Security Considerations in Cloud Computing Virtualization Environment

This paper introduces a structured goal-oriented agent-based process modelling framework, where advanced security requirements engineering techniques are combined with software security modelling approaches, to provide an environment within which the security managers and the analysts can easily cooperate to discover, verify and validate the new IT system security requirements. Without multi-agent systems engineering methodologies, the realization of complex information systems involving numerous interacting components would be prohibitively expensive, prone to failure and involve timescales unacceptable in today's security environment. By following appropriate methodologies, highly integrated and complex security management & control (SMC) information systems can be built to interact securely on a global scale. This paper presents an approach to design a multi-agent system managing a security management system corporate memory in the form of a distributed semantic Web and describes the resulting architecture. We present an information and knowledge exchange framework to support a distributed security problem solving in a PKI-based network environment domain. It addresses two important issues: (1) how individual agents should be interconnected so that their security capabilities are efficiently used and their security goals are accomplished effectively and efficiently; (2) how the information and knowledge transfer should take place among agents to allow them to respond successfully to user requests and unexpected situations in the security domain. We employ the concepts related to SAMARA - a security architecture multi-agents systems risk assessment. The focus of this paper is dynamic knowledge exchange among SAMARA agents. The co-ordinator agent together with a decision enabling warehouse (DEW) acting as a dynamic knowledge-based security platform plus direct intercommunication among the agents enable facts, commands, and rules to be transferred between SAMARA agents. Knowledge can be exchanged among the agents by using a combination of facts, rules and commands transfers

In the current technological era, the use of computers becomes an essential part of our life. The Internet has been become as mandatory in the human-being life. The cloud computing has the potential to transform the current static Internet into a fully integrated future Internet. It is a style of computing in which resources are provided “as a service” to users who need not have knowledge or expertise and or control over the infrastructure. The cloud computing technology has become a popular and necessary in the present decade. The cloud computing is the way of sharing resources for the use of various resources via the internet. Hence there are many cloud service providers are competing with each other in order to provide cloud services to the cloud users. In fact, the growth of cloud users has been increased tremendously from last decade to the present decade. In directives to provide right cloud service to users is aimed at almost all cloud service providers. The cloud service providers are also increasing many features of their cloud service products to attract the cloud service users. But cloud service users are facing difficulties to select the right service from a pool of cloud services. Hence it has become necessary for cloud service users to evaluate cloud services and select the best one, for this purpose a new evaluation model has been proposed in this paper based on data mining Fuzzy clustering algorithm.

Cloud computing is currently the most hyped and popular paradigm in the domain of distributed computing. Multiple vendors are providing infrastructure, platform, and software-related cloud products or solutions, and the number of such vendors is growing rapidly. But the reality is that there is very little in the form of standards in general and interoperability standards in particular. This leads to a challenging situation for cloud service consumers as they need to use solutions provided by multiple cloud vendors in order to fulfill their business requirements, and the lack of standardization leads to lack of interoperability among the solutions provided by varied vendors. Service brokers act as intermediaries between the cloud service providers and consumers. The role of service brokers becomes critical in situations that need integration among multiple systems as they bridge the interoperability gaps among multiple cloud solutions and thus compensate for the lack of standards. They do so by acting as agents adding value on behalf of the service consumers. The usage of such cloud brokers also helps to future-proof the solution as service brokers add a layer of indirection, thus enabling loose coupling among the cloud service consumers and providers. The aim of this chapter is to review the role of cloud service brokers in cloud computing. The review includes consolidation of the definitions and characteristics of cloud service brokers, review of the current brokerage solutions, and interfacing requirements. Also presented are a high-level cloud service broker functional architecture, criteria for selection of a cloud service broker, future trends and review of benefits, and challenges of using cloud service brokers.

Cloud computing has emerged as a new computing paradigm, with provisioning model generally consisting of cloud service providers (CSPs), network service providers (NSPs), and end users. The associated economics has opened up a new research area; and with the expansion of the cloud computing market, the relationship between CSPs and NSPs, is changing profoundly. In addition to providing the default network services, traditional NSPs, in attempt to compete with CSPs, have started offering cloud services to end users. Though much progress has been made toward addressing competitions among CSPs themselves or among NSPs themselves, few studies have focused on the competition between CSPs and NSPs. In this paper, we investigate the problem of insufficient studies on the competition between CSPs and NSPs by presenting a new economic model to characterize the competition between CSPs and NSPs, and by conducting thorough theoretical analysis as well as numeric experiments to validate the proposed model. We believe, based on results, that the proposed economic model is general and feasible, and thus is applicable to modeling the competition among service providers in cloud computing market.

Cloud computing is the present technology which is gaining greater attentions. Nowadays, among all the technologies that includes the network security, data protections, virtualization security, application integrity and identity management, the cloud is the most essential and key aspect. Among all the above mentioned issues, data protection is one of the most important security element because organizations cannot transfer their data to the remote machines as there is no guarantee of data protection by the cloud service providers. Many techniques are already available to protect the data in cloud. Though there are many number of techniques implemented to have focus on security of data but still some challenges persist. Cloud computing solves not only the computing problems but also caters loads of data with software updates etc. The user will be confident in utilising the cloud sources only if there is an appropriate collaboration between cloud client and cloud service provider. The most popular security techniques include SSL (Secure Socket Layer) Encryption, Algorithms like AES, Blowfish, DES, RSA, Cloud Computing, and Data Security. This paper mainly focus on how to analyse and evaluate the most important security encryption algorithms for data protection in cloud computing. Furthermore, this paper also discusses about some of the new security techniques for data protection which will be recommended in order to have improved security in cloud computing. Keywords: Cloud, Data Protection, Security, Asymmetric Algorithms, Symmetric Algorithm.

Managing Cloud Computing Environment: Gaining Customer Trust with Security and Ethical Management

The Information communication Technologies (ICT) has assumed an important role in all domains of life today. The computation requirements are often larger than resources available at hand in an enterprise and it would like to outsource it for high speed computation or data management requirements. In other cases a small enterprise would like to lease computation or data archiving resources as per demand. Cloud computing is a new paradigm which may be used to handle such situations. It offers a virtual environment at a small initial investment by entrepreneurs planning to develop large applications scalable as the scope and workload increases. The computer hardware and software are available in virtualized environments of cloud computing offering Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS) through Datacenters and Cloud Service Providers (CSP). The paradigm shift provides elastic infrastructure, efficiency of resource utilization, reduction in upfront capital investment and focus on core activities. A model for cloud computing for telemedic services is being developed to cater for large data archive of Clinical Data Records (CDR), Decision Support Systems (DSS) and event based notification and monitoring system in a typical hospital. In this paper we have reviewed the rapid growth in cloud computing activities, available opportunities and services with the early birds in this technology. Beside this the hospital information and medical data services architecture using cloud services has been discussed in the context of the model being developed. Data storage service, Security service, scalability and performance issues have been discussed.

Data Portability: Key to Cloud Portability and Interoperability

The recent increase in the use of cloud service has led to the need for cloud service broker(CSB) for supporting the use of various cloud computing platforms. CSB plays the role of not only providing overall services needed for individuals and companies to use cloud computing but also managing and inspecting them. As cloud computing became commonplace, it is expected that the demand for more useful cloud-based service at more affordable prices will increase exponentially. Accordingly, the current situation calls for CSB that connects cloud service provider & customer and provides the service of managing and inspecting cloud service. This paper presents a framework of the components and role of cloud service broker system that supports the allocation, control and management of virtual system based on brokering function between cloud service provider(CSP) and cloud service customer (CSC) by integrating and managing cloud resources in multiple heterogeneous cloud environment. Based on this, it is expected that this paper will contribute to the revitalization of cloud service industry.

Abstract— In the evolving digital landscape, cloud computing has become a cornerstone for scalable and flexible IT infrastructure. However, the rapid adoption of cloud services introduces a wide range of security threats, compliance challenges, and operational risks. This paper, From Threats to Trust: Securing Cloud Infrastructure through Resilience and Compliance presents a comprehensive analysis of cloud security challenges and explores effective mitigation strategies to enhance resilience and regulatory adherence. The study examines critical issues such as data breaches, insider threats, vendor lock-in, insecure interfaces, and distributed denial-of-service (DDoS) attacks within cloud environments. It further highlights the importance of robust security mechanisms, including identity and access management, encryption techniques, continuous monitoring, intrusion detection systems, and secure key management. Emphasis is also placed on compliance with global data protection regulations and the implementation of governance frameworks. By integrating best practices with proactive risk management approaches, this paper provides a structured framework for building secure, resilient, and compliant cloud infrastructures. The findings aim to support organizations in strengthening their security posture, ensuring data integrity and availability, and fostering trust in cloud-based systems. Keywords— Cloud Security, Cloud Computing, Identity and Access Management and Intrusion Detection Systems.

The article is devoted to the analysis of modern approaches that ensure the security of cloud services. Since cloud computing is one of the fastest growing areas among information technology, it is extremely important to ensure the safety and reliability of processes occurring in the clouds and to secure the interaction between the client and the provider of cloud services. Given that fears about data loss and their compromise are one of the main reasons that some companies do not transfer their calculations to the clouds. The object of research and analysis of this work are cloud services, which are provided by various cloud service providers. The aim of the study of this work is to compare existing approaches that provide information security for cloud services, as well as offer a new approach based on the principle of diversity. There are many approaches that ensure their safety, using both traditional and cloud-specific. The multi-cloud approach is one of the most promising strategies for improving reliability by reserving cloud resources on the servers of various cloud service providers. It is shown that it is necessary to use diversity to ensure the reliability and safety of critical system components. The principle of diversity is to use a unique version of each resource thanks to a special combination of a cloud computing provider, the geographical location of data centers, cloud service presentation models, and cloud infrastructure deployment models. The differences between cloud providers and which combination of services are preferable to others in terms of productivity are discussed in detail. In addition, best practices for securing cloud resources are reviewed. As a result, this paper concludes that there is a problem of insufficient security and reliability of cloud computing and how to reduce threats in order to avoid a common cause failure and, as a result, loss of confidential data or system downtime using diversity of cloud services.

Cloud service, which has changed the business computing pattern, redefines the calculation scope of distributed systems by cloud computing approaches. The existing cloud service model provides different users an advanced on-demand computing model, and then achieves resource interaction between cloud service providers and users by cloud computing. However, this model, working as a centralized service strategy of resource allocation, also generates much scattered space debris resulting in a low efficiency of resource scheduling and utilization. To address this issue, we devise an improved model of crowd sourcing service and propose a technique of storage resource allocation and scheduling, where cloud service providers, as a resource agent, only provide leasing storage space for individual applicants instead of providing storage resources directly. This technique achieves allocation and scheduling of individual storage resources dynamically, according to user's expectations and individual storage providers constraints. The experimental results based on a large data set show that the improved model reduces the storage space of cloud service providers by 88.2% and improves storage space utilization rate of individuals by 65.2%, The improved model reduces the user fees by 64.8% and the cloud services development cost by 78.6% than that of existing models, In addition, the improved model and methods provide higher profits and efficiency for cloud service providers.

Özet Bu çalışmanın amacı, ISO 500’de yer alan kooperatiflerin web sitelerinin incelenerek sürdürülebilirlik çatısı altında sürdürülebilirliğin sosyal, ekonomik ve çevresel boyutlarına göre mevcut durumlarını ortaya koymaktır. Bu kapsamda, kooperatiflerin Kurumsal Sosyal Sorumluluk, ISO 9001 Kalite Yönetim Sistemi, ISO 14001 Çevre Yönetim Sistemi, ISO 27001 Bilgi Güvenliği Yönetim Sistemi, ISO 22000 Gıda Güvenliği Yönetim Sistemi, ISO 45001 İş Sağlığı ve Güvenliği Yönetim Sistemi, ISO 50001 Enerji Yönetim Sistemi sertifikasyon durumu incelenmiştir. Betimsel tarama modelinde olan araştırmada amaçlı örneklem yöntemiyle seçilen yedi kooperatifin web siteleri taranmıştır. Araştırmada içerik analizi yöntemlerinden yüzde ve frekans analizi kullanılmıştır ve veriler arasındaki korelasyon incelenmiştir. Analizler sonucunda sürdürülebilirlik kavramı kapsamında incelenen parametrelerle kooperatiflerin ISO 500 sıralaması arasında anlamlı bir ilişkinin olmadığı görülmektedir. Bununla birlikte kooperatiflerin tamamının sosyal sorumluluk projeleri yaptığı, %86’sının kalite (ISO 9001), %71’inin çevre (ISO 14001), iş sağlığı ve güvenliği (ISO 45001) ve gıda güvenliği (ISO 22000), %29’unun enerji güvenliği (ISO 50001) ve %14’ünün bilgi güvenliği (ISO 27001) yönetim sistemlerine sahip olduğu belirlenmiştir.

Purpose: This article aims to assess the effectiveness of security management systems in public organisations using statistical data and institutional reports, with particular emphasis on the relationship between the maturity of these systems and the level of threats, including cybersecurity threats and incidents.The article aims to fill a research gap in the empirical analysis of the actual functioning of security systems in the public sector.Design/Methodology/Approach: The research was conducted using triangulation of research methods.Statistical data from institutional reports, document analysis (control and audit reports), comparative methods and analysis of scientific literature on security management, risk management and organisational resilience were used.The main research problem was formulated as follows: to what extent does the maturity of security management systems affect the level of threats and the effectiveness of public organisations' responses?The research hypothesis was that public organisations with more mature security management systems have fewer security incidents, shorter response times, and greater organisational resilience than entities with fragmented or informal security systems. Findings:The study indicates a clear relationship between the maturity of security management systems and the level of risk in public organisations.Entities with integrated security systems, regular risk analyses, functioning audit mechanisms, and a developed security culture are characterised by fewer incidents (including cybersecurity incidents) and a higher effectiveness in responding to threats.Practical implications: The article contributes to research on security management in the public sector by empirically confirming the importance of system maturity for organisational resilience. Originality value:The results also have a practical dimension and can serve as a basis for improving security management systems and data-driven decision-making in public organisations.

Enhancement of Security in Cloud Maas and JUJU Using Foxiproxy