英语论文网

them. It will cause troubles for both the cloud provider and cloud customers: for instance, hosting illegal data on a storage service that utilize IaaS as its infrastructure. Additionally, in both cases, communications between different stakeholders play a vital role in mitigating the threat. Moreover, it is clear that interests of stakeholders are not necessarily in the same direction. That's why, clashes could occur.

Different abuse cases can be itemized as follows:

Anonymous Communication using cloud services for nefarious purposes.

Running the Onion Routing (TOR) exit node.

Botnet activity

- Command and control hosting

- Bot hosting

Sending email spam or posting spam into forums

Hosting harmful or illegal content:

- Site advertised in spam

- Host for unlicensed copyright-protected material

- Phishing website

- Malware host

Attack source:

- Intrusion attempts

- Exploit attacks (SQL injections, remote file inclusions, etc)

- Credit card fraud

- Port scanning

Excessive web crawling

Open proxy

New Security Challenges

For an exhaustive list of vulnerabilities and risks to cloud computing, check European Network and Information Security Agency (ENISA) report on cloud computing risk assessment.

Cloud customers, who provide a service for end users, should assure their clients that their data is safe. Consequently, cloud customers must know about the cloud provider's staffs that have enough privileges to access cloud customers' data. Security monitoring mechanisms in the new model should provide functionality which help cloud customers to trust cloud providers staffs without revealing too much information about personnel.

Information position and incompatible law. This is a new challenge, because in previous computing models the location of service providers' storage was clear. Contrary, in the cloud model, storage and computing facilities are distributed over number of regions. Now imagine a country that has restricting laws which do not allow companies to store their data outside of the country borders. In this case, monitoring mechanisms should keep track of data location. Such mechanisms highly depend on cloud providers cooperation and common interfaces among providers and customers. Moreover, cloud customers may need to ensure data privacy for their clients. On the other hand, cloud providers must obey their government regulations in disclosing data for lawful interception. This is one of the conflicting points between cloud customers and cloud providers which are from different regions. As an illustration, one can refer to the conceptual conflicts between USA Patriot Act and PIPEDA (Personal Information Protection and Electronic Documents Act) in Canada or the Data Privacy Protection Directive in the EU. For a specific system, corresponding security monitoring approach must identify these conflicts and let the customer to decide on using a particular cloud service or not. Additionally, end users of cloud customer services must be informed about these details by means of security mechanisms in each layer i本论文由英语论文网提供整理，提供论文代写，英语论文代写，代写论文，代写英语论文，代写留学生论文，代写英文论文，留学生论文代写相关核心关键词搜索。