an Internet-based network of remote servers to store, manage, and process data and many other services. It represents a contemporary paradigm for delivering information technology services. Today, cloud computing services have become indispensable for both individuals and corporations. However, adopting cloud services presents fresh challenges in terms of service quality, resource optimization, data integration, cost governance, and operational security. The security of cloud services is of supreme importance, given the open and distributed nature of the environment, making it susceptible to various cyberattacks, such as Denial of Service (DoS) or Distributed DoS (DDoS) attacks, among others. Cyberattacks can have severe repercussions on the availability of cloud services, potentially causing complete DoS. In numerous instances, the detection of attacks is delayed, pushing cloud platforms to a breaking point. Emphasizing the importance of proactive measures, it becomes crucial to identify and alert about any suspicious access long before the latter reaches a critical stage, mitigating the risks and preventing potential service disruptions. This study introduces a preventive approach that utilizes artificial intelligence techniques to improve the security of cloud services. The proposed method aims to detect and flag potential attack behaviors well in advance before they affect service quality. To achieve this, the particular method involves periodic identification and measurement of critical information on service access and resource utilization. This can be accomplished by analyzing cloud server logs or integrating dedicated sniffing software to capture and store technical traffic details. Subsequently, the collected data are processed by analyzing traffic properties to proactively identify and report any indications of cyberattacks.

Cloud computing is currently the most hyped and popular paradigm in the domain of distributed computing. Multiple vendors are providing infrastructure, platform, and software-related cloud products or solutions, and the number of such vendors is growing rapidly. But the reality is that there is very little in the form of standards in general and interoperability standards in particular. This leads to a challenging situation for cloud service consumers as they need to use solutions provided by multiple cloud vendors in order to fulfill their business requirements, and the lack of standardization leads to lack of interoperability among the solutions provided by varied vendors. Service brokers act as intermediaries between the cloud service providers and consumers. The role of service brokers becomes critical in situations that need integration among multiple systems as they bridge the interoperability gaps among multiple cloud solutions and thus compensate for the lack of standards. They do so by acting as agents adding value on behalf of the service consumers. The usage of such cloud brokers also helps to future-proof the solution as service brokers add a layer of indirection, thus enabling loose coupling among the cloud service consumers and providers. The aim of this chapter is to review the role of cloud service brokers in cloud computing. The review includes consolidation of the definitions and characteristics of cloud service brokers, review of the current brokerage solutions, and interfacing requirements. Also presented are a high-level cloud service broker functional architecture, criteria for selection of a cloud service broker, future trends and review of benefits, and challenges of using cloud service brokers.

PurposeThis bibliometric study is steered to compute the impact of literature published on cloud computing within the fields of information science and library science. The research has been conducted on concentrating the term “Cloud Computing” to search the literature published in both fields, i.e. information science and library science from the time span 2007 to August 2023. This study aims to investigate the top productive country, organizations and highly cited publications.Design/methodology/approachThe period of the exploration was from 2007 to August 2023 for bibliometric analysis and data was collected from the ISI Web of Science. Total 401 documents were retrieved and analyzed to highlight the year-wise distribution of documents type, year-wise most cited articles, prominent journals of the subjects, productivity of organizations, impact of countries and cooccurrences of keywords. The results are grounded on the basis of documents types (articles, early access articles, proceeding papers, book review, editorial material, news items and reviews).FindingsThe findings reveal that the most productive year of publication on cloud computing services was 2013. The top productive source is “International Journal of Information Management.” The articles entitled “Assessing the determinants of cloud computing adoption: An analysis of the manufacturing and services sectors” found as the most cited article and the significant increase in citations is also noteworthy. The most productive organizations on the topic include “Islamic Azad University of Iran,” “University Cologne of Germany” and “University Nova Lisboa of Portugal.” The results confirmed that the USA dominates in the production of research on “Cloud Computing Services” and the most repeated keyword in the literature is cloud computing. The research articles are the most cited sources of research.Originality/valueThis bibliometric research is an original piece of work that has been conducted to measure the research production in the field of information science and library science during 2007−2023. This piece of work is valuable for those who want to study the literature on cloud computing in the area of information science and library science.

Cloud computing is associate inclusive new approach on however computing services square measure made and utilized. Cloud computing is associate accomplishment of assorted styles of services that has attracted several users in today’s state of affairs. The foremost enticing service of cloud computing is information outsourcing, because of this the information homeowners will host any size of information on the cloud server and users will access the information from cloud server once needed. A dynamic outsourced auditing theme that cannot solely defend against any dishonest entity and collision, however conjointly support verifiable dynamic updates to outsourced information. The new epitome of information outsourcing conjointly faces the new security challenges. However, users might not totally trust the cloud service suppliers (CSPs) as a result of typically they may be dishonest. It's tough to work out whether or not the CSPs meet the customer’s expectations for information security. Therefore, to with success maintain the integrity of cloud information, several auditing schemes are projected. Some existing integrity ways will solely serve for statically archived information and a few auditing techniques is used for the dynamically updated information. The analyzed numerous existing information integrity auditing schemes together with their consequences.

Today’s cloud computing becomes more and more popular, and the cloud service also becomes a trend all over the world. Many kinds of cloud services have arisen, and they offer a more convenient and faster way to handle all works. When users start to rely on various services of cloud computing, they need to manage many accounts. It is inconvenient to remember a lot of accounts used for these cloud services. If users can just remember one account for these cloud services, it will become easier and simpler to use all service users needed. Here, we propose a scheme combing single sign-on and smart card to achieve logging into multiple cloud services securely and simply .

Although software and computing process have long been regarded as products among consumers (Armbrust et al., 2010; Skiba, 2011), the advancement of technologies (e.g., high-speed internet) and infrastructures leads to the notion that software and computing can be delivered as a type of service through an innovative technology called cloud computing. Cloud Computing Service (CCS) delivers applications and processing as services via the Internet, while the software and data are stored on servers at a remote location (Armbrust et al., 2010). In other words, under the context of CCS, software and computing process have become a utility such as electricity and water. Advantages of CCS include reduced investment in hardware and software, immediately elevated performance, etc. CCS is believed to be a billion dollar market and growing (Buyya, Yeo, Venugopal, Broberg, & Brandic, 2009). Nevertheless, CCS will reshape the way in which consumers perceive software and computing process (Armbrust et al., 2010) and make purchase decisions. How the notion of CCS diffuses among individual consumers remains unexplored.