Towards Analyzing Data Security Risks in Cloud Computing Environments

Abstract

There is a growing trend of using cloud environments for ever growing storage and data processing needs. However, adopting a cloud computing paradigm may have positive as well as negative effects on the data security of service consumers. This paper primarily aims to highlight the major security issues existing in current cloud computing environments. We carry out a survey to investigate the security mechanisms that are enforced by major cloud service providers. We also propose a risk analysis approach that can be used by a prospective cloud service for analyzing the data security risks before putting his confidential data into a cloud computing environment.

Survey: Risk Assessment for Cloud Computing

“…This framework doesn't cover risks during all the stages of the lifecycle of the service when it exists on the cloud [27]. [15] Cloud providers and cloud consumers…”

“…In [15], a risk analysis approach from the perspective of a cloud user is presented to analyze the data security risks before putting his confidential data into a cloud computing environment. The main objectives of this work are to help service providers to ensure their customers about the data security and the approach can also be used by cloud service users to perform risk analysis before putting their critical data in a security sensitive cloud.…”

A Secure IoT Data Integration in Cloud Storage Systems using ABAC Access Control Policy

“…Cloud Computing appear to be an ideal choice to solve the problem of processing and storing data collected from different IoT devices [2], since it provide a multiple choice of resources including high performance processing, storage, memory and network bandwidth that are accessible on demand anywhere [3]. However, Cloud Computing technology comes with some issues that are Security and Privacy concerns [4]. Many organizations, companies and individuals are using sensitive and confidential data in their transactions.…”

Mean Failure Cost Extension Model towards Security Threats Assessment: A Cloud Computing Case Study

“…In fact, the percentage of losses attributed to outsiders attacks jumped from 36% in 2007 to just 53% in 2008 from total losses [3]. Another survey in 2010 presented on 738 organizations by the Computer Security Institute reported a total estimated annual loss of $190 million caused by information systems security incidents [4].may be manifested via a threat agent using a particular penetration technique to cause undesired effects [5]- [8]. Security threats classification allows identifying and evaluating threats to propose appropriate security solutions.…”