Types Of Hackers And Cloud Computing Essay

A cloud client can be an organization or human that has a contract to rent and use the IT resources of cloud base with the cloud-computing provider. Consequently, the cloud client has ability to use the IT resources of cloud – base,

Organizations use the Cloud in a variety of different service models (SaaS, PaaS, IaaS) and deployment models (Private, Public, Hybrid). There are a number of security issues/concerns associated with cloud computing but these issues fall into two broad categories: Security issues faced by cloud providers (organizations providing software-, platform-, or infrastructure-as-a-service via the cloud) and security issues faced by their customers.In most cases, the provider must ensure that their infrastructure is secure and that their clients’ data and applications are protected while the customer must ensure that the provider has taken the proper security measures to protect their information.

The vendor controls the cloud and their employees may have access to the client’s information. It’s vital that the client organization seek clarity on exactly who has that access and their credentials—level of expertise, exact job title and company responsibility, etc.

Cloud infrastructure attacks, where the attacker tries to gain access directly to your cloud resources, such as the ability to launch containers, create functions or modify permissions. One common vector that is gaining momentum is where attackers find access keys to a cloud account that have been inadvertently posted somewhere on the internet, and use those to attack the cloud

A lot has being said concerning issues surrounding the law and cloud computing. Some of these issues include privacy and data security concerns and laws and regulations. Regardless of what cloud computing models an organization uses, both the cloud provider and the consumer ha to operate under this laws. Therefore both parties need to have a broad knowledge of the these laws such as data breaches, information ownership and control and how close customers can manage risk both at the federal and state levels.

While it is important to take advantages of could based computing by means of deploying it in diversified sectors, the security aspects in a cloud based computing environment remains at the core of interest. Cloud based services and service providers are being evolved which has resulted in a new business trend based on cloud technology. This paper presents a review on the cloud computing concepts as well as security issues inherent within the context of cloud computing.

The first scenario that will be examined is looking at Cloud Computing from the perspective of security. Many small and medium sized businesses utilize the internet and Cloud Computing to conduct business and transfer money from system to system as well as report on financial accounting data. With that being the case, it is crucial that whatever system the business is working with pays very close attention to security needs to ensure that this data is protected from unauthorized sources viewing or manipulating it.

To understand the public cloud computing environment that is being offered by the cloud providers. The responsibilities of an organization and the cloud providers vary depending on the service model. Any organization should understand and organize the process of consuming the cloud services and also keep an eye on the delineation responsibilities over the computing environment and implicate security and privacy. Assurances or certification and compliance review entity paid by the cloud providers to support security or privacy should be well verified time to time by organization through independent

To understand the public cloud computing environment that is being offered by the cloud providers. The responsibilities of an organization and the cloud providers vary depending on the service model. Any organization should understand and organize the process of consuming the cloud services and also keep an eye on the delineation responsibilities over the computing environment and implicate security and privacy. Assurances or certification and compliance review entity paid by the cloud providers to support security or privacy should be well verified time to time by organization through independent assessment.

Data breaches and data loss is a severe issue when it comes to cloud computing. Since some or all of the infrastructure is located off site at the cloud services infrastructure, we do not control the overall security of the system. If an attacker gains access to the cloud computing system, even if it is through a different customers account there is a chance that they could gain access to our data that is stored on the cloud services system. These data breaches can expose our customers private data such as names, addresses, and account information. If the cloud company does not properly store credit card numbers it may expose them as well (Babcock, 2014).

Stakeholder refers anyone who has a power to impact on any organization, projects or a particular service. The stakeholders of Cloud Computing play key role for success and failure of CC services. The aim of CC providers is to make available better (effective and efficient) services to all users whereas reducing their cost, raise productivity and build intelligent services thorough the implementation of cloud computing. The stakeholders have been facing various type of difficulty when they trying to adopt new technologies. When changing any new services instead of existing ICT services, whenever the cloud computing services are fit for purpose at that time non-corporate commonwealth entities, nonprofit organization as well as small businesses are required to use cloud computing service for the new ICT services to improve their performance. Furthermore, they will help to implement cloud computing by offering ERP software as a service (SaaS) and ERP Platform as a service (PaaS).

Representatives of most IT companies, particularly call centers, use cloud computing software to allow connectivity and sharing of resources in company data centers (Beverakis, Dick, & Cecez-Kecmanovic, 2009). Cloud computing software is an advanced tool used in outsourcing, particularly for communications, because of the capacity to collect and access massive amounts of data. This software is commonly operated in a data center, which allows access to associated data in a variety of ways (Anthes, 2010). Because most call centers operate using cloud computing, third-party IT contracting security is a primary concern (Anthes, 2010; Gatewood, 2009).

There are numerous ways one can gain unauthorized access to data maintained in the cloud’s data centers. The methods vary from physical theft to trickery and electronic attack. Common methods of attack include cracking weak passwords, privilege escalation, exploiting unused database functionality, targeting known unfixed software vulnerabilities, SQL injection, and stealing unencrypted back-up tapes (Higgins, 2008).

4. Ins ecur e AP I’s: Customer manages and interacts with the cloud services through

Professor Yoo cited that, “The customers jogging those providers and their deployment offerings will ought to preserve to undergo the charges of the services by myself (Yoo, 2011). One has to surprise what america authorities holds for the future of cloud computing. The united states authorities accountability office as a part of a comprehensive effort to boom the operational performance of federal technology property, federal businesses are transferring how they installation facts generation offerings. The workplace of control and Budgets (OMB)