On Technical Security Issues in Cloud Computing
Authors:
- Meiko JensenMJMeiko Jensen
- Jörg SchwenkJSJörg Schwenk
- Nils GruschkaNGNils Gruschka
- Luigi Lo IaconoLILuigi Lo Iacono
Top Cited Papers
- 1 January 2009
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- No. 21596182,p. 109-116
Abstract
The Cloud Computing concept offers dynamically scalable resources provisioned as a service over the Internet. Economic benefits are the main driver for the Cloud, since it promises the reduction of capital expenditure (CapEx) and operational expenditure (OpEx). In order for this to become reality, however, there are still some challenges to be solved. Amongst these are security and trust issues, since the user's data has to be released to the Cloud and thus leaves the protection-sphere of the data owner. Most of the discussions on this topics are mainly driven by arguments related to organizational means. This paper focuses on technical security issues arising from the usage of Cloud services and especially by the underlying technologies used to build these cross-domain Internet-connected collaborations.Keywords
This publication has 10 references indexed in Scilit:
- Vulnerable Cloud: SOAP Message Security Validation Revisited2009
- A survey of attacks on web servicesComputer Science - Research and Development, 2009
- The Accountability Problem of Flooding Attacks in Service-Oriented Architectures2009
- The Impact of Flooding Attacks on Network-based Services2008
- A Browser-Based Kerberos Authentication Scheme2008
- Breaking and fixing the inline approach2007
- Towards secure SOAP message exchange in a SOA2006
- Why phishing works2006
- Security analysis of the SAML single sign-on browser/artifact profile2004
- Risks of the Passport single signon protocolComputer Networks, 2000