Journal:Multilevel classification of security concerns in cloud computing - Revision history

Shawndouglas: Converted ombox to template

2021-10-06T18:43:44Z

Converted ombox to template

← Older revision		Revision as of 18:43, 6 October 2021
Line 19:		Line 19:
	\|download = [http://ojphi.org/ojs/index.php/ojphi/article/download/6096/5181 http://ojphi.org/ojs/index.php/ojphi/article/download/6096/5181] (PDF)		\|download = [http://ojphi.org/ojs/index.php/ojphi/article/download/6096/5181 http://ojphi.org/ojs/index.php/ojphi/article/download/6096/5181] (PDF)
	}}		}}
	{{~~ombox~~
	~~\| type = content~~		{{Ombox math}}
	~~\| style =~~
	\| text = This article contains rendered mathematical formulae. You ''may'' require the [https://chrome.google.com/webstore/detail/tex-all-the-things/cbimabofgmfdkicghcadidpemeenbffn?hl=en TeX All the Things] plugin for Chrome or the [https://addons.mozilla.org/en-US/firefox/addon/native-mathml/ Native MathML] add-on and [https://developer.mozilla.org/en-US/docs/Mozilla/MathML_Project/Fonts fonts] for Firefox if they don't render properly for you.
	}}
	==Abstract==		==Abstract==
	Threats jeopardize some basic security requirements in a cloud. These threats generally constitute privacy breach, data leakage and unauthorized data access at different cloud layers. This paper presents a novel multilevel classification model of different security attacks across different cloud services at each layer. It also identifies attack types and risk levels associated with different cloud services at these layers. The risks are ranked as low, medium and high. The intensity of these risk levels depends upon the position of cloud layers. The attacks get more severe for lower layers where infrastructure and platform are involved. The intensity of these risk levels is also associated with security requirements of data encryption, multi-tenancy, data privacy, authentication and authorization for different cloud services. The multilevel classification model leads to the provision of dynamic security contract for each cloud layer that dynamically decides about security requirements for cloud consumer and provider.		Threats jeopardize some basic security requirements in a cloud. These threats generally constitute privacy breach, data leakage and unauthorized data access at different cloud layers. This paper presents a novel multilevel classification model of different security attacks across different cloud services at each layer. It also identifies attack types and risk levels associated with different cloud services at these layers. The risks are ranked as low, medium and high. The intensity of these risk levels depends upon the position of cloud layers. The attacks get more severe for lower layers where infrastructure and platform are involved. The intensity of these risk levels is also associated with security requirements of data encryption, multi-tenancy, data privacy, authentication and authorization for different cloud services. The multilevel classification model leads to the provision of dynamic security contract for each cloud layer that dynamically decides about security requirements for cloud consumer and provider.

Shawndouglas: /* Notes */ Added cat

2019-10-14T18:51:52Z

Notes: Added cat

← Older revision		Revision as of 18:51, 14 October 2019
Line 421:		Line 421:
	[[Category:LIMSwiki journal articles (with rendered math)]]		[[Category:LIMSwiki journal articles (with rendered math)]]
	[[Category:LIMSwiki journal articles on informatics‎‎]]		[[Category:LIMSwiki journal articles on informatics‎‎]]
			[[Category:LIMSwiki journal articles on privacy]]

Shawndouglas: Updated math message and added new cat (also updated volume, issue, page)

2019-02-12T22:32:39Z

Updated math message and added new cat (also updated volume, issue, page)

← Older revision		Revision as of 22:32, 12 February 2019
Line 11:		Line 11:
	\|editors =		\|editors =
	\|pub_year = 2016		\|pub_year = 2016
	\|vol_iss = '''~~TBD~~'''(~~TBD) (In Press~~)		\|vol_iss = '''13'''(1)
	\|pages = ~~TBD (In Press)~~		\|pages = 57–65
	\|doi = [http://dx.doi.org/10.1016/j.aci.2016.03.001 10.1016/j.aci.2016.03.001]		\|doi = [http://dx.doi.org/10.1016/j.aci.2016.03.001 10.1016/j.aci.2016.03.001]
	\|issn = 2210-8327		\|issn = 2210-8327
Line 22:		Line 22:
	\| type = content		\| type = content
	\| style =		\| style =
	\| text = This article contains rendered mathematical formulae. You ''may'' require the [https://chrome.google.com/webstore/detail/~~math~~-~~anywhere~~/~~gebhifiddmaaeecbaiemfpejghjdjmhc Math Anywhere~~] plugin for Chrome or the [https://addons.mozilla.org/en-US/firefox/addon/native-mathml/ Native MathML] add-on and [https://developer.mozilla.org/en-US/docs/Mozilla/MathML_Project/Fonts fonts] for Firefox if they don't render properly for you.		\| text = This article contains rendered mathematical formulae. You ''may'' require the [https://chrome.google.com/webstore/detail/tex-all-the-things/cbimabofgmfdkicghcadidpemeenbffn?hl=en TeX All the Things] plugin for Chrome or the [https://addons.mozilla.org/en-US/firefox/addon/native-mathml/ Native MathML] add-on and [https://developer.mozilla.org/en-US/docs/Mozilla/MathML_Project/Fonts fonts] for Firefox if they don't render properly for you.
	}}		}}
	==Abstract==		==Abstract==
Line 419:		Line 419:
	[[Category:LIMSwiki journal articles (added in 2016)‎]]		[[Category:LIMSwiki journal articles (added in 2016)‎]]
	[[Category:LIMSwiki journal articles (all)‎]]		[[Category:LIMSwiki journal articles (all)‎]]
			[[Category:LIMSwiki journal articles (with rendered math)]]
	[[Category:LIMSwiki journal articles on informatics‎‎]]		[[Category:LIMSwiki journal articles on informatics‎‎]]

Shawndouglas: /* 3.2.5. Service Level Agreement (SLA) */ Table title

2018-02-06T20:34:35Z

3.2.5. Service Level Agreement (SLA): Table title

← Older revision		Revision as of 20:34, 6 February 2018
Line 207:		Line 207:
	{\| class="wikitable" border="1" cellpadding="5" cellspacing="0" width="60%"		{\| class="wikitable" border="1" cellpadding="5" cellspacing="0" width="60%"
	\|-		\|-
	\| style="background-color:white; padding-left:10px; padding-right:10px;" colspan="6"\|Table 1. A mapping of cloud service and security requirements.		\| style="background-color:white; padding-left:10px; padding-right:10px;" colspan="6"\|Table 2. A mapping of cloud service and security requirements.
	\|-		\|-
	! style="background-color:#dddddd; padding-left:10px; padding-right:10px;"\|		! style="background-color:#dddddd; padding-left:10px; padding-right:10px;"\|

Shawndouglas: Testing math issue

2017-01-30T22:55:50Z

Testing math issue

← Older revision		Revision as of 22:55, 30 January 2017
Line 414:		Line 414:
	This version is faithful to the original, with only a few minor changes to presentation and nothing more, per the "No Derivatives" portion of the original license. However, this means the presentation is not optimal; it contains its original grammar mistakes and original citation method, which fails to reference author names in a traditional manner. (It uses "Authors in [11] consider" instead of "Hussain and Abdulsalam [11] consider", for example.)		This version is faithful to the original, with only a few minor changes to presentation and nothing more, per the "No Derivatives" portion of the original license. However, this means the presentation is not optimal; it contains its original grammar mistakes and original citation method, which fails to reference author names in a traditional manner. (It uses "Authors in [11] consider" instead of "Hussain and Abdulsalam [11] consider", for example.)

	However, one unavoidable change comes from the ordering of citations. Unfortunately the original puts citations 14–16 before citation 13 and citation 21 before citations 17–20 for some reason. Because the MediaWiki software automatically puts citations in order of appearance, we can not avoid the differing of citation numbers. (13 is 14 in the original; 14 is 15; 15 is 16; 16 is 13, 17 is 21, 18 is 17, 19 is 18, 20 is 19, and 21 is 20.) We apologize in advance for this unavoidable change.		However, one unavoidable change comes from the ordering of citations. Unfortunately the original puts citations 14–16 before citation 13 and citation 21 before citations 17–20 for some reason. Because the MediaWiki software automatically puts citations in order of appearance, we can not avoid the differing of citation numbers. (13 is 14 in the original; 14 is 15; 15 is 16; 16 is 13, 17 is 21, 18 is 17, 19 is 18, 20 is 19, and 21 is 20.) We apologize in advance for this unavoidable change to the original.

	<!--Place all category tags here-->		<!--Place all category tags here-->

Shawndouglas: /* 3. A multilevel classification of security concerns in cloud computing */ Fixed section title.

2016-08-01T20:22:13Z

3. A multilevel classification of security concerns in cloud computing: Fixed section title.

← Older revision		Revision as of 20:22, 1 August 2016
Line 94:		Line 94:
	Utility computing is the concept that emerged from grid computing, and it combines computation, storage and bandwidth to provide services on the demand through payment by the customer. It also provides two basic advantages of cost reduction and scalability. Security risk associated with utility computing is access by attackers who want to utilize resources without paying.<ref name="AroraCloud12" /> Majority of hackers and crackers use the computing power or storage for the illegal use. The common use of public cloud includes e-commerce, web-application and Web site hosting making these services vulnerable to variety of attacks on possession, authenticity, integrity and utility. A compromised client may perform a Fraudulent Resource Consumption (FRC) attack by using the metered bandwidth of web-based service that results in a financial burden on the cloud consumer.<ref name="IdziorekExpl11">{{cite journal \|title=Exploiting Cloud Utility Models for Profit and Ruin \|journal=2011 IEEE International Conference on Cloud Computing (CLOUD) \|author=Idziorek, J. \|pages=33–40 \|doi=10.1109/CLOUD.2011.45}}</ref>		Utility computing is the concept that emerged from grid computing, and it combines computation, storage and bandwidth to provide services on the demand through payment by the customer. It also provides two basic advantages of cost reduction and scalability. Security risk associated with utility computing is access by attackers who want to utilize resources without paying.<ref name="AroraCloud12" /> Majority of hackers and crackers use the computing power or storage for the illegal use. The common use of public cloud includes e-commerce, web-application and Web site hosting making these services vulnerable to variety of attacks on possession, authenticity, integrity and utility. A compromised client may perform a Fraudulent Resource Consumption (FRC) attack by using the metered bandwidth of web-based service that results in a financial burden on the cloud consumer.<ref name="IdziorekExpl11">{{cite journal \|title=Exploiting Cloud Utility Models for Profit and Ruin \|journal=2011 IEEE International Conference on Cloud Computing (CLOUD) \|author=Idziorek, J. \|pages=33–40 \|doi=10.1109/CLOUD.2011.45}}</ref>

	====3.2.5. Service Level Agreement (SLA)===		====3.2.5. Service Level Agreement (SLA)====
	SLA is an optimal way for ensuring security and trust. The implementation of SLA results in a well-designed contract of responsibilities between parties that can enhance security level. In cloud environment, SLA can be combined with the web service level agreement (WSLA) for mitigating security risks.<ref name="AroraCloud12" /> SLA defines the different levels of security and their complexity based on the services for the better understanding of the security policies to a cloud consumer. The existing cloud storage systems do not provide security guarantees in their SLAs effecting the adaptation of cloud services. A cloud storage service may leak private data, return inconsistent data or modify the data due to bugs, hacking, crashes, or misconfigurations. This security concerns require proper SLA guarantee models such as CloudProof.<ref name="PopaEnab11">{{cite journal \|title=Enabling security in cloud storage SLAs with CloudProof \|journal=USENIXATC'11: Proceedings of the 2011 USENIX Conference on USENIX Annual Technical Conference \|author=Popa, R.A.; Lorch, J.R.; Molnar, D. et al. \|pages=31–31 \|year=2011}}</ref>		SLA is an optimal way for ensuring security and trust. The implementation of SLA results in a well-designed contract of responsibilities between parties that can enhance security level. In cloud environment, SLA can be combined with the web service level agreement (WSLA) for mitigating security risks.<ref name="AroraCloud12" /> SLA defines the different levels of security and their complexity based on the services for the better understanding of the security policies to a cloud consumer. The existing cloud storage systems do not provide security guarantees in their SLAs effecting the adaptation of cloud services. A cloud storage service may leak private data, return inconsistent data or modify the data due to bugs, hacking, crashes, or misconfigurations. This security concerns require proper SLA guarantee models such as CloudProof.<ref name="PopaEnab11">{{cite journal \|title=Enabling security in cloud storage SLAs with CloudProof \|journal=USENIXATC'11: Proceedings of the 2011 USENIX Conference on USENIX Annual Technical Conference \|author=Popa, R.A.; Lorch, J.R.; Molnar, D. et al. \|pages=31–31 \|year=2011}}</ref>

Shawndouglas: Added math message box

2016-07-19T20:20:20Z

Added math message box

← Older revision		Revision as of 20:20, 19 July 2016
Line 19:		Line 19:
	\|download = [http://ojphi.org/ojs/index.php/ojphi/article/download/6096/5181 http://ojphi.org/ojs/index.php/ojphi/article/download/6096/5181] (PDF)		\|download = [http://ojphi.org/ojs/index.php/ojphi/article/download/6096/5181 http://ojphi.org/ojs/index.php/ojphi/article/download/6096/5181] (PDF)
	}}		}}
			{{ombox
			\| type = content
			\| style =
			\| text = This article contains rendered mathematical formulae. You ''may'' require the [https://chrome.google.com/webstore/detail/math-anywhere/gebhifiddmaaeecbaiemfpejghjdjmhc Math Anywhere] plugin for Chrome or the [https://addons.mozilla.org/en-US/firefox/addon/native-mathml/ Native MathML] add-on and [https://developer.mozilla.org/en-US/docs/Mozilla/MathML_Project/Fonts fonts] for Firefox if they don't render properly for you.
			}}
	==Abstract==		==Abstract==
	Threats jeopardize some basic security requirements in a cloud. These threats generally constitute privacy breach, data leakage and unauthorized data access at different cloud layers. This paper presents a novel multilevel classification model of different security attacks across different cloud services at each layer. It also identifies attack types and risk levels associated with different cloud services at these layers. The risks are ranked as low, medium and high. The intensity of these risk levels depends upon the position of cloud layers. The attacks get more severe for lower layers where infrastructure and platform are involved. The intensity of these risk levels is also associated with security requirements of data encryption, multi-tenancy, data privacy, authentication and authorization for different cloud services. The multilevel classification model leads to the provision of dynamic security contract for each cloud layer that dynamically decides about security requirements for cloud consumer and provider.		Threats jeopardize some basic security requirements in a cloud. These threats generally constitute privacy breach, data leakage and unauthorized data access at different cloud layers. This paper presents a novel multilevel classification model of different security attacks across different cloud services at each layer. It also identifies attack types and risk levels associated with different cloud services at these layers. The risks are ranked as low, medium and high. The intensity of these risk levels depends upon the position of cloud layers. The attacks get more severe for lower layers where infrastructure and platform are involved. The intensity of these risk levels is also associated with security requirements of data encryption, multi-tenancy, data privacy, authentication and authorization for different cloud services. The multilevel classification model leads to the provision of dynamic security contract for each cloud layer that dynamically decides about security requirements for cloud consumer and provider.

Shawndouglas: Added rest of content.

2016-07-19T20:15:26Z

Added rest of content.

Show changes

Shawndouglas: Added more content. Saving and adding more.

2016-07-19T16:58:03Z

Added more content. Saving and adding more.

Show changes

Shawndouglas: Added ref section

2016-07-18T23:08:56Z

Added ref section

← Older revision		Revision as of 23:08, 18 July 2016
Line 35:		Line 35:

	In the literature, there are different classifications of cloud security attacks<ref name="BhadauriaSurv12">{{cite journal \|title=Survey on Security Issues in Cloud Computing and Associated Mitigation Techniques \|journal=International Journal of Computer Applications \|author=Bhadauria, R.; Sanyal, S. \|volume=47 \|issue=18 \|pages=47–66 \|year=2012 \|doi=10.5120/7292-0578}}</ref><ref name="YeoSec13">{{cite book \|chapter=Security Considerations in Cloud Computing Virtualization Environment \|title=Grid and Pervasive Computing \|author=Yeo, S.-S.; Park, J.H. \|publisher=Springer Berlin Heidelberg \|pages=208-215 \|year=2013 \|doi=10.1007/978-3-642-38027-3_22 \|isbn=9783642380273}}</ref><ref name="YuCloud12">{{cite journal \|title=Cloud computing and security challenges \|journal=ACM-SE '12: Proceedings of the 50th Annual Southeast Regional Conference \|author=Yu, H.; Powell, N.; Stembridge, D.; Yuan, X. \|pages=298-302 \|year=2012 \|doi=10.1145/2184512.2184581}}</ref><ref name="HeiserAssess08">{{cite web \|url=http://www.globalcloudbusiness.com/SharedFiles/Download.aspx?pageid=138&mid=220&fileid=12 \|format=PDF \|title=Assessing the Security Risks of Cloud Computing \|author=Heiser, J.; Nicolett, M. \|publisher=Gartner, Inc \|pages=6 \|date=03 June 2008}}</ref><ref name="GranceGuide11">{{cite book \|title=Guidelines on Security and Privacy in Public Cloud Computing \|author=Grance, T.; Jansen, W. \|publisher=National Institute of Standards and Technology \|pages=80 \|year=2011 \|doi=http://dx.doi.org/10.6028/NIST.SP.800-144}}</ref><ref name="MatherCloud09">{{cite book \|title=Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance \|author=Mather, T.; Kumaraswamy, S.; Latif, S. \|publisher=O'Reilly Media \|pages=338 \|year=2009 \|url=https://books.google.com/books?id=BHazecOuDLYC \|isbn=9780596802769}}</ref> targeting a specific cloud service or a particular kind of the cloud system. Thus there is a need for a more comprehensive classification of security attacks across versatile cloud services at each layer. This paper proposes a multilevel classification of security attacks for different cloud services and their associated risks at cloud layers. It also discusses provision of dynamic security contract for each cloud layer that dynamically decides about security requirements for cloud consumer and provider.		In the literature, there are different classifications of cloud security attacks<ref name="BhadauriaSurv12">{{cite journal \|title=Survey on Security Issues in Cloud Computing and Associated Mitigation Techniques \|journal=International Journal of Computer Applications \|author=Bhadauria, R.; Sanyal, S. \|volume=47 \|issue=18 \|pages=47–66 \|year=2012 \|doi=10.5120/7292-0578}}</ref><ref name="YeoSec13">{{cite book \|chapter=Security Considerations in Cloud Computing Virtualization Environment \|title=Grid and Pervasive Computing \|author=Yeo, S.-S.; Park, J.H. \|publisher=Springer Berlin Heidelberg \|pages=208-215 \|year=2013 \|doi=10.1007/978-3-642-38027-3_22 \|isbn=9783642380273}}</ref><ref name="YuCloud12">{{cite journal \|title=Cloud computing and security challenges \|journal=ACM-SE '12: Proceedings of the 50th Annual Southeast Regional Conference \|author=Yu, H.; Powell, N.; Stembridge, D.; Yuan, X. \|pages=298-302 \|year=2012 \|doi=10.1145/2184512.2184581}}</ref><ref name="HeiserAssess08">{{cite web \|url=http://www.globalcloudbusiness.com/SharedFiles/Download.aspx?pageid=138&mid=220&fileid=12 \|format=PDF \|title=Assessing the Security Risks of Cloud Computing \|author=Heiser, J.; Nicolett, M. \|publisher=Gartner, Inc \|pages=6 \|date=03 June 2008}}</ref><ref name="GranceGuide11">{{cite book \|title=Guidelines on Security and Privacy in Public Cloud Computing \|author=Grance, T.; Jansen, W. \|publisher=National Institute of Standards and Technology \|pages=80 \|year=2011 \|doi=http://dx.doi.org/10.6028/NIST.SP.800-144}}</ref><ref name="MatherCloud09">{{cite book \|title=Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance \|author=Mather, T.; Kumaraswamy, S.; Latif, S. \|publisher=O'Reilly Media \|pages=338 \|year=2009 \|url=https://books.google.com/books?id=BHazecOuDLYC \|isbn=9780596802769}}</ref> targeting a specific cloud service or a particular kind of the cloud system. Thus there is a need for a more comprehensive classification of security attacks across versatile cloud services at each layer. This paper proposes a multilevel classification of security attacks for different cloud services and their associated risks at cloud layers. It also discusses provision of dynamic security contract for each cloud layer that dynamically decides about security requirements for cloud consumer and provider.

			==References==
			{{Reflist\|colwidth=30em}}

	==Notes==		==Notes==