The On Cloud Computing Risks

This case gives us a fundamental understanding of the concept of cloud computing and presents the advantages and issues of this IT infrastructure. This case gives a clear vision of the company’s current situation. Three main questions to consider

This research paper clearly explains the concepts of what is cloud computing and its evolution and components of clouds in which it categorizes. Models are included in the cloud computing these are also explained in the paper and also more benefits occurs in cloud computing. Security is very important when the sensitive data is lying in cloud and the risks to the cloud are enormous. The important points to be considered when a corporate organization is planning to move its data and applications to the cloud computing are Restricted user access, Regulatory compliance, Data Position, Data Separation, Recovery, Support, Long-term viability. Some Future aspects are also discussed in order to manipulate the present environment.

However, research focusing on the adoption of cloud computing technology and its impact on business operation is limited. This trend may be explained by cloud computing being a relatively new field. Available research on the structures, processes, security measures surrounding the cloud services are still at an early stage.

Organizations use the Cloud in a variety of different service models (SaaS, PaaS, IaaS) and deployment models (Private, Public, Hybrid). There are a number of security issues/concerns associated with cloud computing but these issues fall into two broad categories: Security issues faced by cloud providers (organizations providing software-, platform-, or infrastructure-as-a-service via the cloud) and security issues faced by their customers.In most cases, the provider must ensure that their infrastructure is secure and that their clients’ data and applications are protected while the customer must ensure that the provider has taken the proper security measures to protect their information.

Cloud computing has set a trend in the information technology arena that has sparked the interest of all who utilize the internet on purpose and unsuspectingly. Initially, the primary purpose of cloud computing was to provide a centralized data bank that organizations could use for quick data access. Its use has been quickly adapted, however, beyond business use to become the first option for personal use. The advantages and disadvantages of implementing such a shift from business to personal are varied, yet, statistically, according to the CISCO Global Cloud Index: Forecast and Methodology, 2014-2019 White Paper, its public use is on the rise. The report notes that “by 2019, 56 percent of the cloud workloads will be in public cloud data centers, up from 30 percent in 2014 and by 2019, 44 percent of the cloud workloads will be in private cloud data centers, down from 70 percent in 2014”. Though disadvantages with regard to data security is prominent, users have deemed that its implementation will still promote greater benefits than loss.

This research paper tackles the issues that faces Cloud Computing today and gives the experts and industry’s point of view on the matter. The aspects explored are the significant industry questions that have risen about the use of Cloud Computing, business value, organization impact, adaptability, limitations, initial cost of implementation, and the severe business security risks

This report describes the activities and tasks carried out during a 10 - week, full-time internship at the American International Group (AIG). The document contains information about AIG and the responsibilities performed throughout the period between June 1st and August 14th 2015. More than a plain account of tasks, the objective of this report is to reflect upon the experiences collected during the internship from the perspective of an MS student in Management

Firstly, the Cloud computing and virtualization add multitude of security vulnerabilities, including, virtual machine (VM) attack where a new instance of VM is continually created to try to place it in the specific target area; and the malware injection attack, where the attacker tries to inject the malware within the metadata communication between the web browser and the web server, ultimately leads to deadlock of the cloud environment. Further, session riding and hijacking is performed by the attackers by sending a small email or triggering a malicious website by tricking the users; and vendor lock-in vulnerability is related to the relationship of the cloud provider and the client, where due to various contractual obligations, the client is tied to an undeveloped vendor and gets exposed to various cloud related risks. Moreover, resource exhaustion and denial of service attacks are based on the principle of exhausting or filling up the service queues so that the environment stops responding to client requests. Extensible Markup Language (XML) signature element wrapping attack is possible when the attackers interfere the request before the transport layer service (TLS) layer, and updates or changes the request before reaching to the server. Finally, in the Sybil attack the attacker creates multiple distinct identities and pretends to be a genuine user and makes relationships with other users on the network to create multiple attack paths

The high regard to cloud computing is on the rise due to its ability to improve flexibility, expand access to data, and lower costs. Cloud computing discharges organizations from requiring their hardware and software infrastructure to be acquired and maintained (Leavitt et al., 2009). On the other hand, while there is much noise being made about the benefits of cloud computing, questions have been brought up with respect to whether cloud computing is safe especially when it comes to its privacy, security, and reliability. The purpose of this paper is to discuss the different general controls and audit approaches for software and architecture, cloud computing, service-oriented architecture, and virtualization. This paper gives a summary analysis of the recent research that is available. Additionally, risks and vulnerabilities associated with public clouds, private clouds, and hybrids have also been researched. Within the research conducted, there are important examples provided. Recommendations are shown on how organizations could implement and mitigate these risks and vulnerabilities. This paper even outlines a list of IT audit tasks that focuses on a cloud computing environment due to the results of the analysis, the risks and vulnerabilities, and the mitigation controls.

According to Prasad, Gyani and Murti (2012), “Cloud computing can be defined as a new style of computing in which dynamically scalable and often virtualized resources are provided as a service over the Internet” (p.7). This statement is from five years ago, and although cloud computing is no longer considered new, this definition still describes what cloud computing means today. Cloud computing being private or public is becoming more primordial in the IT sector due to the numerous advantages it gives to its end users (Basmadjian et al. 2012). Since the interest in cloud computing keeps on increasing, efforts need to continue to evaluate current trends in security and privacy. Cloud computing

Cloud computing is steadily increasing as a viable enterprise technology solution. Information technology literature reports an expected boost in enterprise adoption of cloud computing in the next few years. Business plans to transition operations to cloud computing are also commonly reported. Despite these trends, there are many businesses that remain skeptical of the benefits of cloud computing and continue to support information systems in an on-site location. Careful planning and due diligence is essential to ensure that the most beneficial cloud computing model is utilized to meet business needs. This use case explores cloud computing methods, reviews security concerns regarding virtualization, and considers mechanisms to better

In this article, we discuss about the different cloud types and models, threats and vulnerabilities of cloud, and how to manage them. The main aim of this literature review is to identify the weak points in cloud computing, minimize the threats and improve the security system. We will also discuss two of the main concepts of cloud – virtualization and multi-tenancy (Mishra, Mathur, Jain, & Rathore, 2013). A brief analysis of each of the threat and security measure is described in the literature review.

Over the past several years the term cloud computing has become common in homes and organizations alike. Cloud computing can be defined as a pooled set of computing resources that are furnished via the internet. There are three types of cloud services typically available, these services are Platform as a Service (PaaS), Infrastructure as a Service (IaaS), and Software as a Service (SaaS). Organizations can benefit greatly from cloud services because they eliminate the need to buy and manage physical resources. Although such an action cuts cost it leaves organization victim to the vulnerabilities and threats that exist in cloud computing. Throughout this paper I will discuss the vulnerabilities and threats that come

Usage of remote servers via internet to store, manage and process data instead of using a personal computer is known as Cloud computing. It’s a set of Information Technology services with the ability to scale up or down their service requirements. Most of the cloud services are provided by a third party service provider. In cloud computing, organizations can utilize IT services without in advance investment. Despite its benefits obtained from the cloud computing, the organizations are slow in accepting it due to security issues and challenges. Security is one of the major problems which hinder the growth of cloud. It’s not wise to handing over the important data to another company; such that clients need to be vigilant in understanding the risks of data infringement in this new environment. This paper discusses a detailed analysis of the cloud computing security issues and challenges. (Ayoleke)

Cloud computing has become so famous; there is much widespread news about the cloud these days. This is mainly because of the exponential shift of the business applications from traditional models of software towards the Internet, and now through mobile devices. Cloud computing is a model that uses the network of remote servers that has been hosted on the internet rather than on a specific hardware. This would enable a better shared pool for storing, accessing and processing of data. With the huge information being available in the internet, the security for cloud computing has been challenging and this paper would elucidates the security threats of cloud computing also stating the possible countermeasures for them.