APM Policy Enforcers

Organizations use the Cloud in a variety of different service models (SaaS, PaaS, IaaS) and deployment models (Private, Public, Hybrid). There are a number of security issues/concerns associated with cloud computing but these issues fall into two broad categories: Security issues faced by cloud providers (organizations providing software-, platform-, or infrastructure-as-a-service via the cloud) and security issues faced by their customers.In most cases, the provider must ensure that their infrastructure is secure and that their clients’ data and applications are protected while the customer must ensure that the provider has taken the proper security measures to protect their information.

A significant paradigm shift is represented by public cloud computing from conventional norms of an organizational data center to a de-parameterized infrastructure which opens gates for potential adversaries to use. Cloud computing should be approached carefully with any emerging information technology area with due consideration to the sensitivity of data. A good planning helps and ensures that the computing environment is secure to the most possible extant and is in compliance with all relevant policies of an organization and makes sure the privacy is maintained.

security of the cloud computing system. As stated in Gwu.edu. (2010), “We must be able to

As I mentioned above, cloud computing is relatively new, and like any other new technology, it brings with it exposure and risks. As more and more data is migrated online, concerns are beginning to grow about just how safe it is. Indeed, because every component in Cloud computing is potentially accessible from the Internet, security in the Cloud

In this paper, the authors survey many sources and literature on cloud security issues, namely vulnerabilities, threats, and attacks. A total of 504 articles were look at to gather the data used in this paper. While the authors use this number to say that the research trend is up on mitigating security risks, they also suggest that security is the main priority of most research to the detriment of other areas. They offer no concrete numbers to back up this claim..

The cloud computing has more security threats from the cyber hackers, to avoid the cyber-attacks on the cloud the organization must take concerning the cloud security problems like privacy, trust, authentication, data loss. Though the cloud anyone can access the computing technology and the storage of data from the network, as it used for the network cause

By introducing the intense programming which were extremely difficult to hack the servers move toward becoming more secure however it includes certain financial costs furthermore for the organizations which were eager to upgrade to such security components. Centralization is likewise one more factor that makes the cloud innovation the most secure one as it guarantees the simple control particularly to the customers of PaaS and IaaS models. Cloud security is centered around the single area on the primary server which is much better than the idea of individual organizations controlling the security of various servers at various areas. Through cloud security better treatment of the framework in a sheltered and secure way is accomplished. In organizations, if business is coordinated with the cloud administrations they may confront bring down dangers and enhance responsibility and kept up since the cloud specialist co-op is in charge of taking care of the whole thing. Therefore, the business require not to have money related incurrence and due to this reason it is important to pick the most committed organization to give the administrations, further developed safety efforts should have been actualized. The organizations in a need to guarantee development via completing the profound examination with respect to the

In this fast-paced technology era, organizations are always looking for new innovative ways to increase productivity and efficiency. One emerging technology adopted by many organisations is cloud computing. Cloud computing is a model that uses internet and remote servers for maintaining data and applications (Association of Modern Technologies Professionals 2017). It replaces expensive infrastructure and need of maintenance. Cloud provides access to data anytime, anywhere over the internet. However, like any cyber technology cloud computing is vulnerable to various kinds of cyber-attacks (Amna Riaz 2017).

The increase in database threats and risks has led to increased need to boost information security especially database security. Some of these security risks and threats include:-

Usage of remote servers via internet to store, manage and process data instead of using a personal computer is known as Cloud computing. It’s a set of Information Technology services with the ability to scale up or down their service requirements. Most of the cloud services are provided by a third party service provider. In cloud computing, organizations can utilize IT services without in advance investment. Despite its benefits obtained from the cloud computing, the organizations are slow in accepting it due to security issues and challenges. Security is one of the major problems which hinder the growth of cloud. It’s not wise to handing over the important data to another company; such that clients need to be vigilant in understanding the risks of data infringement in this new environment. This paper discusses a detailed analysis of the cloud computing security issues and challenges. (Ayoleke)

Cloud computing security or also known as cloud security talks about a broad set of technologies, policies and controls deployed to protect applications, data, and the corresponding infrastructure of cloud computing. The cloud is a great invention to allow high capacity storage of data but without the cost to allow sharing of resources in a quick and timely manner. With technology becoming advanced in such a short amount time, new steps must be created to protect people information from being hacked. Hacker’s mission is determined by greed, anger, or request to damage their victims and the organization they might be a part. No one can actually stop all the potential vulnerabilities from being breached, but the provider and clients

According to [4], there are so many security risks for user of the cloud computing services, for handling these hazards the possible types of attacks must be categorized so that solution of that can be found[5]. The author has proposed the idea of attacks possible in the cloud computing. The organizations are providing cloud services according to the cloud computing categorization. The cloud computing is still not matured in terms of security, and most of the researchers in published literature focused on security and new categorization of attack surface. The paper focused on the initial attacks and hacking efforts linked to cloud computing organizations and their systems. In the cloud computing there are three different contributor classes as user, cloud and service. In cloud computing, two contributors must involve in the communication. The attacks can be launched on any of these three contributors during communication. The contributor classes must be secured with a security interface or channel between the communicating parties, which depends on the service model that cloud have like IaaS, PaaS and SaaS.

Cloud computing environment fundamentally facilitate two basic functions: computing and data storage. Data security remains an issue in the use of ICT, but in the cloud computing environment, it becomes even more worrying issue for its users, because cloud services are delivered over the internet and are provided by large scale data centres. The cloud data centres can be located anywhere in the world, and consumers’ usually have little or no control over how it is stored and managed. Cloud technology is increasingly adopted by companies as it has enormous benefits as well as draw backs. This study analyses security issues within cloud computing environment particularly focuses on privacy and issues regarding data security, how could cloud data in cloud be made more secure and explores various data security solutions and techniques.

For example, Facebook and Google docs are system that store data in the cloud (Demir 2012, 31), and users do not have total control or knowledge of where or how long time the data is stored. The second category of risk, tradition security threats, is the one that most of systems are subjected and in cloud system have their consequence in a larger amount of users (Marinescu 2013, p. 274). Generally, tradition security threats are related to disorder in the system integrity that can occur through intentional attacks, such as phishing, SQL insertion, and cross-site scripting (NIST 2012; Marinescu 2013, p. 274). One example of this type of attack is the one that occurred in Akamai on 2004 that affected google, yahoo and other major companies (Marinescu 2013, p. 15). The last classification of risk, system availability, can be caused by unexpected events as system failures and power outages; for instance, the interruption of Amazon servers in 2009 that was caused by a lightning (Marinescu 2013, p. 15). Cloud systems are vulnerable to a series of different risks and a trustable system should be capable to avoid and rapidly recover from this failures.

“Cloud computing” simply means “Internet computing “, generally the internet is seen as collection of clouds; thus the word cloud computing can be defined as utilizing the internet to provide technology enabled services to the people and organizations[1]. Cloud computing is a powerful emerging service that provides an optimized and efficient computing platform by using sharing and virtualization concepts and improving availability, scalability, collaboration and agility for users and enterprises [2]. Cloud computing has a rapid growth in IT industries due to the considerable benefits of sorting and maintaining resources in unlimited storages with the most cost efficient method, business continuity and scalability [3]. However, the only hurdle in wide adoption of this newfound technology is lack of security especially in data protection, authentication, and data transmission subject [4].