Security and Privacy in Cloud Computing

被引：304

作者：

Xiao, Zhifeng ^{[1
]}

Xiao, Yang ^{[1
]}

机构：

[1] Univ Alabama, Dept Comp Sci, Tuscaloosa, AL 35487 USA

来源：

IEEE COMMUNICATIONS SURVEYS AND TUTORIALS | 2013年 / 15卷 / 02期

基金：

美国国家科学基金会;

关键词：

cloud computing; security; privacy; trust; confidentiality; integrity; accountability; availability; ACCOUNTABILITY; PERFORMANCE; ISSUES;

D O I：

10.1109/SURV.2012.060912.00182

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

Recent advances have given rise to the popularity and success of cloud computing. However, when outsourcing the data and business application to a third party causes the security and privacy issues to become a critical concern. Throughout the study at hand, the authors obtain a common goal to provide a comprehensive review of the existing security and privacy issues in cloud environments. We have identified five most representative security and privacy attributes (i.e., confidentiality, integrity, availability, accountability, and privacy-preservability). Beginning with these attributes, we present the relationships among them, the vulnerabilities that may be exploited by attackers, the threat models, as well as existing defense strategies in a cloud scenario. Future research directions are previously determined for each attribute.

引用

页码：843 / 859

页数：17