Based On The Study Of Various Security Models Of Cloud

A sound information security policy begins with an understanding of what is the current climate, which can consist of policies, regulations, and laws. It is imperative to understand what legislation your line of business must comply with as well any applicable governance requirements. Beginning with defining what is a policy, a guideline and a standard: a policy provides specific requirements or rules to abide by, which can be either at the governmental level, meaning a statute and/or organization-specific directive; also known as administrative law. According to the SANS Institute (n/d), a leading cooperative research and education organization, a standard can be an amalgam of requirements that is applicable to the user body; and a guideline can be considered akin to a recommendation for a best practice (SANS Institute, n/d). Current government policies can be issued by federal, state, local and/or tribal

Organizations use the Cloud in a variety of different service models (SaaS, PaaS, IaaS) and deployment models (Private, Public, Hybrid). There are a number of security issues/concerns associated with cloud computing but these issues fall into two broad categories: Security issues faced by cloud providers (organizations providing software-, platform-, or infrastructure-as-a-service via the cloud) and security issues faced by their customers.In most cases, the provider must ensure that their infrastructure is secure and that their clients’ data and applications are protected while the customer must ensure that the provider has taken the proper security measures to protect their information.

We would like to provide the benefits of cloud computing without any troubles to propel in the direction it is designed for. This is to be achieved by preventing the owner's data from all risks associated and providing a cloud model that is more secure and efficient. The proposed model shall overcome the security risks defined by the security functions over cloud computing, as follows in (Passent M. et al., 2015):

The amount of risk in the field of health care and banking systems is enormous. In the health care industry the risks are very high compared to other organizations. The usage of new technologies such as smart medical devices, cloud services, and electronic protected health information offer a number of operational benefits but the risk of losing the data or data being manipulated is very high. As hackers can hack into the cloud storage and manipulate the data. There are few challenges which are as follows.

A significant paradigm shift is represented by public cloud computing from conventional norms of an organizational data center to a de-parameterized infrastructure which opens gates for potential adversaries to use. Cloud computing should be approached carefully with any emerging information technology area with due consideration to the sensitivity of data. A good planning helps and ensures that the computing environment is secure to the most possible extant and is in compliance with all relevant policies of an organization and makes sure the privacy is maintained.

A significant paradigm shift is represented by public cloud computing from conventional norms of an organizational data center to a de-parameterized infrastructure which opens gates for potential adversaries to use. Cloud computing should be approached carefully with any emerging information technology area with due consideration to the sensitivity of data. A good planning helps and ensures that the computing environment is secure to the most possible extant and is in compliance with all relevant policies of an organization and makes sure the privacy is maintained.

The scope of this memorandum is to develop a research project on the subject of cloud computing security and specifically the innovative ways developers are trying to secure data in the cloud. I will briefly describe the current cloud computing security structure and discuss measurement protocols that have been developed recently in order to test and measure the effectiveness of cloud security (Yesilyurt, et al.,

Worldwide, both the public and private sectors have grown in their distrust and discomfort in the ability of companies to handle user data properly. Trust must be restored by defining a clear line between legitimate security concerns and an individual’s right to privacy. One way to ensure privacy is by separating the application that is being used (cloud service) from the data it stores and some providers are already employing this method.

According to Prasad, Gyani and Murti (2012), “Cloud computing can be defined as a new style of computing in which dynamically scalable and often virtualized resources are provided as a service over the Internet” (p.7). This statement is from five years ago, and although cloud computing is no longer considered new, this definition still describes what cloud computing means today. Cloud computing being private or public is becoming more primordial in the IT sector due to the numerous advantages it gives to its end users (Basmadjian et al. 2012). Since the interest in cloud computing keeps on increasing, efforts need to continue to evaluate current trends in security and privacy. Cloud computing

The main issue that slows down the growth of cloud computing is security. No matter how many security management tools are released or assurances of reliability are made, complications with data privacy and data protection continue to plague the market. Covering all potential security issues in this article is simply impossible. This is because of the fact that we 're still discovering many of the security issues which challenges cloud computing as it is still a work-in-progress. Cloud Computing is rapidly evolving and hence what we see today may quickly become irrelevant.

DATA SECURITY IN CLOUD COMPUTING Introduction: Cloud computing has prompted a movement in how individuals consider IT frameworks structural engineering. Numerous associations today are either executing cloud-based services, or assessing which cloud-based measures they will be portraying later on. As indicated by Gartner Inc. distributed computing is "no less compelling than e-business". This sprocess in building design from an undertaking normal server-based framework to a cloud-based framework will have related expenses of passage and dangers, yet it can bring about inconceivable advantages in reserve funds and in IT and business deftness.

One of the major issues slowing cloud computing growth is security. No matter how many security management tools are released or assurances of reliability are made, complications with data privacy and data protection continue to plague the market.

Cloud computing entails the pooling of computing resources from several computers and devices to enhance computing capability and power. These on-demand accesses to required computing resources have enabled organizations to cut down on costs (such as start-up capital and operational costs) significantly through the pay-as-you-use subscription model. Computing resources are provisioned via the internet with minimal management effort from firms providing the service. While this service has greatly improved the operations of organizations, there are several challenges that is has faced. These include: data ownership challenges; data security; data service levels; data privacy protections; data mobility; and high bandwidth costs. Due to the continued growth and expansion of the internet, more organizations are seeking to leverage such technology advancements to enhance their competitive advantage. This paper focuses on cloud security, which forms a vital component for the growth and enhancement of the technology and service provision. It seeks to propose a comprehensive layered framework solution to the security concerns outlined above.

Cloud computing security is a set of control based technologies and policies that must follow certain rules in order to protect applications, data and any information associated with cloud computing. It is known to provide excellent services but is still not supported by organizations due to privacy issues that includes security and privacy protection. As they obstruct the managers as well as the

Abstract - Cloud computing is architecture for providing computing service via the internet on demand and pay per user access to a pool of shared resources namely networks, storage, servers, services and applications, without physically acquiring them. So it saves managing cost and time for organizations. Cloud security is becoming a key differentiator and competitive edge between cloud providers.