Sergio Alberto Garcia Alvarez, Lyberth Jose Rumbo Luquez · Universidad Industrial de Santander · 2016
Criptografía, Confidencialidad, SSL/TLS, HSTS, HTTPS RESUMEN: La necesidad de seguridad en la nube ha llevado a la búsqueda de diversas estrategias para garantizar la fiabilidad de los datos, la autenticación de los servidores a los que se pretende ingresar es una de estas, debido a que, generalmente, los datos son transportados mediante el protocolo Transmission Control Protocol (TCP) y este no garantiza la seguridad del canal o una identificación de equipo seguro. En la actualidad se han desarrollado protocolos de transporte seguro como lo son Secure Socket Layer (SSL) y Transport Layer Security (TLS) que permiten establecer sus conexiones basados en la generación de certificados que autentican el sitio al que se está accediendo. Sin embargo, no todos los sitios que cuentan con certificados son reales o tienen errores que comprometen la seguridad de los usuarios, si bien los navegadores lo advierten, en algunos casos se ignoran estas advertencias lo que deriva en el ingreso a un sitio potencialmente inseguro aumentando el riesgo de ser víctimas de un ataque informático. Es allí donde HSTS entra a desempeñarse como un complemento de seguridad que permite exclusivamente conexiones seguras entre la fuente y el destino, asegurando al usuario que sus datos, en cuanto a conexión respecta, se encuentran seguros. En esta monografía se presenta una revisión de la computación en la nube al igual que de la política HSTS y la forma en que su implementación permite mejorar la seguridad de los sitios donde se implemente
Cited by 0Open access
Neha Agrawal, Rohit Kumar, Shashikala Tapaswi · 2025
Cited by 0
Roberto Di Pietro, Flavio Lombardi · 2015
This comprehensive resource presents a highly informative overview of cloud computing security issues. This book focuses on relevant approaches aimed at monitoring and protecting computation and data hosted on heterogeneous computing resources. The most critical security aspects are thoroughly discussed, highlighting the importance of reliable secure computation over remote heterogeneous cloud nodes. This book shows that present cloud computing is inherently insecure therefore advanced execution models have to be developed to prevent unauthorized users from accessing or affecting others' data and computation. The cloud approach enables on-demand scalable services that allow performing large computations without the costs and maintenance/management issues of costly server farms (thus enabling a novel kind of outsourced computing). Essential reading for software and computer engineers as well as data architects and IT professionals to better understand the complexity and heterogeneity of modern cloud- based scenarios.
Cited by 0
Yushu Zhang, Yong Xiang, Leo Yu Zhang · Springer briefs in electrical and computer engineering · 2018
Cited by 3
John W. Rittinghouse, James F. Ransome · 2015
Cited by 0
Carmen Răduţ, Ionela Popa, Diana Codreanu · 2012
Cloud Computing implies that your customer information is exchanged via the internet to qualify for various web services, and involves a serious danger in terms of security. Data on the Internet are highly susceptible, while safer when stored in Home/Office on storage media. It is possible to corrupt irreparably, sensitive information, caused by the death of servers, or the worst of an entire data center. Failure prevention measures at the level of suppliers of services related to Cloud Computing presume, interconnection, data encryption and network servers servers for periodical backups of the same files on multiple machines.
Cited by 0
Balboni, Paolo, Vacca, John R. · HAL (Le Centre pour la Communication Scientifique Directe) · 2016
These last years, we are witnessing a real digital revolution of Internet where many innovative applications such as Internet of Things, autonomous cars, etc., have emerged. Consequently, adopting externalization technologies such as cloud and fog computing to handle this technological expansion seems to be an inevitable outcome. However, using the cloud or fog computing as a data repository opens many challenges in prospect. This thesis addresses security issues in cloud and fog computing which is a major challenge that need to be appropriately overcomed. Indeed, adopting these technologies means that the users lose control over their own data, which exposes it to several security threats. Therefore, we first investigated the main security issues facing the adoption of cloud and fog computing technologies. As one of the main challenges pointed in our investigation, access control is indeed a cornerstone of data security. An efficient access control mechanism must provide enforced and flexible access policies that ensure data protection, even from the service provider. Hence, we proposed a novel secure and efficient attribute based access control scheme for cloud data-storage applications. Our solution ensures flexible and fine-grained access control and prevents security degradations. Moreover, it performs immediate users and attributes revocation without any key regeneration. Authentication service in fog computing architecture is another issue that we have addressed in this thesis. Some traditional authentication schemes endure latency issues while others do not satisfy fog computing requirements such as mutual authentication between end-devices and fog servers. Thus, we have proposed a new, secure and efficient authentication scheme that ensures mutual authentication at the edge of the network and remedies to fog servers' misbehaviors.Finally, we tackled accountability and privacy-preserving challenges in information-sharing applications for which several proposals in the literature have treated privacy issues, but few of them have considered accountability service. Therefore, we have proposed a novel accountable privacy preserving solution for public information sharing in data externalization platforms. Externalization servers in our scheme authenticate any user in the system without violating its privacy. In case of misbehavior, our solution allows to trace malicious users thanks to an authority.
Cited by 28Open access
Chhavi Chaturvedi, Brij B. Gupta · Advances in information security, privacy, and ethics book series · 2020
The applications and software using cloud computing as a base have significantly increased, and cloud computing is nowadays developed as a scalable and cost-effective technique. It facilitates many features in the computing environment like resource pooling, multi-tenancy, virtualization, etc. The cloud environment has led to the proliferation of various attacks that affect the security of applications and software developed by using cloud services and also cloud user's data. Data security is the main concern in cloud computing because it is stored in data centers provided by service providers. The chapter presents the background history of cloud computing and different challenges faced by the cloud environment, especially in terms of providing security for customer data stored in data centers. Authors also discuss the case studies on Microsoft Azure (i.e. a cloud platform) and Aneka (i.e. a cloud development and management platform).
Cited by 4
Curran, K, Carlin, S, Adams, M · Ulster University Research Portal (Ulster University) · 2011
Cited by 2Open access
Ştefan Iovan, Alina Anabela Iovan · SHILAP Revista de lepidopterología · 2016
Cloud computing reprentes the software applications offered as a service online, but also the software and hardware components from the data center.In the case of wide offerd services for any type of client, we are dealing with a public cloud. In the other case, in wich a cloud is exclusively available for an organization and is not available to the open public, this is consider a private cloud [1]. There is also a third type, called hibrid in which case an user or an organization might use both services available in the public and private cloud. One of the main challenges of cloud computing are to build the trust and ofer information privacy in every aspect of service offerd by cloud computingle. The variety of existing standards, just like the lack of clarity in sustenability certificationis not a real help in building trust. Also appear some questions marks regarding the efficiency of traditionsecurity means that are applied in the cloud domain. Beside the economic and technology advantages offered by cloud, also are some advantages in security area if the information is migrated to cloud. Shared resources available in cloud includes the survey, use of the "best practices" and technology for advance security level, above all the solutions offered by the majority of medium and small businesses, big companies and even some guvermental organizations [2].
Cited by 1Open access
Prince Joshi, Vishal Dhangar, Manish Muchhala et al. · International Journal for Research in Applied Science and Engineering Technology · 2023
bstract: Cloud computing environment is a new way in which web base enable applications provide as a service for the users with low computational cost through internet. As we store data and it also provide services in distributed environment. Cloud ease its users byproviding virtualization technology of resources through internet. Cloud computing is the emerging field, due to this reason the various new techniques are still developing. At current scenario new security challenges were increases for cloud professionals. Due to lack of security in cloud computing environment user of cloud lost it trust in cloud. Multi-tenancy, elasticity, Security Performance and Optimization, etc. are various security issues in cloud computing. In this paper we will discuss some of the issue incloud. This paper also discusses some of the existing security technique for securing a cloud and help researchers and professionals to know about various security threats
Cited by 0Open access
IJSREM Journal · INTERANTIONAL JOURNAL OF SCIENTIFIC RESEARCH IN ENGINEERING AND MANAGEMENT · 2024
Cloud computing has transformed the IT landscape by providing scalable resources and services over the internet. However, this paradigm shift raises important security issues that need to be addressed to ensure data integrity, privacy and availability. This summary provides an overview of the primary security challenges in cloud computing, including data breaches, unauthorized access rights, and shared infrastructure vulnerabilities. It examines the various strategies and technologies used to mitigate these risks, such as encryption, multi-factor authentication and robust monitoring systems. In addition, he examines the role of compliance and standards in improving cloud security. By reviewing the theoretical and practical aspects of cloud security, this summary aims to highlight current efforts and future directions in fortifying cloud computing environments against emerging threats. Keywords — Cloud Computing, scalable, security issues, shared infrastructure, data breaches.
Cited by 1Open access
RADUT Carmen, POPA Ionela, CODREANU Diana · RePEc: Research Papers in Economics
Cloud Computing implies that your customer information is exchanged via the internet to qualify for various web services, and involves a serious danger in terms of security. Data on the Internet are highly susceptible, while safer when stored in Home/Office on storage media. It is possible to corrupt irreparably, sensitive information, caused by the death of servers, or the worst of an entire data center. Failure prevention measures at the level of suppliers of services related to Cloud Computing presume, interconnection, data encryption and network servers servers for periodical backups of the same files on multiple machines.
Cited by 0
Rajkumar Buyya, Christian Vecchiola, S. Thamarai Selvi et al. · Elsevier eBooks · 2026
Cited by 0
Sean Carlin, Kevin Curran · IGI Global eBooks · 2014
In this paper, the authors focus on Cloud Computing, which is a distributed architecture that centralizes server resources on quite a scalable platform so as to provide on demand’ computing resources and services The authors outline what cloud computing is, the various cloud deployment models and the main security risks and issues that are currently present within the cloud computing industry.
Cited by 32
Ahmed Banafa · River Publishers eBooks · 2023
Cited by 2
Hidalgo Barea, Albert · QRU Quaderns de Recerca en Urbanisme · 2011
Cited by 0Open access
Moreno Martín, Oriol · RECERCAT (Consorci de Serveis Universitaris de Catalunya)
Security in Cloud Computing is becoming a challenge for next generation Data Centers. This project will focus on investigating new security strategies for Cloud Computing systems.
Cited by 0Open access
Liu, Bin · The Research Repository @ WVU (West Virginia University) · 2020
Cited by 0
Amandeep Singh Arora, Linesh Raja, Barkha Bahl · Don Bosco Institute of Technology Delhi Journal of Research · 2025
The fast-paced growth coupled with the global acceptance of cloud computing has significantly changed how information technology is viewed. The advantages presented in scale, cost and operations have never been experienced before. Nevertheless this change has also created another layer of issues that organizations need to deal with full scale in order to protect their cloud resources against unauthorized access, use and destruction. This long and detailed essay includes review of numerous threats, solutions and best practices regarding cloud computing security. This study is based on an understanding of cloud security at present by employing qualitative and quantitative methods. For example, the first 1000 security incidents were evaluated; surveys of 500 IT security experts and 50 industry leaders were conducted. The analysis showed that the cloud security landscape is becoming complex, and while the security technologies and practices have progressed tremendously, there are challenges still persistent. According to the research, physical security controls are in place for 76% of organizations practicing multi-factor authentication, yet only 68% have supplied and implemented an all-inclusive cloud security plan, a disturbing discrepancy in the organizations’ approaches to security [1]. The research not only identifies and examines these issues but also offers practical suggestions and looks at the technologies that will influence cloud computing security in the years to come, therefore answering the questions posed by both academics and practitioners
Cited by 0Open access