Offering security diagnosis as a service for cloud SaaS applications

Elsayed, Marwa; Zulkernine, Mohammad

doi:10.1016/j.jisa.2018.11.006

Cited by 16 publications

(9 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As the new technologies and vast amounts of data are incorporated daily, the loopholes and security threats have become more prominent. This service level faces authentication authorization problems, data security problems, access control, trust-based problems, etc [63].…”

Section: Cloud Service Vs Professional Servicementioning

confidence: 99%

“…SSL/TLS protocols protect the web browser of applications for authentications and security reasons [64]. The attacker could have hampered authentications by penetrating several threats and getting access to the other user's XML token to affect the browser [63]. Some significant attacks are discussed, which affect the application level most.…”

Section: Application-level Security Issuesmentioning

confidence: 99%

See 1 more Smart Citation

Untitled

2021

JESTR

View full text Add to dashboard Cite

The emergence of the cloud computing paradigm has influenced business organizations for migration over two decades. This has enabled a more incredible communication speed paired with a better fault tolerance of web-based applications and the scope of having practically unlimited storage available for the user and business data. Such colossal data availability over cloud platforms has increased concerns about the security of the same from various threats such as unauthorized eavesdropping, deliberate malicious mutation of data, loss of data integrity, and identity theft. The presence of such security vulnerabilities has rendered cloud security to be an active research area. This article aims to deep dive into the present stateof-the-art in cloud security research and mitigation approaches. It is observed that cloud storage, cloud services are the widely used applications among the organization. However, vulnerabilities and security challenges faced by this two area is maximum. Besides, outsourcing sensitive information to cloud service provider's (CSP) end leads to trust issues among organizations. This article performs a detailed comparative analysis of the security frameworks developed towards cloud storage level, cloud service level, and cloud trust level to date and throws light on future research directives. All the existing research has been evaluated against CIA (confidentiality, Integrity, Availability) principles here.

show abstract

Section: Cloud Service Vs Professional Servicementioning

confidence: 99%

Section: Application-level Security Issuesmentioning

confidence: 99%

Untitled

2021

JESTR

View full text Add to dashboard Cite

show abstract

“…Considering the non-existence of GIS servers at the Nueva Granada Campus, a model that works from the cloud is proposed, such as Software as a Service (SaaS) or software as the server [30]. This model of implementation corresponds to an application offered through the internet, which is offered by its creator, and can be used by several clients, keeping the privacy of personal data and the personalization of the application [31]. It is characterized to avoid the administration of servers, and to connect the information directly with the applications developed for the intelligent campus, through the use of ArcGIS Online [32].…”

Section: Esri's Local Government Information Model (mentioning

confidence: 99%

Smart Campus at the Universidad Militar Nueva Granada: Creation of Base Map and Applications for Campus Tree Monitoring

Quiroga

2021

rev.ing.univ.Medellin

View full text Add to dashboard Cite

The GIS smart campuses have been constituted as an efficient system that allows the integration of information from different agencies inside universities, with the use of geographic applications developed for different types of users. This research describes general considerations to begin implementation of a smart GIS at the Nueva Granada Campus, in Cajicá. This phase was developed based on the generation of a campus base map, which is used as a spatial reference for the elaboration of all applications that require associated geographic information, as well as the implementation of a Gisweb system for the monitoring, verification, and updating of the campus trees. The result of the work provides the basis for subsequent systems and applications of location, mobility and efficacy management related with the academic and administrative activities in the university campus.

show abstract

“…In [9] authors have focused on the security issues related to the service models of cloud computing and the solutions as well. In [10], authors have presented a solution -Security Diagnosis as a Service (SDaaS) for cloud SaaS applications. The research has been carried out thoroughly about an identity and access management in cloud environment [11].…”

Section: Literature Survey and Reviewmentioning

confidence: 99%

Security as a Service by Verification using Information System (Info-Sys) in Cloud Network

Sarddar*,

Chakraborty

2020

IJITEE

View full text Add to dashboard Cite

Security in Cloud Network is essential and data security is required when data is transmitted from the sender device to receiver end and vice versa. Sometimes, the eavesdroppers might steal sensitive data which is dangerous for the users of the cloud network. The goal of the paper is to propose a newer dimension to Cloud Computing - ‘Security as a Service by verification using Information System in Cloud Network’ in which an authentication procedure is used from the user side to ensure the privacy of the network. AES algorithm is used to encrypt the Unique Identification Number (UID) provided by the user to hide from the eavesdroppers and decrypt the same at the receiver end. In this algorithm, the same key is used for encryption and decryption process. Therefore, the sender and the receiver must know and use the same secret key. We have introduced an Information System that keeps track of all users and helps during the verification. Decryption of the encrypted UID will also be done in this system. It also helps to manage session of all users who have logged into the system and tries to access the information with the UID. If the user shares one’s UID with other personnel and if it causes any problem of insecurity in organizational network, then it will also be caught by the Information System. This helps to protect the cloud network from the trespassers and increases security of the network.

show abstract

Offering security diagnosis as a service for cloud SaaS applications

Cited by 16 publications

References 7 publications

Untitled

Untitled

Smart Campus at the Universidad Militar Nueva Granada: Creation of Base Map and Applications for Campus Tree Monitoring

Security as a Service by Verification using Information System (Info-Sys) in Cloud Network

Contact Info

Product

Resources

About