Security issues related service delivery models of cloud computing

Cloud computing has been defined by NIST as amodel for enabling convenient, on-demand network access to ashared pool of configurable computing resources (e.g.,networks, servers, storage, applications, and services) that canbe rapidly provisioned and released with minimal managementeffort or cloud provider interaction [۲]. Interest in cloudcomputing has rapidly grown in recent years due to theadvantages of greater flexibility and availability of computingresources at lower cost. Security and privacy, however, are aconcern for agencies and organizations considering migratingapplications to public cloud computing environments, and formthe impetus behind this study. Security in the cloud is achieved,in part, through third party controls and assurance much like intraditional outsourcing arrangements. But since there is nocommon cloud computing security standard, there are additionalchallenges associated with this. Many cloud vendors implementtheir own proprietary standards and security technologies, andimplement differing security models, which need to be evaluatedon their own merits. This paper provides an overview of thesecurity challenges pertinent to public cloud computing andpoints out considerations organizations should take whenoutsourcing data, applications, and infrastructure to a publiccloud environment [۲]. During the review cloud securitychallenges, we try to classify these challenges according to thecloud service delivery models (SaaS, PaaS, and IaaS) in thispaper. In other words, this paper tries to tell each of the securityproblems faced by cloud service delivery models. Some solutionsto mitigate these challenges are also proposed along with eachchallenge.

کلیدواژه ها:

Cloud Computing ، Cloud Service DeliveryModels ، Cloud Service Delivery Models SecurityChallenges