Security Problems of Platform-as-a-Service (PaaS) Clouds and Practical Solutions to the Problems

Sandıkkaya, Mehmet Tahir; Harmanci, A. Emre

doi:10.1109/srds.2012.84

Cited by 25 publications

(8 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The proposed mechanism first appeared in Sandkkaya and Harmancı's previous work [28] and refined in this paper. This approach resembles some of the previous work [8,10,23] in log entry beginning and closing messages.…”

Section: Features Of the Proposed Mechanism And Comparison With The Ementioning

confidence: 64%

Design and formal verification of a cloud compliant secure logging mechanism

Sandıkkaya

Ovatman

Harmanci

2016

IET Information Security

View full text Add to dashboard Cite

Section: Features Of the Proposed Mechanism And Comparison With The Ementioning

confidence: 64%

Design and formal verification of a cloud compliant secure logging mechanism

Sandıkkaya

Ovatman

Harmanci

2016

IET Information Security

View full text Add to dashboard Cite

“…Another problem caused by shared resources refers to data leakage. Finally, protection of user objects is one of the most serious issues of PaaS [15]. Since SaaS requires only a Web browser and the internet connection, its security aspects are similar to the Web service [16].…”

Section: Cloud Computing: Basics and Security Issuesmentioning

confidence: 99%

Scada systems in the cloud and fog environments: Migration scenarios and security issues

2019

View full text Add to dashboard Cite

This paper addresses scenarios and security issues when migrating SCADA systems to cloud and fog environments. Migration strategies to the cloud refer to different cloud infrastructures (public, private or hybrid) as well as selection of cloud service. Benefits of cloud-based SCADA systems mainly refer to improving economic efficiency. We further address migration risks, with regards to quality of service and cyber security. Challenges in security provisioning encompass security solutions, risk management and test environment. Finally, we address emerging evolution of SCADA toward fog computing, including the three-tier system's architecture and security issues.

show abstract

“…These kinds of attacks must be defended by the application itself. Typically, using secure program logic and secure coding [5] best practices in the software development lifecycle of the application. On the other hand, the security of stored data applications and source code before they are deployed to end users should be provided by cloud providers to mitigate the risks of data modification or unauthorized access to stored objects.…”

Section: Taxonomy For Paas Cloud Securitymentioning

confidence: 99%

Evaluating Security Mechanisms Implemented on Windows Azure

Akinbi¹,

Pereira²,

Beaumont³

2014

JITST

View full text Add to dashboard Cite

Slow adoption of cloud services due to security concerns indicates a need for evaluating existing security measures in cloud and further development of methods and techniques for their enhancement. This paper presents an investigation into the security mechanisms of Windows Azure, Platformas-a-Service (PaaS) delivery model. The evaluation in this case study is achieved by segregating the cloud service into three core components and then assessing each using a taxonomy for PaaS cloud security made up of operation domains identified by the Cloud Security Alliance (CSA) and our developed security framework as matrices. This work aims to look at the holistic security architecture of PaaS cloud service in order to identify its security offerings and develop a security risk profile. The preliminary results indicate that most vulnerable component of PaaS, Windows Azure, and possibly in other clouds too is the Host/Compute component, responsible for the application and visualization security.

show abstract

Security Problems of Platform-as-a-Service (PaaS) Clouds and Practical Solutions to the Problems

Cited by 25 publications

References 13 publications

Design and formal verification of a cloud compliant secure logging mechanism

Design and formal verification of a cloud compliant secure logging mechanism

Scada systems in the cloud and fog environments: Migration scenarios and security issues

Evaluating Security Mechanisms Implemented on Windows Azure

Contact Info

Product

Resources

About