Adamu Usman, Peter M. Ogedebe · 2015
Organizations and businesses are constantly in search of ways to improve competitive advantage, reduce the cost of operation to increase profit margins and in all cases improve operations efficiency and effectiveness. Computer automation and Information Technology (IT) have proven to enhance business operations by expedient delivery of service and enhancing the ability to communicate over large geographical areas in real time. As the cost of obtaining up to date efficient IT systems continue to rise, Cloud Computing has been taunted as a means of reducing these costs and providing an equally or in some cases a better computerized platform for business functionality. This paper looks at the issues associated with cloud service failures, the consequences of such failures and provides a forum for discussing, sharing, reviewing and collaboration among peers, business owners and service providers. Despite the hype of a more efficient and effective system (Paas, Iaas, SaaS), cloud computing isn’t without failures and the consequences of those failures to subscribers. A line of thought and implementation of such a scheme for organizations needs to be fully understood and established.
Cited by 0
Sergio Alberto Garcia Alvarez, Lyberth Jose Rumbo Luquez · Universidad Industrial de Santander · 2016
Criptografía, Confidencialidad, SSL/TLS, HSTS, HTTPS RESUMEN: La necesidad de seguridad en la nube ha llevado a la búsqueda de diversas estrategias para garantizar la fiabilidad de los datos, la autenticación de los servidores a los que se pretende ingresar es una de estas, debido a que, generalmente, los datos son transportados mediante el protocolo Transmission Control Protocol (TCP) y este no garantiza la seguridad del canal o una identificación de equipo seguro. En la actualidad se han desarrollado protocolos de transporte seguro como lo son Secure Socket Layer (SSL) y Transport Layer Security (TLS) que permiten establecer sus conexiones basados en la generación de certificados que autentican el sitio al que se está accediendo. Sin embargo, no todos los sitios que cuentan con certificados son reales o tienen errores que comprometen la seguridad de los usuarios, si bien los navegadores lo advierten, en algunos casos se ignoran estas advertencias lo que deriva en el ingreso a un sitio potencialmente inseguro aumentando el riesgo de ser víctimas de un ataque informático. Es allí donde HSTS entra a desempeñarse como un complemento de seguridad que permite exclusivamente conexiones seguras entre la fuente y el destino, asegurando al usuario que sus datos, en cuanto a conexión respecta, se encuentran seguros. En esta monografía se presenta una revisión de la computación en la nube al igual que de la política HSTS y la forma en que su implementación permite mejorar la seguridad de los sitios donde se implemente
Cited by 0Open access
International Conference on Cloud Computing 2024 Bangkok, Wang, Yang, Zhang, Liang-Jie et al. · Lecture notes in computer science · 2024
Cited by 0Open access
CLOUD 2019 San Diego, Calif., Dilma Da Silva, Qingyang Wang et al. · Lecture notes in computer science · 2019
Cited by 9
Min Luo, Liang-Jie Zhang · Lecture notes in computer science · 2024
Cited by 0Open access
Ahmed E. Youssef, Manal Alageel · 2012
Cloud computing is one of the most discussed topics today in the field of information technology. It introduces a new Internet-based environment for on-demand, dynamic provision of reconfigurable computing resources. The biggest challenge in cloud computing is the security and privacy problems caused by its multi-tenancy nature and the outsourcing of infrastructure, sensitive data and critical applications. In this paper, we propose a framework that identifies security and privacy challenges in cloud computing. It highlights cloud-specific attacks and risks and clearly illustrates their mitigations and countermeasures. We also propose a generic cloud computing security model that helps satisfy security and privacy requirements in the clouds and protect them against various vulnerabilities. The purpose of this work is to advise on security and privacy considerations that should be taken and solutions that might be considered when using the cloud environment by individuals and organizations.
Cited by 1
Afandi Akbar · OSF Preprints (OSF Preprints) · 2021
Tugas Cloud Computing
Cited by 0
Beckman, Pete; Foster, Ian · OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information) · 2018
Chicago Matters: Beyond Burnham (WTTW). Chicago has become a world center of "cloud computing." Argonne experts Pete Beckman and Ian Foster explain what "cloud computing" is and how you probably already use it on a daily basis.
Cited by 0Open access
Fehling, Christoph, Leymann, Frank · Fachbereich Informatik (University of Stuttgart) · 2011
\n Cloud Computing verändert die Art und Weise, wie IT-Ressourcen,\n beispielsweise Server oder Anwendungen, genutzt werden. Anstelle\n IT-Ressourcen, in unternehmenseigenen Rechenzentren zu betreiben,\n sind diese bedarfsorientiert und flexibel in Form eines\n dienstleistungsbasierten Geschäftsmodells und über das Internet\n verfügbar. Diese Art der Bereitstellung führt zu einer\n Industrialisierung von IT-Ressourcen, ähnlich wie es bei der\n Bereitstellung von Elektrizität der Fall war. Firmen können durch\n den Einsatz von Cloud Computing langfristige Investitionsausgaben\n (CAPEX) für den Nutzen von Informationstechnologie (IT) vermeiden,\n da für IT-Ressourcen, die von einer Cloud bereitgestellt werden,\n nur operationale Kosten (OPEX) anfallen.\n
Cited by 0
Bernardo Nicoletti · RePEc: Research Papers in Economics
Abstract This chapter defines the concept and scope of cloud computing. It starts with a discussion on the origins of the model as well as the main evolutionary elements supporting its launch, such as virtualization and the spread of the Internet.
Cited by 0
Jajovski, Erdzan · CBS Research Portal (Copenhagen Business School) · 2011
NNIT A/S is a Danish IT company providing services in consultancy, development, implementation\nand operation of IT solutions and dealing with more than 1500 employees, and generated sales in\n2009 to around 1.6 billion kroner. NNIT shows balance in the internal value chain and it leaves an\nimpression of the right decision in relation to added value to customers as a result of NNIT's\nactivities in each link.\nIn connection with the growing focus and tendency to cloud area, NNIT want to grow and become\nthe largest provider of cloud computing solutions in Denmark.\nIt is a company that offers unique products that differs from competing products on the market by\nhaving special properties. NNIT attempts through product development, branding, promotion or\nservice to create loyal customers who will pay extra for the slightly more expensive products.\nThe Danish IT industry can look back on a historic 2010 when the total IT investment totaled nearly\n65 billion kr., which beats the previous record year in 2008. Thus grew the Danish IT market by 6.8\npercent and surpassed by far the expectations of 4.4 percent.\nIt is estimated that in 2012 the turnover on cloud will round the magical one billion kr. in Denmark.\nToday, the cloud turnover in Denmark was barely 400 million kr.\nIn 2014 it is estimated that the total cloud market in Denmark will turn over to around 2.2 billion kr.,\ntherefore it is expected that NNIT need to earn a share of this.\nHowever, security is the main factor for companies as their data or processes should not be\ncompromised to a third party. It requires natural protection, so that competitors can not be\noverlooked by one’s own business activities.\nProtecting data and processes is a challenge for cloud providers because they must convince\ncompanies that through software and virtualization can establish isolated businesses in the cloud\nand is able to safely and reliably to implement a user management and access management that is\n100% in order.\nThat NNIT must grow in the market for cloud computing, the first step is – as NNIT currently have\nalready taken up – namely to work with the technological factor of safety. Next, it is to convince\nbusinesses or the world that NNIT has the safest cloud computing solution, through events or\nconferences, salespersons who visits to the companies or the businesses and present the cloud\nmessage and, importantly, periodically updates of its own website.
Cited by 0
Strandvall, Markus · Aaltodoc (Aalto University) · 2013
Cited by 0
Ørgaard jensen, Isabella · CBS Research Portal (Copenhagen Business School) · 2015
This thesis has the purpose of assessing how the audit process works for financial\ninstitutions using a Cloud Computing solution. An analysis of the management\nconsiderations in the application of Cloud Computing is also an important part of the\nthesis. The frames and legislation will be illuminated and analyzed as well.\nThe thesis is based on the COSO ERM framework as well as the audit objectives.\nTo assess the audit process with an auditor’s point of view, firstly an account of the\nframes within auditing and Cloud Computing is given. This includes the auditing\nstandards, the Danish Privacy Act, Accountancy Act and specific regulation for the\nfinancial institutions. Pros and cons of Cloud Computing will also be described with\nspecial attentions to the corresponding risks and opportunities.\nManagement considerations regarding Cloud Computing are analyzed, with focus on\nrisk analysis, disaster recovery, vendor contract and considerations about the audit. It is\nargued that management shouldn’t be afraid to approach Cloud Computing, but it is\nimportant to know the alternatives and what Cloud Computing is and isn’t. The vendor\ncontract is the foundation of a good Cloud solution and having a well-planned disaster\nrecovery and business continuity plan might save the organization.\nThe use of Cloud Computing in financial institutions in Denmark has stayed within a\nPrivate Shared Cloud within most banks. This has to do with the legislation and the\nbarriers it makes for the use of for example Public Cloud Computing. The Danish\nPrivacy Act and the Accountancy Act both collide with the use of cloud computing.\nThe thesis leads up to the analysis and assessment of the IT-audit process for financial\ninstitutions using Cloud Computing. This is a composition of theory, regulation and\nprovides an overview for the auditor as well as an understanding of the process for the\nmanagement.\nThe thread in this thesis is led by an ongoing auditor view in each chapter. To sum up\nthe overall analysis and thoughts throughout the thesis, recommendations are given to\nthe management and the auditors. Among other recommendations are that auditors\nshould audit the frames and regulation as well as the security in compliance with the\nstandards and frameworks for auditing.\nAuditors should also take the recommended management considerations into attention
Cited by 0
Andri Taufiq · OSF Preprints (OSF Preprints) · 2021
Cited by 0
Antonopoulos, Nick, Gillam, Lee · CERN Document Server (European Organization for Nuclear Research) · 2010
Cited by 0
Barceló Garcia, Miquel · RECERCAT (Consorci de Serveis Universitaris de Catalunya)
Cited by 0Open access
Greve, Silke · Econstor (Econstor) · 2016
Obwohl die cloudgestützte Verarbeitung von Beschäftigtendaten ansteigt, bildet sich diese Tatsache nicht in Betriebsvereinbarungen ab. Werden zwingende Mitbestimmungsrechte nicht oder zumindest noch nicht ausgeübt? Der Grund kann in der Unkenntnis darüber liegen, dass Anwendungen, die ehemals serverbasiert eingesetzt wurden, nun - von vielen Gremien unbemerkt - in Clouds überführt werden. Großteils sind die Namen der Anwendungen gleich geblieben und es ist nur aus den Namenszusätzen zu erkennen, dass sich wesentliche Details bei der Datenverarbeitung geändert haben. Zum anderen ist auch die steigende Komplexität der Systeme und der dahinterstehenden Clouds ein Grund, warum BR-Gremien bei der Bearbeitung der Materie kaum mehr genug Zeit zur Verfügung steht. Von wem, an welchen Standorten und von welchen Unternehmen werden die Daten der eigenen Beschäftigten verarbeitet? Die Verfolgung dieser Frage kann sich zur Sisyphusarbeit ausweiten, die erheblichen Sachverstand und viel Zeit in Anspruch nimmt.Daten in Clouds auszulagern kann effizient für das Unternehmen sein, muss aber von den Mitbestimmungsgremien auf die Rechtmäßigkeit hin überprüfbar bleiben. Daher sollten Betriebsräte hier keinesfalls auf den kontrollierenden Blick und die Ausübung ihrer Rechte verzichten.
Cited by 0
Assad ALL Fajar · OSF Preprints (OSF Preprints) · 2022
Cited by 0
Jonáš Bräuer · Digital Repository (National Repository of Grey Literature) · 2019
Bezpečnost a zachování důvěrnosti dat uložených s využitím veřejných cloudových služeb je dnes velmi aktuální téma. V této práci se, na rozdíl od tradičního šifrování, zabýváme možností využití dělení dat k zabezpečení citlivých dat. Cílem práce je implementovat a porovnat dva již publikované protokoly pro násobení matic využívající dva rozdílné přístupy dělení dat. Na základě jejich vlastností byla navržena originální varianta, která na rozdíl od původních protokolů zohledňuje i případ, kdy poskytovatelé cloudových slu- žeb tajně spolupracují. Všechny tyto protokoly byly naimplementovány za použití plat- formy Java a veřejných cloudových služeb. Na závěr byla změřena výkonnostní náročnost a zhodnoceny požadavky na úložiště.
Cited by 0
Chantepie, Gaël · HAL (Le Centre pour la Communication Scientifique Directe) · 2018
International audience
Cited by 0