英语论文网

Eucalyptus , OpenNebula and OpenStack are three main open source platforms in the cloud computing. Each of them provide variety of features and functionality, but their main focus is how to convert an existing pool of hardware resources to IaaS provider. Every one of them has a ordinary characteristic. The feature is that they are all compatible with Amazon EC2 interfaces. Platforms are not the only type of software which are developed in open source projects. As an example, Zenoss in an open source monitoring software which is compatible with the new concepts in the cloud computing model.

Security Challenges

Threat Specifications

Our two main interests in finding threats to cloud are:

'Providing a needed context to assist organizations in making educated risk management decisions regarding their cloud adoption strategies.'

Utilizing effective monitoring mechanisms and introducing new ones to fulfill requirements in the cloud environment.

Threat model in the cloud have a number of originality. First, in addition to data and software, activity patterns and business reputation should be protected. Moreover, a longer trust chain should be accepted. This is due to multiple service models (Software as a Service, Platform as a Service and Infrastructure as a Service) and possible combinations of them. Parties in this trust chain will need mutual audit-ability. Stakeholders demand for mutual audit-ability, in order to have assurance, to some degree, about the other parties. Another novelty is about availability issues in the cloud. We should always keep in mind that the same failure in the cloud computing will have more catastrophic effect than a failure in the traditional computing model.

It is noteworthy to keep in mind these novelties while analyzing threats in the new model. According to, top threats could be identified as follows:

Mistreatment and immoral application of Cloud Computing

Insecure Application Programming Interfaces

Spiteful enclosed

Shared Technology Vulnerabilities

Data Loss/Leakage

Account, Service & Traffic Hijacking

Unknown Risk Profile

Abuse and Nefarious Use of Cloud Computing, as a top threat to the cloud computing, is the one we will study here. Originally, offensive activities must be undoubtedly confirmed For instance, it should be defined from whose perspective a behavior is called abusive or nefarious. In order to achieve that, we may identify three stakeholders in the cloud computing model: cloud provider, cloud customer and end user. Relations between these stakeholders are complicated and this is one of the novelties of the cloud computing threat model. In fact, these relations have crucial effect in mitigating this threat.

As an illustration, cloud customers may abuse services which they are paying for; hosting a phishing website is an example of it. In this case, both the cloud provider and end users faced threats which are caused by this behavior. In addition, end users or clients of cloud customers can also misuse services which are provided for 本论文由英语论文网提供整理，提供论文代写，英语论文代写，代写论文，代写英语论文，代写留学生论文，代写英文论文，留学生论文代写相关核心关键词搜索。