Analysing Threats in Cloud Storage

被引:0
作者
Yahya, Fara [1 ]
Walters, Robert J. [1 ]
Wills, Gary B. [1 ]
机构
[1] Univ Southampton, Elect & Comp Sci, Southampton, Hants, England
来源
2015 WORLD CONGRESS ON INTERNET SECURITY (WORLDCIS) | 2015年
关键词
component; Availability; Authenticity; Confidentiality; Integrity; Non-repudiation; Reliability;
D O I
暂无
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Cloud storage is becoming an option for users in keeping their data online, but it comes with the security threats and challenges of protecting their data from threats. Many security frameworks have been suggested by existing studies, governing bodies, industry standards etc. as guidelines to be implemented by cloud service providers (CSPs) but the complete set of controls cannot be fully implemented due to several challenges such as decreasing availability, less user convenience, need of a robust infrastructure etc. Therefore, there is a need to investigate the security requirements and threats which will enable efficient security protection to protect data in cloud storage. This paper will discuss security requirements and analyses existing cloud security threats. The threats will be modelled in a cloud storage scenario. Future work will involve confirming the security framework using a triangulation method. This will involve confirming the idea with experts and simulations of the designated security requirements on cloud storage that will be used to test the framework.
引用
收藏
页码:44 / 48
页数:5
相关论文
共 19 条
[1]  
[Anonymous], 2011, 6 INT C INT TECHN SE
[2]  
[Anonymous], 2004, Threat modeling
[3]  
[Anonymous], 2013, CLOUD COMP VULN INC
[4]  
[Anonymous], 2009, Cloud security and privacy: An Enterprise Perspective on Risks and Compliance (Theory in Practice)
[5]  
Brock M., 2010, FRAMEWORK CLOUD SECU, P254
[6]  
Brumley D., 1999, INTRUSION DETECTION, P1999
[7]  
CSA, 2013, NOT 9 CLOUD COMP TOP
[8]  
CSA, 2013, CLOUD CONTR MATR V3
[9]  
Firesmith D., 2004, J OBJECT TECHNOLOGY, V3, P61, DOI DOI 10.5381/JOT.2004.3.1.C6
[10]  
Gruschka N., 2010, 2010 IEEE 3rd International Conference on Cloud Computing (CLOUD 2010), P276, DOI 10.1109/CLOUD.2010.23