Highly Toxic Seven Threats and Vulnerability in Cloud Computing

Highly Toxic Seven Threats and Vulnerabilities in Cloud Computing

Abstract— Cloud computing has been developed to reduce IT expenses and to provide agile IT services to individual users as well as organizations. It moves computing and data away from desktop and portable PCs into large data centers. This technology gives the opportunity for more innovation in lightweight smart devices and it forms an innovative method of performing business. Cloud computing depends on the internet as a medium for users to access the required services at any time on pay-per-use pattern. However this technology is still in its initial stages of development, as it suffers from threats and vulnerabilities that prevent the users from trusting it. Various be rainy as well, in other words this technology is not trustworthy as it is affected with threats and vulnerabilities. We have termed a cloud with threats and vulnerabilities as a stormy cloud. Based on Cloud Security Alliance (CSA) and our research, we have identified top seven threats and vulnerabilities that are the causes behind the creation of a stormy cloud [1]. The identified threats and vulnerabilities are ranked from top to bottom as shown in Fig.1. malicious activities from illegal users have threatened this technology such as data misuse, inflexible access control and limited monitoring. The occurrence of these threats may result into damaging or illegal access of critical and confidential data of users. This research paper describes the characteristics (threats, vulnerabilities) associated with a stormy cloud.

Keywords- Illegal access, Threats, Vulnerabilities

I. INTRODUCTION The traditional era of computing involves the use of software, hardware and storage to achieve the required computational service whereas cloud computing has isolated the services from resources (networks, storage, servers). The required

References: [1] CSA, “Security Guidance for Critical Areas of Focus in Cloud Computing V2.1” Cloud Security Alliance, 2009, [Online], Available: https://cloudsecurityalliance.org/topthreats/csathreats.v1.0.pdf, [Accessed: 08-July-2011]. [2] E., Mathisen, “Security challenges and solutions in cloud computing,” in Digital Ecosystems and Technologies Conference (DEST), 2011 Proceedings of the 5th IEEE International Conference on, 2011, pp. [3] Wei Chen, Hongyi Lu, Li Shen, Zhiying Wang, Nong Xiao, and Dan Chen, “A Novel Hardware Assisted Full Virtualization Technique,” in Young Computer Scientists, 2008 [4] S. Farrell, “Portable Storage and Data Loss,” Internet Computing, IEEE, vol. 12, no. 3, pp. 90-93, 2008. [5] R., Trope, C., Ray, “The Real Realities of Cloud Computing: Ethical Issues for Lawyers, Law Firms, and Judges “, [Online], Available: http://ftp.documation.com/references/ABA10a/PDfs/3_1.pdf , 2009, [Accessed: 15-Jul-2011]. [7] S., Subashini, V. Kavitha. “A survey on security issues in service delivery models of cloud computing”. Journal of Network and Computer Applications, vol.34, pp.1-11, 2011. 50-57, 2011. [11] A., Greenberg, “Why Cloud Computing Needs More Chaos” [Online], Available:http://www.forbes.com/2009/07/30/cloud-computing- security-technology-cio-network-cloud-computing.html, 2009, [Accessed: 20-Jul-2011]. [12] T. Schreiber, “Session Riding a Widespread Vulnerability in Today 's Web Applications” [Online], Available: http://www.securenet.de/papers/Session_Riding.pdf, white paper, 2004 [13] G., Petri, “Vendor Lock-in and Cloud computing”, [Online], Available: http://cloudcomputing.sys-con.com/node/1465147 , 2010, [Accessed: [14] S., Brohi, M., Bamiah, “Challenges and Benefits for Adopting the Paradigm of Cloud Computing”, International Journal of Advanced Engineering Sciences and Technologies (IJAEST), vol. 8, pp. 286 - 290, 2011.