Understanding Cloud Computing Vulnerabilities

Grobauer, Bernd; Walloschek, T; Stöcker, Elmar

doi:10.1109/msp.2010.115

Cited by 604 publications

(314 citation statements)

References 1 publication

Supporting

Mentioning

303

Contrasting

Unclassified

Order By: Relevance

“…A number of recent surveys focus on the identification of privacy concerns related to different cloud service models in terms of potential attacks that exploit the vulnerabilities of cloud technologies [1,14,17,19,26,47]. This paper extends the above by relating cloud threats and vulnerabilities to specific cloud quality properties that raise privacy concerns.…”

Section: Resultsmentioning

confidence: 90%

Privacy as an Integral Part of the Implementation of Cloud Solutions

Kavakli

Kalloniatis

Mouratidis

et al. 2014

The Computer Journal

View full text Add to dashboard Cite

Bridging the gap between design and implementation stages has been a major concern of designers, analysts and developers of information systems and a major aspiration of a number of Information System (IS) engineering approaches. Cloud computing exacerbates the strain on traditional IS engineering approaches that service-oriented computing has started. At the same time, recent research has argued about the importance of security and privacy in a cloud environment and highlighted a number of security and privacy challenges that are not present in traditional environments and need special attention when implementing or migrating information systems into a cloud environment. This paper contributes to this direction. Specifically, it presents a number of privacy-related cloud properties that analysts need to consider when designing privacy-aware systems in a cloud environment. Also it indicates a number of implementation techniques that can assist developers in assuring the respective properties.

show abstract

Section: Resultsmentioning

confidence: 90%

Privacy as an Integral Part of the Implementation of Cloud Solutions

Kavakli

Kalloniatis

Mouratidis

et al. 2014

The Computer Journal

View full text Add to dashboard Cite

show abstract

“…Sidechannel attack can instantiate new VMs of a target virtual machine so that the new VM can potentially monitor the cache hosted on the same physical machine [7]. There are four possible places where faults can occur in cloud computing: provider-inner, provider-across, provider user and user-across [54]. It is necessary to address any fault arising from these places within the cloud infrastructure.…”

Section: Related Workmentioning

confidence: 99%

Towards the design of secure and privacy-oriented information systems in the cloud: Identifying the major concepts

Kalloniatis

Mouratidis

Manousakis

et al. 2014

Computer Standards & Interfaces

View full text Add to dashboard Cite

Cloud computing is without a doubt one of the most significant innovations presented in the global technological map. This new generation of technology has the potential to positively change our lives since on the one hand it provides capabilities that make our digital lives much easier, than before, while on the other hand it assists developers in creating services that can be disseminated easier and faster, than before, and with significantly less cost.However, one of the major research challenges for the successful deployment of cloud services is a clear understanding of security and privacy issues on a cloud environment, since the cloud architecture has dissimilarities comparing to the traditional distributed systems.Such differences might introduce new threats and require different treatment of security and privacy issues. Nevertheless, current security and privacy requirements engineering techniques and methodologies have not been developed with cloud computing in mind and fail to capture the unique characteristics of such domain. It is therefore important to understand security and privacy within the context of cloud computing and identify relevant security and privacy properties and threats that will support techniques and methodologies aimed to analyze and design secure cloud based systems. The contribution of this paper to the literature is two-fold. Firstly, it provides a clear linkage between a set of critical cloud computing areas with security and privacy threats and properties. Secondly, it introduces a number of requirements for analysis and design methodologies to consider for security and privacy concerns in the cloud.3

show abstract

“…Specific vulnerabilities of major web applications are related to the browser's front-end component. Among them are client-side data manipulation vulnerabilities, where adversaries exploit user components by completely altering legitimate users' input (Grobauer et al 2011). Security mis-configuration is also very critical with multitenancy operations, where each tenant has its own security configurations that may conflict with others, leading to security holes (Yadav et al 2013).…”

Section: Cloud Infrastructurementioning

confidence: 99%

“…The utilisation of web browsers and mobile devices opens up even more opportunities for attack when their vulnerabilities are exploited (Grobauer et al 2011). This has pushed enterprises to use VPN while communicating to the cloud.…”

Section: Cloud Usersmentioning

confidence: 99%

“…Furthermore, there is no standard data export format, which makes it difficult for cloud users to leave a cloud provider. The lack of standards also makes it difficult to establish security frameworks for such heterogeneous environments and forces people for the moment to rely on common security best practices, which have been reported with a number of vulnerabilities (Grobauer et al 2011). …”

Section: Cloud Providersmentioning

confidence: 99%

See 1 more Smart Citation

Cybersecurity threats in cloud computing

Jang-Jaccard¹,

Nepal²,

Guo³

2013

ajTDE

View full text Add to dashboard Cite

Recently we have witnessed the emergence of cloud computing as a new computing model that offers resources (e.g., compute, storage, network, etc.) as general utilities to be leased and released on-demand by users through the Internet. Given its innovative nature and reliance on the Internet, the cloud inherently comes with a number of vulnerabilities that increase the space for cyber attacks. This paper aims to provide an overview of major potential risks to privacy and security in the cloud. Various emerging threats and attack methods are discussed, and some speculative future research directions are presented.

show abstract

Understanding Cloud Computing Vulnerabilities

Cited by 604 publications

References 1 publication

Privacy as an Integral Part of the Implementation of Cloud Solutions

Privacy as an Integral Part of the Implementation of Cloud Solutions

Towards the design of secure and privacy-oriented information systems in the cloud: Identifying the major concepts

Cybersecurity threats in cloud computing

Contact Info

Product

Resources

About