The week's pick
Random Articles
Reseach Article
Cloud Computing Security Issues and Countermeasure: A Comprehensive Survey
by
Shaimaa Salama,
Yasmin Alamoudi,
Ghadeer Alamoudi,
Farah Albeshri
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 185 - Number 14 |
| Year of Publication: 2023 |
| Authors: Shaimaa Salama, Yasmin Alamoudi, Ghadeer Alamoudi, Farah Albeshri |
10.5120/ijca2023922832
|
Shaimaa Salama, Yasmin Alamoudi, Ghadeer Alamoudi, Farah Albeshri . Cloud Computing Security Issues and Countermeasure: A Comprehensive Survey. International Journal of Computer Applications. 185, 14 ( Jun 2023), 54-61. DOI=10.5120/ijca2023922832
@article{
10.5120/ijca2023922832,
author = {
Shaimaa Salama,
Yasmin Alamoudi,
Ghadeer Alamoudi,
Farah Albeshri
},
title = { Cloud Computing Security Issues and Countermeasure: A Comprehensive Survey },
journal = {
International Journal of Computer Applications
},
issue_date = { Jun 2023 },
volume = { 185 },
number = { 14 },
month = { Jun },
year = { 2023 },
issn = { 0975-8887 },
pages = {
54-61
},
numpages = {9},
url = {
https://ijcaonline.org/archives/volume185/number14/32767-2023922832/
},
doi = { 10.5120/ijca2023922832 },
publisher = {Foundation of Computer Science (FCS), NY, USA},
address = {New York, USA}
}
%0 Journal Article
%1 2024-02-07T01:26:05.901501+05:30
%A Shaimaa Salama
%A Yasmin Alamoudi
%A Ghadeer Alamoudi
%A Farah Albeshri
%T Cloud Computing Security Issues and Countermeasure: A Comprehensive Survey
%J International Journal of Computer Applications
%@ 0975-8887
%V 185
%N 14
%P 54-61
%D 2023
%I Foundation of Computer Science (FCS), NY, USA
Abstract
Cloud computing has drawn attention in the current technological world due to its many benefits in contrast to traditional information technology (IT) infrastructure. Nowadays, many companies moved to the cloud instead of hosting computing resources internally in a privately owned cloud data center. As a result, the use of cloud computing has allowed companies to focus more on their business instead of developing and maintaining their own information technology (IT) equipment. In addition, cloud computing solves the limited resources problem; it intends to minimize the cost of services by sharing valuable resources which can be accessed remotely from anywhere among multiple users. Currently, organizations depend on cloud computing to effectively manage and store their data. However, storing organizational data raises many concerns and vulnerabilities; researchers have experimented with and used a variety of data protection and prevention strategies and techniques to reinforce the security barrier. However, gaps still need to be addressed by improving and strengthening these methods. This paper offers a survey of current relevant work that focuses on security concerns and protective measures in various aspects. These considerations must be taken into account when applying security to cloud computing infrastructure. Moreover, the paper proposes a new classification of the literature review following the CIA common model, which forms the basis for the systems security development.
References
- Rabi Prasad Padhy, Manas Ranjan Patra, and Suresh Chandra Satapathy. Cloud computing: security issues and research challenges. International Journal of Computer Science and Information Technology & Security (IJCSITS), 1(2):136–146, 2011.
- Hayes Brian, Thomas Brunschwiler, Heinz Dill, Hanspeter Christ, Babak Falsafi, Markus Fischer, Stella Gatziu Grivas, Claudio Giovanoli, Roger Eric Gisi, Reto Gutmann, et al. Cloud computing. Communica- tions of the ACM, 51(7):9–11, 2008.
- Bader Alouffi, Muhammad Hasnain, Abdullah Alharbi, Wael Alosaimi, Hashem Alyami, and Muhammad Ayaz. A systematic literature review on cloud computing security: Threats and mitigation strategies. IEEE Access, 9:57792–57807, 2021.
- Derrick Sampson and MD Minhaz Chowdhury. The growing security concerns of cloud computing. pages 050–055, 2021. doi:10.1109/EIT51626.2021.9491902.
- Aleksandr Ometov, Oliver Liombe Molua, Mikhail Komarov, and Jari Nurmi. A survey of security in cloud, edge, and fog computing. Sensors, 22(3):927, 2022.
- Waqas Ahmad, Aamir Rasool, Abdul Rehman Javed, Thar Baker, and Zunera Jalil. Cyber security in iot-based cloud computing: A comprehensive survey. Electronics, 11(1):16, 2021.
- Yunchuan Sun, Junsheng Zhang, Yongping Xiong, and Guangyu Zhu. Data security and privacy in cloud computing. International Journal of Distributed Sensor Networks, 10(7):190903, 2014.
- Yu-Hsin Hung. Investigating how the cloud computing transforms the development of industries. IEEE Access, 7:181505–181517, 2019.
- Peter Mell, Tim Grance, et al. The nist definition of cloud computing. 2011.
- Mohsen Attaran and Jeremy Woods. Cloud computing technology: improving small business performance using the internet. Journal of Small Business & Entrepreneurship, 31(6):495–519, 2019.
- Su Su Win and Mie Mie Su Thwin. Handling the hypervisor hijacking attacks on virtual cloud environment. In Advances in Biometrics, pages 25–50. Springer, 2019.
- Akhil Behl. Emerging security challenges in cloud computing: An insight to cloud security challenges and their mitigation. pages 217– 222, 2011.
- Sumant Ramgovind, Mariki M Eloff, and Elme Smith. The management of security in cloud computing. pages 1–7, 2010.
- V Sureshkumar and B Baranidharan. A study of the cloud se- curity attacks and threats. Journal of Physics: Conference Series, 1964(4):042061, jul 2021.
- Sandesh Achar. Cloud computing security for multi-cloud service providers: Controls and techniques in our modern threat landscape. 09 2022. doi:10.5281/zenodo.7084251.
- Amara Naseer, Huang Zhiqui, and Awais Ali. Cloud computing security threats and attacks with their mitigation techniques. pages 244–251, 10 2017. doi:10.1109/CyberC.2017.37.
- Te-Shun Chou. Security threats on cloud computing vulnerabilities. International Journal of Computer Science & Information Technology, 5(3):79, 2013.
- GS Sriram. Resolving security and data concerns in cloud computing by utilizing a decentralized cloud computing option. International Research Journal of Modernization in Engineering Technology and Science, 4(1):1269–1273, 2022.
- Said El Kafhali, Iman El Mir, and Mohamed Hanini. Security threats, defense mechanisms, challenges, and future directions in cloud comput- ing. Archives of Computational Methods in Engineering, 29(1):223–246, 2022.
- Khalid El Makkaoui, Abdellah Ezzati, Abderrahim Beni- Hssane, and Cina Motamed. Cloud security and privacy model for providing secure cloud services. pages 81–86, 2016.
- Vinoth Dr, Hari Vemula, Dr Haralayya, Pradeep Mamgain, Mo- hammed Faez Hasan, and Mohd Naved. Application of cloud computing in banking and e-commerce and related security threats. Materials Today: Proceedings, 51, 12 2021. doi:10.1016/j.matpr.2021.11.121.
- Sanjeev Kumar, Garima Karnani, Madhu Gaur, and Anju Mishra. Cloud security using hybrid cryptography algorithms. pages 599–604, 04 2021. doi:10.1109/ICIEM51511.2021.9445377.
- Chinnasamy Ponnusamy, S Padmavathi, and R Swathy. Efficient Data Security Using Hybrid Cryptography on Cloud Computing, pages 537– 547. 09 2020.
- TA Mohanaprakash and DV Nirmalrani. Exploration of various view- points in cloud computing security threats. Journal of Theoretical and Applied Information Technology, 99(5):1172–1183, 2021.
- Hossein Abroshan. A hybrid encryption solution to improve cloud computing security using symmetric and asymmetric cryptography al- gorithms. International Journal of Advanced Computer Science and Applications, 12(6), 2021.
- Bijeta Seth, Surjeet Dalal, Vivek Jaglan, Dac-Nhuong Le, Senthilkumar Mohan, and Gautam Srivastava. Integrating encryption techniques for secure data storage in the cloud. Transactions on Emerging Telecom- munications Technologies, 33(4):e4108, 2022.
- fortinet.com. Cia triad. 2010.
- Table 2: Summary of Existing Papers
- Reference
- Year
- Target
- Security Issues
- Countermeasures
- Cloud computing security for multi-cloud services providers: Controls and techniques in our modern threat
- 2022
- Cloud security include (identity and access management, data at rest and in transit, egress and ingress traffic control)
- - Data loss or theft.
- - impact on protect data at rest
- - using identity and access management (IAM).
- -Data encryption (protect data at rest)
- - Access control
- Resolve Security and Data Concerns in cloud computing-
- ing by utilizing a
- decentralized cloud
- computing option
- 2022
- Cloud computing security in-
- clude cybersecurity attacks,
- data privacy and integrity,
- and cloud computing infras-
- tructure stability vulnerable
- target (e.g. schools, hospitals,
- hospices)
- -Phishing
- -Ransomware
- -Trojan
- -Botnet
- -Distributed Denial of Service
- -Adware
- -Crypto mining
- - Data encryption methods known as Ried
- Solomon erasure coding
- - Geo-redundancy for data integrity
- Cloud Security us-
- ing Hybrid Cryptog-
- raphy Algorithms
- 2021
- Increases cloud storage secu-
- rity using hybrid algorithms
- -Data Integrity -Data Avail-
- ability -Data Confidentiality -
- Denial Of Service -Data Loca-
- tion -Data Breach -Data Loss
- -Digital Signatures -Data Encryption -Intrusion
- Detection System (IDS)
- Efficient data Secu-
- rity using hybrid
- cryptography on
- cloud computing
- 2021
- Increases security and confi-
- dentiality of patient data in
- cloud storage
- Data confidentiality
- A hybrid cryptosystem
- Security threats,
- defense mechanisms, challenges, and Future directions in cloud
- computing
- 2021
- - Provide a full cloud com-
- puting fundamentals review -
- Discuss the major security is-
- sues and defence techniques.
- -Summarizing and compare
- the literature
- Data breaches, data loss, ac-
- count or service traffic hijack-
- ing, insecure interfaces and
- API, denial of service, mali-
- cious insiders, insufficient due
- diligence, shared technology
- vulnerabilities, loss of gover-
- nance, availability chain, and
- insecure or incomplete data
- deletion.
- For DDoS attack: - Defence deployment:
- Source-End Deployment, access Point deploy-
- ment, Intermediate-network deployment, and distributed defense. - Defence detection: source
- and spoof trace, or based on signature/patten,
- hybrid, anomaly mechanisms, count based filtering, resource usage, and BotCloud.
- Application of cloud computing in banking and e-commerce and related security threats
- 2021
- Examines several cloud computing applications in e-commerce and banking as well as the related security challenges
- -Multi tenancy
- - Semantic gap
- - Trust
- - Loss of control
- Proper planning and understanding of emerging risks, threats, vulnerabilities and potential solutions are necessary
- Explosion of various viewpoint in cloud computing security threats
- 2021
- Data security, Network security, Environmental and Virtualization issues
- -Malicious attacks
- Data -Data Breach -Data loss
- -Impact on data integrity - Data Seizure -Storage compatibility issue
- Network -Denial of service - Man in the middle attack - Packet sniffing Environment - Inside user (hacker) -Misused of cloud assists Virtualization -Impact on (VM cache, migration , and cloning)
- Use hashing algorithms: - Message digest 5(MD5) - Secure hashing algorithm (SHA) - Use cryptographic methodology
- A Hybrid encryption solution to improve cloud computing security using symmetric and asymmetric cryptography algorithms
- 2021
- Improve Cloud computing security with minimal impact on performance
- -Impact on data integrity
- Improved Blowfish algorithm with an elliptic curve-based algorithm
- A Study of the cloud security attacks and threats
- 2020
- Cloud-related protection challenges and risks
- Secrecy, authenticity, honesty,
- availability, and auditability
- Intrusion detection mechanisms, cryptographic
- methodology electronic forensic software
- Integrating encryption
- techniques for
- secure data storage
- in the cloud
- 2020
- Increases security by providing
- a novel two-tier cloud
- computing architecture (HB-
- DaSeC) that indicates security
- storage, verification, and
- auditing.
- -Information leaks -
- Confidentiality and privacy
- issues
- HBDaSeC: applied Data fragmentation, dual
- encryption techniques
- Cloud computing
- security threats
- and attacks with
- their mitigation
- techniques
- 2017
- Categorize security attacks in
- terms of the cloud services
- they affect and the network
- layers where they reside
- - CIaaS, PaaS, SaaS -Data
- breach -Data loss -Account or
- service hijacking -Insecure in-
- terfaces and APIs -Malicious
- insiders -Insufficient due dili-
- gence -Unknown risk profile
- Identity theft -Changes to
- business odel -Lock-IN
- - IaaS, PaaS,abusive use
- of cloud services
- - IaaS Shared technology is-
- sues
- Backup -Encryption -Protect data in transit -
- Strong key generation, storage and management
- -Strong API -Understanding of security polices -
- Strong Authentications -Using strong authoriza-
- tion and authentication. -Properly auditing net-
- work traffic. - credit card fraud monitoring -
- Using better authentication and access control
- mechanisms.
- • -Inspect vulnerabilities and configuration. -Monitor environment for unauthorized changes/activities
- - Use of SLA for patch-
- ing and vulnerability remediation.
- Cloud security and
- privacy model for providing secure cloud services
- 2016
- Provide cloud security and
- privacy model (CSPM) to in- crease security and customer trust also help orgnization to identify the security issues
- -Insider attacks -Cloud
- malware injection attacks
- -Cryptographic attacks - Account and service hijacking attacks.
- Deploy intrusion detection system or/an intrusion prevention system for each CSPM layer. -Cryptographic techniques, including symmetric-key, asymmetric-key -Homomorphic encryption techniques -Control and manage- ment techniques, such as attribute-based en- cryption (ABE), key policy attribute based encryption, and cipher text policy attribute-based encryption
- Security threats on
- cloud computing vulnerabilities
- 2013
- Cloud security risks and
- threats based on the nature of the cloud service models
- Distributed denial of service
- (DDoS) attacks - Data loss
- Malicious programs (virus and Trojan, and brute force attack) -Malicious insider - Online cyber theft - Malware injection attack -Wrapping attack
- Security policy enhancement - Access management by using authentication standards security (SAML) and (XACML)
- Emerging security
- challenges in cloud
- computing: An
- insight to cloud
- security challenges
- and their mitigation
- 2011
- Discuss major cloud comput-
- ing security issues and defense
- mechanisms
- Insider threats
- Outside malicious attacks
- Multitenancy issues
- Loss of control.
- Defense-in-depth approach
- Multi-layer security approach
- The Management Of
- Security In Cloud
- Computing
- 2010
- Deliver strategic direction for
- the implementation of a se-
- cure cloud system. - Discuss
- security perspectives require-
- ment, and issues
- -privileged access
- -Regulatory compliance
- -Data location
- -Data segregation
- -Data recovery,
- -Investigative support
- -Long-term availability
- -Data availability
- -Modifying and combining data security and pri-
- vacy regulations
- -Constructing a holistic view of cloud computing
- rules
Index Terms
Computer Science
Information Sciences
Keywords