A Study Case For Cloud Computing

Organizations use the Cloud in a variety of different service models (SaaS, PaaS, IaaS) and deployment models (Private, Public, Hybrid). There are a number of security issues/concerns associated with cloud computing but these issues fall into two broad categories: Security issues faced by cloud providers (organizations providing software-, platform-, or infrastructure-as-a-service via the cloud) and security issues faced by their customers.In most cases, the provider must ensure that their infrastructure is secure and that their clients’ data and applications are protected while the customer must ensure that the provider has taken the proper security measures to protect their information.

Cloud computing has set a trend in the information technology arena that has sparked the interest of all who utilize the internet on purpose and unsuspectingly. Initially, the primary purpose of cloud computing was to provide a centralized data bank that organizations could use for quick data access. Its use has been quickly adapted, however, beyond business use to become the first option for personal use. The advantages and disadvantages of implementing such a shift from business to personal are varied, yet, statistically, according to the CISCO Global Cloud Index: Forecast and Methodology, 2014-2019 White Paper, its public use is on the rise. The report notes that “by 2019, 56 percent of the cloud workloads will be in public cloud data centers, up from 30 percent in 2014 and by 2019, 44 percent of the cloud workloads will be in private cloud data centers, down from 70 percent in 2014”. Though disadvantages with regard to data security is prominent, users have deemed that its implementation will still promote greater benefits than loss.

This research paper tackles the issues that faces Cloud Computing today and gives the experts and industry’s point of view on the matter. The aspects explored are the significant industry questions that have risen about the use of Cloud Computing, business value, organization impact, adaptability, limitations, initial cost of implementation, and the severe business security risks

We would like to provide the benefits of cloud computing without any troubles to propel in the direction it is designed for. This is to be achieved by preventing the owner's data from all risks associated and providing a cloud model that is more secure and efficient. The proposed model shall overcome the security risks defined by the security functions over cloud computing, as follows in (Passent M. et al., 2015):

The risk impact of cloud computing practices affecting health care is one researchable topic, which involve credible case studies and sources where significant data can be solicited from. The envisioned study should therefore proceed because the topic of “the risk impact of cloud computing services affecting health care systems” exists within acceptable bounds of research with limits, establishing research parameters having the probable weight of the variables in case of either a qualitative or quantitative research consideration (Sultan, 2014).

The high regard to cloud computing is on the rise due to its ability to improve flexibility, expand access to data, and lower costs. Cloud computing release organizations from being required to have their hardware and software infrastructure from being acquired and maintained (Holt, Niebuhr, Aichberger, & Rosiello, 2011). On the other hand, while there is much noise being made about the benefits of cloud computing, questions have been brought up with respect to whether cloud computing is safe especially when it comes to its privacy, security, and reliability. The purpose of this paper is to discuss the different general controls and audit approaches for software and architecture, cloud computing, service-oriented architecture, and virtualization. This paper gives a summary analysis of the recent research that is available. Additionally, risks and vulnerabilities associated with public clouds, private clouds, and hybrids have also been researched. Within the research conducted, there are important examples provided. Recommendations are shown on how organizations could implement and mitigate these risks and vulnerabilities. This paper even outlines a list of IT audit tasks that focuses on a cloud computing environment due to the results of the analysis, the risks and vulnerabilities, and the mitigation controls.

The concept of computing has changed over years and continues to change even today. Earlier we had mainframes and computers that took entire rooms to process small amounts of data. These machines led to smaller servers and increased computing over with a much smaller physical presence.

It is crucial that the cloud customer sets up an clearly characterized group to create and support a cloud business technique and execution plan for cloud benefits that will be a part of the entire IT environment. Previously, the proposals, plan, advancement, organization and support of the IT environment was mainly determined by the IT department. Cloud computing is making a development where the business pioneers are getting drawn in light of the fact that they see cloud computing as an instrument to get nearer to their clients and increment sales/income. Adoption of cloud computing is seen as a vital business choice that permits business to enhance IT effectiveness as well as help in accomplishment of worldwide business objectives like

The Cloud Security Allience (CSA), which promotes best practices for cloud computing security, cites seven main threats to the cloud: “1) Abuse and nefarious use of cloud computing; 2) Insecure application programming interfaces; 3) Malicious insiders; 4) Shared technology vulnerabilities; 5) Data loss or leakages;

Cloud computing is the use of services over the internet. The services may include software development platform, servers, storage, software etc. Cloud broker using the property known as cloud brokerage, which will help the consumers to find out better solutions. Now most of the companies selecting cloud based on the fact that it provide more security and privacy assurance to the services. IFC model helps to identify if any policy error has occurred, data management obligations. Speech recognition is one of the main technologies available in every modern smart phone. Even though they are commonly available quality of speech recognition is still not sufficient to replace the common hand written text.

Cloud computing is vast and so are the security threats. When a company opts for cloud computing, it will consider the advantages, but some of the companies fail to consider the vulnerabilities that might lead to data lost and misuse.

Usage of remote servers via internet to store, manage and process data instead of using a personal computer is known as Cloud computing. It’s a set of Information Technology services with the ability to scale up or down their service requirements. Most of the cloud services are provided by a third party service provider. In cloud computing, organizations can utilize IT services without in advance investment. Despite its benefits obtained from the cloud computing, the organizations are slow in accepting it due to security issues and challenges. Security is one of the major problems which hinder the growth of cloud. It’s not wise to handing over the important data to another company; such that clients need to be vigilant in understanding the risks of data infringement in this new environment. This paper discusses a detailed analysis of the cloud computing security issues and challenges. (Ayoleke)

A standout amongst the most essential issues identified with cloud security dangers is information trustworthiness. The information put away in the cloud may experience the ill effects of harm amid move operations from or to the distributed storage supplier. Cachinet al. give illustrations of the danger of assaults from both inside and outside the cloud supplier, for example, the as of late assaulted Red Hat Linux 's conveyance servers. Another case of ruptured information happened in 2009 in Google Docs, which set off the Electronic Privacy Information Center for the Federal Trade Commission to open an examination concerning Google 's Cloud Computing Services. Another case of a danger to information trustworthiness as of late happened in Amazon S3 where clients experienced information defilement.

For example, Facebook and Google docs are system that store data in the cloud (Demir 2012, 31), and users do not have total control or knowledge of where or how long time the data is stored. The second category of risk, tradition security threats, is the one that most of systems are subjected and in cloud system have their consequence in a larger amount of users (Marinescu 2013, p. 274). Generally, tradition security threats are related to disorder in the system integrity that can occur through intentional attacks, such as phishing, SQL insertion, and cross-site scripting (NIST 2012; Marinescu 2013, p. 274). One example of this type of attack is the one that occurred in Akamai on 2004 that affected google, yahoo and other major companies (Marinescu 2013, p. 15). The last classification of risk, system availability, can be caused by unexpected events as system failures and power outages; for instance, the interruption of Amazon servers in 2009 that was caused by a lightning (Marinescu 2013, p. 15). Cloud systems are vulnerable to a series of different risks and a trustable system should be capable to avoid and rapidly recover from this failures.

In analysis, the data will be studied with the aim of trying to understand the risks in order to mitigate the risks or to minimize the existing risks in the cloud computing system. The objective is to extract the useful information from the analysis of the data collected during the course of the study, which will help in creating resolutions to the issues that surface regarding cloud computing security.