Cloud Computing Security: Threats & Solutions

This assignment examines the critical security challenges associated with cloud computing environments. It investigates various threats, such as data breaches, unauthorized access, and denial-of-service attacks, that can compromise cloud systems. Furthermore, it explores essential security solutions and best practices to mitigate these risks, encompassing encryption techniques, access control mechanisms, and intrusion detection systems. The assignment aims to provide a comprehensive understanding of the complexities surrounding cloud security and highlight strategies for ensuring data protection and system integrity.

Running head: CLOUD COMPUTING
Cloud Computing
Name of the Student
Name of the University
Author’s Note

1
CLOUD COMPUTING
Abstract
SaaS model is delivering of web-based applications over internet. The software is being
hosted at the service provider’s site and all the maintenance work is become responsibility of
the providers. The paper is focused on analyzing the confidentiality issues of SaaS model of
the cloud computing into the small businesses. Mainly, this particular paper analyzes the
Software as a Service (SaaS) paradigm and highlighted its confidentiality issues. SaaS is a
cloud model, which is offered into the public, private and hybrid network. Cloud computing
paradigm has both negative and positive effects into the security of the customer’s data. The
services providers are hesitant to combine of the business with SaaS due to its confidentiality
issues while are attracted to their benefits. This paper analyzes the challenges of SaaS across
security of data, security of application as well as deployment security of SaaS. It investigates
significant changes to reporting of confidentiality data issues and finds factors, which
compromise data security over the small business.
Keywords: SaaS model, confidentiality issues, web-based applications, security of data.

2
CLOUD COMPUTING
Table of Contents
Chapter 1: Introduction..............................................................................................................4
1.1 Background.......................................................................................................................4
1.2 Description of Problem.....................................................................................................4
1.3 Scope of the research........................................................................................................6
1.4 Research Objectives.........................................................................................................6
1.5 Research Questions..........................................................................................................6
1.6 Research methodology.....................................................................................................7
1.7 Report Structure................................................................................................................7
Chapter 2: Literature Review.....................................................................................................9
2.1 Introduction......................................................................................................................9
2.2 Security and Information security....................................................................................9
2.3 Concept of Software-as-a-Service (SaaS) Cloud Computing........................................10
2.4 Legal and governmental data confidentiality issues of SaaS model of Cloud computing
in small business...................................................................................................................11
2.5 Data security issues in the SaaS model of cloud computing in the small business........12
2.6 Security Solutions...........................................................................................................15
2.7 Limitation of the review.................................................................................................18
Chapter 3: Research Contribution............................................................................................20
Chapter 4: Summary................................................................................................................31
4.1 Summary.........................................................................................................................31

3
CLOUD COMPUTING
4.2 Future Works..................................................................................................................32
References................................................................................................................................33

4
CLOUD COMPUTING
Chapter 1: Introduction
1.1 Background
Cloud computing has been in-demand technology by many organization in the market in
the recent years. Cloud Computing has attracted many business organization to avail cloud
services in their business. It is provided various services to the business organization
including low-cost implementation, easy setup and scalability. Adoption of SaaS applications
allowed the business to save the cost of information technology. The SaaS model has no such
physical requirements for indirect allocation since it is not actually distributed and organized
instantly(Almorsy, M; Grundy, J; Muller, I, 2016).The security of the data and information
has been enhanced with the implementation of the cloud computing in the business
organization. Adoption of the SaaS model introduces some confidentiality issues related to
implementation of cloud services. SaaS solutions store the data of the small business such as
documents, billing data, contracts and others on the remote server (Hashizume, Rosado,
Fernández-Medina, & Fernandez, 2013). One of the most important concerns is to protect the
data confidentiality contained into the documents. The data of the business are replaced and
developed by various applications as well as services. The small business company verifies
the confidentiality properties assessing exchanges among workstations and SaaS services to
check if data is protected regarding SSL.
1.2 Description of Problem
The cloud computing and Software-as-a-Service (SaaS) has attracted many small
businesses. There have been many advantages of the SaaS in the small business enterprises.
On the other hand, there have been security issues prevailing in the SaaS model. The
deployment of the cloud services has able to provide various services to the business
organization in the market. The use of the cloud computing has some limitation including the

5
CLOUD COMPUTING
threats and risk of the data and information of organization (Burton, 2013). The cloud
computing has able to provide flexibility and on-demand services to the business organization
in the market; therefore, it has created a need in the market for the small enterprises. The
security problems are become critical into cloud computing as new dimensions are entered
into problem scope focused on architecture of SaaS model, layers and elasticity.
Figure 1: Number of Incidents
(Source: Cyber security Strategy, 2017)
This research has depicted the security issues in the SaaS model of cloud computing
in the small businesses. The challenges in the implementation of the SaaS model have been
identified in the research. The main problem is the security of the data and information
including data confidentiality issue, data availability issue, data integrity issue and data
locality of small and medium enterprises in the market (Puthal, Sahoo, Mishra, & Swain,
2015). This research focuses on providing the solution to the data and information security
issues including auditing process, RAID and security policies in the SaaS model of cloud

6
CLOUD COMPUTING
computing in small businesses. The security of the data and information has been minimized
with the results and outcomes of the research.
1.3Scope of the research
The scope of the research is to focus on the confidentiality issues in the SaaS model of
cloud computing environment in small business, individual and government agency. It also
mitigates the challenges including data confidentiality issue, data availability issue, data
integrity issue and data locality and faced by the small enterprises. The research also analyzes
the data confidentiality factors which compromises with security of SaaS services into the
cloud computing.
1.4Research Objectives
The security threats have been prevailing in the business organization. The aim of the
research is to identify and mitigate security issues in SaaS model of cloud computing
environment in small enterprises. The objectives of the research have been discussed below:
 To investigate if there is a significant change to the reporting of confidentiality data
issues since the introduction of SaaS computing technology
 To discover and find the factors which compromise the data security of small
businesses with respect to confidentiality of data while using the SaaS services of
cloud computing
1.5 Research Questions
Following are the research questions:
1. Has there been a change in the type of confidentiality security issues?
2. What are the confidentiality issues among business, individual and government
agency when using SaaS services of cloud computing technology in the small
businesses?

7
CLOUD COMPUTING
3. Which of the identified data confidentiality factors compromises the security of SaaS
services in cloud computing, are reported to have a significant impact on small
businesses?
1.6Research methodology
The research has used Metadata methodology and data is collected from literature
review including online journals and articles. Metadata is such a data which provides
information from other data. There are three types of metadata: descriptive, structural and
administrative. In this particular research, descriptive metadata is used for studying the
confidentiality issues ofSaaS model of the cloud-computing environment in the small
businesses. This type of metadata described the resources for purpose like discovery and
observation. It takes information from the peer reviewed journal article’s abstract and
keywords. Each of the service providers tune metadata of the application to offer with
customized observation. Metadata management is the basis of the security platform. The
information is achieved by the users with wide range of configurations and features which are
stored into the form of metadata.
1.7Report Structure
This report comprises of four chapters including Introduction, Literature review,
Research Contribution, and Summary. The first chapter deals with the introduction of the
research topic. It comprises of Background, scope, Research objectives, methodology and
report structure. The research topic has been clearly described in the background of the
research. The research aim, objectives and questions are mentioned in the first chapter. The
overview of the research methodology has been provided in the chapter.
The second chapter is Literature review. This chapter critically discusses the concept
of the research topic and SaaS model in Cloud Computing environment. The impact of the

8
CLOUD COMPUTING
security threats in the SaaS model of cloud computing environment has been identified in the
chapter. There are various factors that are affecting the Small businesses are discussed in
literature review. Different theories and models are discussed in the chapter related to the
cloud computing. A proper narrative literature review of the research topic has been provided
in the chapter.
The third chapter deals with the research contribution. A proper analysis of the
literature review has been discussed in this chapter the collection of data and information has
been done in this chapter. The chapter discusses the various sources of the data collection and
its analysis. The analysis of the literature review is done for fulfilling the goal and objectives
of the research. The research has been successfully fulfilled with the help of proper analysis.
The last chapter is the summary of the research. This chapter provides the summary of all the
findings and analysis that has been done in the research. A proper conclusion if the research
has been provided with detailed information. The objectives of the research have been
successfully satisfied that depicts successful completion of the study.

9
CLOUD COMPUTING
Chapter 2: Literature Review
2.1 Introduction
SaaS is a component into the architecture of cloud computing. The application is
offered directly by the service provider that bundles of SaaS offerings from unified
application program. SaaS models create an efficient software delivery mechanism for the IT
departments to deploy and support of applications for managing services that SaaS
application provides.Confidentiality is defined as prevention from the unauthorized
disclosure of the data and information.The confidentiality areas into the cloud computing
includes of intellectual property rights, encryption as well as interference.There are various
theories and models of the cloud computing has been explained in this chapter. The use of the
cloud computing in the business organization is to be depicted in this chapter. The literature
review of the research topic provides clear and concise information about the research topic.
2.2 Security and Information privacy
The security of the information and data is an important element in the business
organization. The data security over the internet has been a critical element in the world.
Different business organization is suffering from the risk in a security of the data and
information over the internet. Guaranteeing the classification, respectability and accessibility,
otherwise called the CIA triangle, has been viewed as the business standard for a long while
now (Abbas, Farooq, & Afghan, 2015).
While these attributes stay of most extreme significance, the fast improvement
encompassing the IT segment implies this definition must be extended keeping in mind end
goal to epitomize the new security circumstance. (Singh & Chatterjee, 2017)reported that
data and correspondence innovation (ICT) can seemingly be viewed as subcomponent of data
security since data security incorporates insurance of hidden assets.

10
CLOUD COMPUTING
2.3 Concept of Software-as-a-Service (SaaS) Cloud Computing
Different companies are not able to afford costly software that is available in the
market. Therefore, they are not able to use attest technology in the market. The cloud
computing has helped in availing this costly software on a rent. This allows Small businesses
to afford this software and grows in the market (Shahzad & Hussain, 2013). The conventional
model of software appropriation, in which software is bought for and introduced on PCs, is in
some cases alluded to as Software-as-a-Product. Software-as-a-Service is a software
appropriation demonstrate in which applications are facilitated by a merchant or, on the other
hand specialist co-op and influenced accessible to clients over a system, ordinarily Internet
(Burns, Posey, Courtney, Roberts, & Nanayakkara, 2017). SaaS is turning into an undeniably
predominant conveyance demonstrate as fundamental innovations, that help web
administrations, benefit arranged design (SOA) develop and new formative methodologies
end up noticeably well known (Lin & Liao, 2017).
SaaS is frequently connected with a compensation subscription-licensing model.
Meanwhile, a broadband benefit has turned out to be progressively accessible to help client
access from more ranges everywhere. The cloud computing is a model that helps in enabling
ubiquitous and on-demand network access for a pool of computing resources. This also helps
in providing fast and efficient services with minimal managing effort and service provider
interaction. As commented by (Rittinghouse & Ransome, 2016), cloud computing was able to
provide different advantages to the business organization and other customers in the market.
The use of the cloud computing has minimized the service effort in the market. The cloud
computing provides efficiency and flexibility to the computing resources. It aimed at
providing maximum services at minimal cost (Burton, 2013) .
.

11
CLOUD COMPUTING
On the other hand, (Albaroodi, Manickam, & Singh, 2014) argued that there are
various security challenges of the SaaS model. Data of the customers are important assets for
the users, which are required to keep secure. SaaS consumers are not aware of keeping strong
access system to prevent any unauthorized access. The transmission channel among the
service provider as well as users is not consideredsecure. Some of the service providers are
used of SSL during their login session. Proper data backup are taken to minimize impact of
any security challenges.
2.4Legal and governmental data confidentiality issues of SaaS model of Cloud
computing in small business
Government has legal authority for the organization to turn their own technology
against the customers in the market. There needs to be no disruption in use of the SaaS model
in the company. Some of the relevant cyber laws have been working for protecting the
information of the small business organization in the market. The expectation of the
confidentiality of the data and information of the small business organization has been an
important part of the laws. The legal consideration of the data confidentiality has been prior
to the internet users of small businesses. The data and information of the government have
been breached from the companies. Cybersecurity is a risk that should be mainstreamed for
business. Technical specialists need to speak to business leaders in ways that can be
understood attacks (Ramachandra, Iftikhar, & Khan, 2017). Governments need to think how
they can mobilize their societies; how they can orient them to take collective action to protect
themselves. It requires sustained senior-level political attention. In addition, it is the same for
companies it requires the attention of the c-suite.
The Government needs to build up a National Cyber security Centre inside the
Government Communications security Bureau (Cyber security Strategy, 2017).The National
Cyber security Centre will expand on existing digital security and data affirmation abilities to

12
CLOUD COMPUTING
give improved insurance of government frameworks and data against cutting edge and
persevering dangers. This attack is conceivable in light of the fact that utilizing SSL it is
actually workable for any CA to issue a declaration for a site, which has just gotten a
legitimate testament from any or even a similar CA. Therefore, there can be more than one
authentication for each site. Consequently, it is feasible for a legislature to constrain a CA28
by law to issue a false declaration for any site. The legislature may propel the CA to issue a
halfway declaration, which would then be able to be utilized to sign further false
authentication without including the CA. When the legislature has the false authentication,
the main thing left to do is to divert the client's track to a site additionally possessed by the
administration, e.g. utilizing DNS satirizing or essentially by controlling the DNS sections if
a similar government possesses the DNS server in any case.
2.5Data security issues in the SaaS model of cloud computing in the small business
The minimizing in cost and ease of use are two major benefits of cloud computing.
However, there are some limitations of the SaaS model of the cloud computing. Some of the
major limitation of the SaaS model has been discussed below:
Data Confidentiality issue
The confidentiality of data and information is an important element in a business
organization. Confidentiality refers to the rules and regulations imposed by an organization to
restrict the access of various resources and assets of a company (Dang-Pham, Pittayachawan,
& Bruno, 2017). The private information about the employees and clients are not shared with
anyone that provides security to the data and information. The confidentiality of the data and
information in the organization might be breached due to the cyber-attacks over the internet.
The users of the cloud services have access to other accounts of the users. Therefore, the data
and information can be disclosed from one account to another account in the company (Aikat,

13
CLOUD COMPUTING
et al., 2017). The breach in security protocol of company might disclose the private data and
information in the market.
Security is a centre issue in many difficulties in distributed computing including the
need to ensure personality data, approach segments amid incorporation, and exchange
histories. Numerous associations are not happy in putting away their information and
applications on frameworks that live outside their on-introduce server farms. By moving
workloads to a common foundation, clients' private data faces expanded danger of potential
unapproved get to and introduction(Cloud Security Alliance, 2012). Cloud specialist co-ops
must guarantee their clients and give a high level of straightforwardness into their operations
and protection confirmation. Security assurance instruments must be inserted on the whole
cloud security arrangements. In a related issue, it is getting to be plainly essential to know
who made a bit of information, who changed. Provenance data could be utilized for different
purposes, for example, trace back, examining, and history-based access control. Adjusting
between information provenance and protection is a critical test in mists where physical
borders are relinquished.
Data Availability issue
Storing data and information in the remote location to provide high security might
cause failure in accessing the data and information. In the case, of cloud services stop
working due to some reasons, the data and information cannot be accessed from the remote
location. The owner of the data might get lost in data fetching (Aljawarneh, Alawneh, &
Jaradat, Cloud security engineering, 2017). There are threats in the data availability including
data flooding attacks that causes deny of services in the company. The cloud computing
provides on-demand services to the business organization. Therefore, in case the service is
not available due to any failure, the demand for the cloud computing might decrease. It might

14
CLOUD COMPUTING
violate the Service Level Agreement (SLA) with the customers and business organizations in
the market (Duncan, Zhao, & Whittington, 2017).
Figure 3:Security traits
(Source: (Aljawarneh, Alawneh, & Jaradat, Cloud security engineering, 2017) pp.387)
Data Integrity Issue
The data integrity refers to the consistency and validity of the services provided by the
cloud computing in the market. The use of the cloud computing in the business organization
has been increasing in the market. Therefore, due to some major hardware problem, the
services might not be available in the market (Aljawarneh, Alawneh, & Jaradat, Cloud
security engineering, 2017). Therefore, the owner of the data and information is not able to
access. The cloud storage is responsible for storing the data and information of the
organization over the internet. Therefore, there is a chance of data breach over the cloud that
causes data loss of the company in the market.
Data locality issue
The data locality issue in the model is storing the data and information of the business
organization over the cloud. The Small businesses can store their data and information over
the internet using the cloud storage model (Luna, Taha, Trapero, & Suri, 2017). Cyber-
attacks are major threats to the company over the internet. Different viruses and malware

15
CLOUD COMPUTING
attacks the server of the Small businesses, as they have less secured security protocol. These
malware enter the server of the company and breach private information to the third party.
2.6Security Solutions
There is various research works, which is happening into the area of the cloud
security.Most of the small business organization is interested into development of security
solutions as well as standards for the cloud. Trend Micro Software as SaaS security solutions,
which provide the industry, leads to internet content security for the individual, small
business and government agency. They are hosted of service offerings, which influence
strength of “Trend micro smart protection network” to automatically protect the information
of customers against the confidentiality issues. The SaaS solutions are being maintained by
“Trend micro security experts” ensure of easier deployment as well as availability of 24*7
services. The basic duty of any business organization is to control and monitor
implementation process in the company. The governance might impose some policies and
laws that help in restricting the misuse of the computing resources in work environment. As
commented by (Mumme, Wallace, & McGraw, 2017), security frameworks help in effective
risk management process in the business organization to identify various risks for the
company. The risk management helps in analysing the identified risks and treats in the
company. Various frameworks and Policies are made to mitigate these security threats and
risks in Small businesses.

16
CLOUD COMPUTING
Figure 4:Proposed security model
(Source: Created by author)
Auditing
Auditing inside a CC domain essentially refers to the way toward data integrity
uprightness of outsourced information and spare the client's calculation time and online
weight of extra handling. (Rewadkar & Ghatage , 2014) Proposed a protection saving third-
party auditing (TPA). TPA will confirm the capacity rightness of the outsourced information
occasionally when the clients start a demand for confirmation. The objective of the TPA is to
diminish the weight of clients by sparing their calculation assets while guaranteeing the

17
CLOUD COMPUTING
rightness of their information put away in the cloud (Coppolino, D’Antonio, Mazzeo, &
Romano, 2017). The issue that could emerge by picking not to utilize TPA is that CSP's, for
financial reasons, may erase information that is not being utilized or they may shroud the
information misfortune occurrences to look after notoriety. Obviously, the clients have the
alternative of checking this information themselves, though these alternatives are illogical or
dangers the classification of the information (Rewadkar & Ghatage , 2014). The proposed
arrangement will play out the reviewing on the client's demand. This will be done by sending
the check metadata from the client to the server and the TPA will at that point confirm the
reaction. It incorporates an alleged 'bunch evaluating’, which will diminish the reaction time
for review demands when sent by various clients (Rewadkar & Ghatage , 2014).
Policies
Policies are frequently utilized as an approach to guarantee that association wide
security targets are being dealt with a similar path over the association. While Policies all
alone cannot fathom security issues, they are an essential administration device. Distributed
computing is no special case to this (De Carvalho, de Castro Andrade, de Castro, Coutinho,
& Agoulmine, 2017). While making a strategy with respect to distributed computing recall
that the cloud specialist co-op must know about the arrangement. It may be savvier to build
up a shared comprehension of the strategy together with the specialist co-op (Behl & Behl,
2012). This is additionally imperative because of the way that the CSP may have a few
clients with various security needs and in this manner, it may be unthinkable for the CSP to
arrange that spreads all the security needs of the considerable number of clients. Rather it is
smarter to make approaches that arrangement with singular clients and their particular needs
(Sabahi, 2011). Eventually an approach is as it were viable if the association owning it
consistently creates secure works by utilizing the arrangement as a base. Regardless of

18
CLOUD COMPUTING
whether it is, porting a current approach or making another one arrangements alone cannot
not tackle the security issues all cloud clients confront.
RAID
In the framework, "Powerful, Scalable and Secure Network Storage (RSSNS)"
displayed by (Demchenko, Turkmen, Slawik, & de Laat, 2017) an encryption instrument is
first connected to the information, which thusly is part, into cipher blocks. These blocks of
cipher information are at that point set among a few diverse CSPs. For example, if a client
stores a record, an, on the cloud. A is at that point encoded before transferring and is part of
various pieces of information; A1, A2 and A3. These are then dispersed on various servers
inside the cloud. RSSNS accomplishes this by applying a Redundant Array of Independent
Disks (RAID) usage at every server inside the cloud (Coughlin, Keller, & Wustrow, 2017).
They analyze diverse adaptations of a RAID and achieve the conclusion that RAID 10 (1 + 0)
is generally productive. Assault 10 gives a few exceptional highlights, for example,
information repetition, accessibility and adaptation to internal failure by blending the
highlights of striping and reflecting. Accessibility is accomplished by the utilization of
equality. Equality in data relating to a figure square and can be utilized to remake a document
that is been harmed or is inaccessible for different purposes (Juels, Oprea, & Bowers, 2017).
For example, on the off chance that A1 is put away in S1, A2 has put away in S2 and A3 is
put away in S3, the equality data from A1 and A2 is put away in S3. Hence, if A1 is harmed,
the entire document can be recovered by utilizing the data put away in S2 and S3 (Al-Anzi,
Salman, Jacob, & Soni, 2014).
2.7Limitation of the review
The literature focuses on various security threats and risks in the cloud computing in
Small businesses. There are various factors discussed that create security challenges in the

19
CLOUD COMPUTING
cloud computing. However, there are other issues in cloud computing that has been
overlookedin this literature review. The proposed model has not been properly modified in
the review. There have various journals and articles were used for the literature review.
However, solutions provided for mitigating the challenges might have been more efficient
than present one. There could have been the practical implementation of the strategies
discussed in the literature review.

20
CLOUD COMPUTING
Chapter 3: Research Contribution
Theme1: Data security Issues in SaaS
The database may flop because of some broken issues and because of the product engineers
make wrong setup and wrong coding. The database can be under disturbance at the season of
execution also. At the season of advancement of the database programming the database stays
untested by the engineers so some flawed issues and bugs remain inside the database, the
aggressors exploiting the bug can abuse the database. Database security blemishes: The
security vulnerabilities remain inside the database and these vulnerabilities can be appalling
to the association. As commented by (Yadav & Doke, 2016), the malware threats make
devastation and the entire framework and the database can be under risk. The interlopers can
access the framework through these provisos and can abuse the whole database and the
framework voluntarily. As suggested by (Burton, 2013), the associations can endure a ton
because of this threat. Information spills: Database is considered as the backend of the
improvement, the business associations' money related information and in addition the touchy
information of the representatives and the clients and the customers in the database. Thusly,
the business associations if need to shield their database from any sort of disasters they
should guarantee that their system is solid and sufficiently secure, if the system isn't secured
then it might happen the programmers can exploit the system and can abuse the database in
general.
The information in the database is abused by a few means, because of misusing of the
workers and the misusing of the customers or the clients. The representatives here and there
introduce modules into their framework, in this manner the applications introduced inside the
framework ends up noticeably cumbersome and in the meantime carriage, these modules may
demonstrate profane they can take all the essential data, concealed documents inside the

21
CLOUD COMPUTING
framework, and additionally they, can take treats from the program. . As suggested Burton,
(2013), along these lines the setbacks of the workers can cost the organization excessively.
Indeed, even the losses from the clients can cause security and protection rupture the
passwords put away in the database can be stolen from the database of the clients. The
hacktivists can take the individual documents and the information from somebody's close to
home record basically without utilizing any bank card and the bank card data, the interlopers
are dependably looking for the vulnerabilities. The factors don't get tried at the season of
testing and the front end database does not get the coveted security with the firewall and in
this manner the framework and the database both are defenseless against SQL infusion. The
database engineers and the database executives keep the imperative keys in their database on
the hard drive of the PC framework. On the other hand, the computer gets associated with the
uncertain system the interlopers will threat the PC framework and will make the whole
framework defenseless. As mentioned by (Juels, Oprea, & Bowers, 2017), the database
designers, and additionally the database overseers, must be cautious about the information
ruptures constantly if any sort of setbacks happen they should be prepared to confront the
dangers and the dangers and in view of that they should settle on best choice to find the
dangers happen inside.
The infection and worms are two perilous dangers that HR database can confront. A worm
essentially spreads by means of programmers once, at that point the worms imitate without
anyone else and this can cause interruption and hazard, these worms can back off the server
and the framework and can cause ruin. As commented by Au, Fung & Tses, (2016), the
infection is another vindictive action did by the programmers. The infection burglarizes the
imperative records of the HR database, the money related information and the customers'
information. Hence, the infection threat is in charge of information misfortune, information
burglary and the HR database can cause glitch because of this, the framework will stop, the

22
CLOUD COMPUTING
creation alongside that can cause disturbance, the workforce should sit inertly and the
association by this interruption can lose the notoriety. Trojan steed is the threat that happens
when any record downloaded from no confided in source or no put stock in source. These
documents can cause disturbance and take away all the essential data of the database and the
arrangement of the HR association. The representatives of the association can get to any site
which isn't confirmed and not dependable. As suggested by (Flint, 2017), the resistance
instruments must be prepared to convey the quality security benefit that can make the whole
framework powerless. The representatives of the association if get to the defenseless
programming the infection will spread over the framework and the database will endure. The
Denial of Service threat is another genuine threat that the HR database can experience the ill
effects of. The powerless threat from the programmers can exacerbate the situation, it
fundamentally close down the PC framework and the PC database, this threat by and large
disrupts the proprietor's PC and prohibits the proprietors of the server and the PC framework
to not utilize the PC framework. The programmers can get to the private data of the HR
database, the customers' points of interest, their record subtle elements; the programmers can
release the data for individual intrigue. Additionally, the threat can make perpetual harm the
framework and the documents. The information misfortune can be a colossal misfortune for
the HR database. As mentioned by (Khan M. A., 2016), there are different types of Denial of
Service threat. In this situation, one ace PC takes control of a specific gathering of PCs and
these gathering of PCs are capable to spread the malignant exercises over the HR database
and the HR framework. This can close down the server of the HR database totally. The
zombie PCs if threat the HR framework, barrage can happen and this siege occur because of
exchanges of tainted and noxious information stream.
Theme 2: Data Confidentiality in SaaS

23
CLOUD COMPUTING
The customers in loss regularly neglect to log out of the framework. The customers' system
isn't profoundly secured, therefore exploiting the shaky system; the programmers can pick up
passage to the framework making enormous interruption the association in general. The
information spills are conceivable along these lines the HR database can be under dangers the
information of the database can be stolen. The customers, and additionally the representatives
of the organization, need to confront the provocations because of the substantial threat. The
notoriety can be genuinely tested because of this. As mentioned by (Khan M. A., 2016), the
customers regularly pick the feeble passwords for their framework and in this manner make
an open door for the programmers. In this, the individual information of the customers'
information can be ruptured and the association should assume the most extreme liability for
this. With the assistance of savage power strategy, the vulnerabilities living inside get
uncovered. In this manner the customers must be relentless while setting a secret key for the
framework. The phishing threat is led by the programmers to hack the individual records. The
programmers build up a carbon copy site of the DAS by replicating the HTML code of the
real site and can cheat the customers. The customers by entering the accreditations can get
misleading and by getting the points of interest of the customers the programmers can hack
the records of the HR database.
The serious hazard included is the exposure of actually delicate data and the touchy data to
the general population. As commented by (Au, Fung, & Tses, 2016), In this manner

24
CLOUD COMPUTING
legitimacy is the need of great importance. The protection of their customers can take away
one's life. The programmers, the gatecrashers can access the HR database and can make the
whole database and framework helpless against threat. The HR database contains the delicate
data of both the workers and the customers; again it contains the money related information
of the association. Since everything will be directed online the cloud database, SaaS
applications must be viewed as and should well deal with. Likewise, they should take the
assistance from the outsider cloud seller, as the cloud merchants have the best answers for
guard the malware threat and the best building plan to shape the whole endeavor. The threats
and dangers to the computerized personalities of the process are included. The vulnerabilities,
and also dangers correlated with advanced characters while moving to the cloud database,
have been featured in the report. The researchers as of now working in the organization can
get debilitated if DAS moves to cloud and begins utilizing cloud applications. As suggested
by (Flint, 2017), Genuineness is one of the procedures by which the specialists and the
customers can access the organization. The programmers essentially threat the system which
isn't unequivocally secured. The customers' delicate data and the associations' information
can get broke because of the uncertain system and the absence of firewall setup. A secured
firewall can secure the system adequately. The cloud organize security gave by the cloud
seller is competent to give the secured arrange propelled highlights. Again the cloud
securities gave by the cloud sellers is advantageous to find the Denial of Service threat. The
Denial of Service threat can close down the server PC and hinders all the business exercises.
The listening in is another risk which causes interruption and it includes the entrance over the
system wrongfully and can record the discussion of the customers and the representatives of
the system. There is another threat named disguise which can be similarly grievous. The
programmers by taking the name and phony character of the association's workers and speak
with the customers. Along these lines, the delicate data of the representatives gets looted

25
CLOUD COMPUTING
because of the threat of the programmers. This is another way the HR database can cause
harm.
As mentioned by (Khan M. A., 2016), growing popularity of SaaS has impacts on the
data confidentiality. The key aspect of SaaS is that there is a share of infrastructure between
various customers. Therefore, there are various threats that are associated with data storage as
well as process. Protection of the sensitive data is important into the SaaS provider
infrastructure. Another key aspect is that SaaS is web based and the provider are delivering
the services on the internet. Secured transmission, secured web services, network security are
the key aspects to prevent the data of customers from intercepted throughout data
transmission. Segregation of the data is most significant aspect, whichis required to take into
account of the SaaS services. Within the cloud, the main concern is monitoring and reporting
of the activities within the cloud. The cloud provider is replicating the data across various
systems.
Theme 3: Data locationissues in Saas
When the information are crossed the boundaries of the small business than it
becomes confidentiality issues. The customers are not aware where the data is, and then there
are issues during data flow and transfer of data. Data location is a common confidentiality
issues the small business, governmental agency faced with the data. Into the cloud
computing, the data are stored into various physical locations and detailed information about
data location is unavailable to the customers.
As commented by (Ahmed & Litchfield, 2016), data location issues are categorised as
outsource. Data outsourcing is occurred when the data crossed the boundary of the company
and is being hosted into another company. The customers are lost control o the data and it
caused cloud insecurity, raised of governance questions.

26
CLOUD COMPUTING

27
CLOUD COMPUTING
Theme 4: Compromise the data security of small businesses with respect to confidentiality
of data into SaaS
SaaS is competent to cook the stage where the undertaking does not need to stress
over the administration of the applications and the updates of the applications. The cloud
provider will require the push to secure the framework and therefore, the workers can remain
protected and secure. The customers can likewise appreciate the secured benefit. SaaS
enhances execution of cloud applications and along these lines, the workers can get the quick
cloud benefit and successful cloud benefit from the cloud merchant. The SaaS applications
can be prepared anyplace whenever from any gadget. The security outline for the SaaS
partners those components which can be shared among the customers among the partners and
Store has arrangements in regards to the SaaS demonstrate. As mentioned by (Krishna, Kiran,
Murali, & Reddy, 2016) Shore provides food the CRM offices and by this approach, the
representatives of the association, and in addition the labourers of the association, can get the
advantages minus all potential limitations. Through shore, the labourers’ information can be
followed, and the customers' information can be followed. Since, Shore has assumed the
liability to give the workers a ton of advantages so they don't need to consider the security of
their endeavor, they don't need to consider the security of the representatives of the
undertaking, and furthermore they don't need to consider the security and protection of the
customers in their organization. Since Shore has some propelled highlights introduced inside
the cloud database and the venture they don't need to stress over keeping up and the database
and the framework. The association will have every one of the information readily available
and can get to the information without lifting a finger (Dave, et al., 2017). Also, the
association can get the advantages to get to the database in a hurry, can get to the database
anyplace whenever at wherever from any computerized gadget. Amazon AWS is the US-
based SaaS supplier which has various advantages to offer and they are- I. Framework

28
CLOUD COMPUTING
capacities Amazon has the vital system firewalls absorbed with the Amazon PVC, it likewise
has the firewalls associated with the web applications and subsequently makes more
extensions for Amazon and this help with accessing the cloud field of the cloud merchant
Amazon.(Ahmed & Zolkipli, 2016).
Threat Description
Confidentiality
User Threats:
 Unauthorized cloud provider user
 Unauthorized cloud customer user
 Unauthorized third party user
The threat of insiders accessing customer
data held within the cloud is greater as each
of the delivery models can introduce the
need for multiple internal users: SaaS –
cloud customer and provider administrators
PaaS- application developers and test
environment managers IaaS- third party
platform consultants
External attacker threats:
Remote software attack of cloud
infrastructure
Remote software attack of cloud
applications
 Remote hardware attack against the
cloud
 Remote software and hardware
attack against cloud user
organizations’ endpoint software and
hardware
The threat from external attackers may be
perceived to apply more to public Internet
facing clouds, however all types of cloud
delivery models are affected by external
attackers, particularly in private clouds
where user endpoints can be targeted. Cloud
providers with large data stores holding
credit card details, personal information and
sensitive government or intellectual
property, will be subjected to attacks from
groups, with significant resources,

29
CLOUD COMPUTING
 Social engineering of cloud provider
users, and cloud customer users.
attempting to retrieve data. This includes the
threat of hardware attack, social engineering
and supply chain attacks by dedicated
attackers.
Data Leakage:
 Failure of security access rights
across multiple domains
 Failure of electronic and physical
transport systems for cloud data and
backups
A threat from widespread data leakage
amongst many, potentially competitor
organizations, using the same cloud
provider could be caused by human error or
faulty hardware that will lead to information
compromise.
In any case, the utilization of these administrations can likewise be hazardous appropriations
if legitimate security checks are not received. Notwithstanding security for the information,
the consistence to strategies and guidelines are additionally different dangers that must be
tended to by the organizations concerned. This report examines about the different dangers
exhibit in tolerating cloud arrangements.
The primary hazard in the cloud highlights are the requirement for a decent security strategy.
As indicated by an overview among different business organizations and associations
actualizing the cloud arrangements, the larger part chances are in their security viewpoints.
This implies are dependably the objective for security breaks by aggressors or other
exploitative specialists. This is named as a warning in any framework and appropriate
security must be set up for supporting them. The significant administrations for gathering
messages like the SendGrid or the real applications for taking notes like the Evernote, are
dependably the objectives for an information rupture. This is constantly done to get the data
from them which prompt grave dangers for the organization themselves. This gives a pre-

30
CLOUD COMPUTING
essential for embracing the hazard moderation systems like encryption and tokenizing for
upgrading the security needs.
The rebelliousness to gauges or approaches is another issue in the distributed computing
viewpoints which is of awesome concern. For a cloud provider, the arrangements and
security received in their administrations are to publicly release with the goal that their
customers can see them and cling to them as needs be. This is likewise of a worry to the
organizations tolerating these arrangements as the strategies and structures set up for their
framework may be powerless against dangers and ruptures. Along these lines, a customer of
an outsider business should likewise observe to this to get consistence to the controls as any
ruptures in their frameworks because of this can prompt extraordinary loss of business, fines
or even claims.
The following issue is the loss of control over the administrations. A cloud benefit give or the
outsider merchants dependably give affirmation to their customers about the kind of the
administrations that will be give, the server farm that will be utilized or even the stage that
will be utilized. From an overview directed for cloud highlights, different organizations do
not acknowledge the cloud arrangements because of the loss of ability in controlling their
answers. This loss of control is the fundamental purpose behind all organizations to quit their
cloud frameworks (Ahmed & Zolkipli, 2016). Despite the fact that the cloud sellers are
continually giving trust in the brains of their customers, the reality still remains that the loss
of administrations is to be tended to and the customer organizations need data about the area
of their information and even the kind of the arrangement utilized for security. Moreover, in
the event of any breaks in the framework, the customers alongside the sellers will be viewed
as in charge of these sorts of cases.

31
CLOUD COMPUTING
The fourth issue in the cloud security highlights is the catastrophe recuperation designs and
the relief systems received. Amid the strike of a catastrophe in the framework, the operations
and every one of the procedures are gone down to the cloud which is put away in on the web
and disconnected modes. These are the typical techniques for tending to fiasco designs.
Among the beginning of the assault, data is to be sent by these media and this is the
fundamental driver in lessening of the speed. This brings a security issue up in operations
where in some cases reinforcements can't be set aside a few minutes. Moreover, amid
recuperation alternatives, the returning of changes likewise requires downloading the
arrangements from the stockpiles to influence the framework to go on the web. This
procedure likewise makes impediments the framework as the rate of returning is to a great
degree moderate. This is another range where the different dangers in security should be
tended to. If there should arise an occurrence of returning the moved down process from
stockpiles, the need to secure their framework against additionally assaults are vital. Inability
to agree to this can prompt numerous different assaults and may prompt misfortune in the
went down process. DDoS threat Amazon AWS has a one of a kind system to shield the
DDoS threat; the Amazon AWS benefit can possibly check the dangers and the dangers
related with the DDoS threat. Amazon is likewise known to give the accompanying angles
like auto-scaling, Amazon Cloud Front and Amazon that can check the negative effect of this
aforementioned threat. Information Encryption-SQL Server RDS, EBS, Redshift RDS, S3
caters the information encryption techniques by which the worker's information and the
customer's information can be ensured, it is about outlandish for the aggressors to access a
system and to access a framework. In this manner the product gave by Amazon can help in
securing the database.

32
CLOUD COMPUTING
Chapter 4: Summary
4.1 Summary
It can be summarized that the research has able to identify the security issues in the
cloud computing in Small businesses.The security issues have been thematically analysed in
the research. The use of the cloud computing in the business organization has been properly
justified. The cloud computing has been always cost-efficient, on-demand service and robust.
The cloud computing has helped in maintaining the operations of the companies. The
objective linking has been properly provided. All the objectiveshave been fulfilled. The
confidentiality issuesare identified in the research with the context of small business
organisation.The SaaS is the software deployment model where applications are remotely
facilitated by the application or specialist co-op and made accessible to purchasers on request.
It is concluded that SaaS with the security solutions include of cloud security challenges
which are associated with the model. As the secured storage of data into the cloud
environment is a concern which prevented the users from using of cloud.
This offers the customers critical advantages and is, because of that, quickly
developing as the overwhelming conveyance show. Most undertakings are yet awkward with
SaaS because of the need of deceivability about the way their information is put away and
secured. The security of data integrity and confidentiality of data has been explained in the
research. The research has thrown light on the strategies for mitigating the security issues in
the cloud computing in the business organization. Different methods including auditing,
policies, RAID have been structured in the research. The use of the model-based architecture
has helped in visualizing the solutions for mitigating the security challenges in the cloud
computing in Small businesses. Malicious and third-party clients are regularly disregarded.
While it is said in a little piece of the writing, it is conceivable this specific risk is regularly
ignored because of how wide it is.

33
CLOUD COMPUTING
The small business organization must guarantee that their different clients do not get
the opportunity to see each other's private information. Thus, it deals up plainly critical to the
client to guarantee that correct safety efforts are set up and furthermore hard to get a
confirmation that the application will be accessible when required. The last case of this is the
diverse administration models furthermore, arrangement models. All of the writing
incorporated a definition of the unique benefit models. Regardless of this exclusive, a little
piece of the analysed literature endeavoured to recognize one of a kind security issues and
answers for each of the diverse administration models.
4.2 Future Works
The current research has focused on identifying data confidentiality issues in the SaaS
model in cloud computing environment. There have been various theoretical solutions
provided in the context for achieving success in mitigating these challenges. The future
research might focus on practical implementation of the proposed strategies in the business
organization. There might be research on getting feedback from the customers for using cloud
computing and regarding security issues in it. The future research might strive various
deployment methods and security protocols for mitigating the security issues in the cloud
computing. The use of the different cyber laws might help in mitigating the data.

34
CLOUD COMPUTING
References
Abbas, R., Farooq, A., & Afghan, S. (2015). A security Model for SaaS in Cloud Computing.
University of Engineering and Technology Taxila. Technical Journal, 20(4), 103.
Ahmed, H. S., & Zolkipli, M. B. (2016). Data security issues in cloud computing.
International Journal of Software Engineering and Computer Systems, 2(1), 58-65.
Ahmed, M., & Litchfield, A. T. (2016). Taxonomy for identification of security issues in
cloud computing environments. Journal of Computer Information Systems, 1-10.
Ahmed, R., Hussain, M., Rahmani, T. S., Mansoor, A., & Ali, M. L. (2017). Minimization of
security Issues in Cloud Computing. Journal of information communication
technologies and robotics applications (jictra), 3(1), 1-39.
Aikat, J., Akella, A., Chase, J. S., Juels, A., Reiter, M. K., Ristenpart, T., . . . Swift, M.
(2017). Rethinking security in the Era of Cloud Computing. IEEE security&Security,
15(3), 60-69.
Al-Anzi, F. S., Salman, A. A., Jacob, N. K., & Soni, J. (2014). Towards robust, scalable and
secure network storage in Cloud Computing. In Digital Information and
Communication Technology and it's Applications (DICTAP), 2014 Fourth
International Conference (pp. 51-55). IEEE.
Alassafi, M. O., Hussain, R. K., Ghashgari, G., Walters, R. J., & Wills, G. B. (2017). security
in organisations: governance, risks and vulnerabilities in moving to the cloud.
Springer, Cham.
Albaroodi, H., Manickam, S., & Singh, P. (2014). Critical review of OpenStack security:
Issues and weaknesses. Journal of Computer Science, 10(1), 23-33.

35
CLOUD COMPUTING
Aljawarneh, S. A., & Yassein, M. B. (2016). A conceptual security framework for cloud
computing issues. International Journal of Intelligent Information Technologies
(IJIIT), 12(2), 12-24.
Aljawarneh, S. A., Alawneh, A., & Jaradat, R. (2017). Cloud security engineering. Future
Generation Computer Systems, 74(C), 385-392.
Almorsy, M., Grundy, J., & Ibrahim, A. S. (2014). Adaptable, model-driven security
engineering for SaaS cloud-based applications. Automated software engineering,
21(2), 187-224.
Almorsy, M; Grundy, J; Muller, I. (2016). An analysis of the cloud computing security
problem. arXiv preprint arXiv:1609.01107.
Au, C. H., Fung, W. S., & Tses, A. (2016). An investigation on the relationship between
control self-assessment, cloud security, and cloud-related business performance-using
partial least squares. In Industrial Engineering and Engineering Management
(IEEM), 2016 IEEE International Conference (pp. 1879-1883). IEEE.
Behl, A., & Behl, K. (2012). An analysis of cloud computing security issues. In Information
and Communication Technologies (WICT), 2012 World Congress (pp. 109-114).
IEEE.
Burns, A. J., Posey, C., Courtney, J. F., Roberts, T. L., & Nanayakkara, P. (2017).
Organizational information security as a complex adaptive system: insights from three
agent-based models. Information Systems Frontiers, 1-16.
Burton. (2013). Small states and cyber security. The case of . Political Science, (pp. 216-
238). IEEE.

36
CLOUD COMPUTING
Chauhan, P., & Bansal, P. (2017). Emphasizing on Various security Issues in Cloud Forensic
Framework. Indian Journal of Science and Technology, 8(1).
Cimler, R., Matyska, J., Balík, L., Horalek, J., & Sobeslav, V. (2015). security issues of
mobile application using cloud computing. In Afro-European Conference for
Industrial Advancement (pp. 347-357). Springer, Cham.
Coppolino, L., D’Antonio, S., Mazzeo, G., & Romano, L. (2017). Cloud security: Emerging
threats and current solutions. omputers & Electrical Engineering, 59, 126-140.
Coughlin, M., Keller, E., & Wustrow, E. (2017). Trusted Click: Overcoming security issues
of NFV in the Cloud. In Proceedings of the ACM International Workshop on security
in Software Defined Networks & Network Function Virtualization (pp. 31-36). ACM.
Cloud Security Alliance (CSA)’s Security Guidance for Critical Areas of Focus in Cloud
Computing (2012). CSA, April 2012. Available Online at:
https://cloudsecurityalliance.org/csaguide.pdf.
Dang-Pham, D., Pittayachawan, S., & Bruno, V. (2017). Why employees share information
security advice? Exploring the contributing factors and structural patterns of security
advice sharing in the workplace. Computers in Human Behavior, 67, 196-206.
Dave, D., Meruliya, N., Gajjar, T. D., Ghoda, G. T., Parekh, D. H., & Sridaran, R. (2017).
Cloud security Issues and Challenges. In Big Data Analytics (pp. 499-514).
Singapore: Springer.
De Carvalho, C. A., de Castro Andrade, R. M., de Castro, M. F., Coutinho, E. F., &
Agoulmine, N. (2017). State of the art and challenges of security SLA for cloud
computing. Computers & Electrical Engineering.

37
CLOUD COMPUTING
Demchenko, Y., Turkmen, F., Slawik, M., & de Laat, C. (2017). Defining Intercloud security
Framework and Architecture Components for Multi-Cloud Data Intensive
Applications. In Cluster, Cloud and Grid Computing (CCGRID), 2017 17th
IEEE/ACM International Symposium (pp. 945-952). IEEE.
Duncan, B., Zhao, Y., & Whittington, M. (2017). Corporate Governance, Risk Appetite and
Cloud security Risk: A Little Known Paradox. How Do We Square the Circle?. In
Eighth International Conference on Cloud Computing, GRIDs, and Virtualization
(CLOUD COMPUTING 2017). IARIA.
Fernandes, D. A., Soares, L. F., Gomes, J. V., Freire, M. M., & Inácio, P. R. (2014). security
issues in cloud environments: a survey. International Journal of Information security,
13(2), 113-170.
Flint, D. (2017). Storms Ahead for Cloud Service Providers. Business Law Review, 38(3),
125-126.
Garg, A., & Babbar, H. (2017). Cloud security: A Big Challenge, Issues and Solutions.
Imperial Journal of Interdisciplinary Research, 3(3).
Goyal, S. (2014). Public vs private vs hybrid vs community-cloud computing: a critical
review. International Journal of Computer Network and Information security, 6(3),
20.
Hashizume, K., Rosado, D. G., Fernández-Medina, E., & Fernandez, E. B. (2013). An
analysis of security issues for cloud computing. Journal of Internet Services and
Applications, 4(1), 5.
ISO/IEC 13335-1:2004(E). (2004, 11 15). Retrieved from International Organization for
Standardization: https://webstore.iec.ch/preview/info_isoiec13335-

38
CLOUD COMPUTING
1%7Bed1.0%7Den.pdf
Juels, A., Oprea, A., & Bowers, K. D. (2017). security Issues for Cloud Computing [3]. 4(5).
Khan, M. A. (2016). A survey of security issues for cloud computing. Journal of Network
and Computer Applications, 71, 11-29.
Khan, N., & Al-Yasiri, A. (2016). Cloud security threats and techniques to strengthen cloud
computing adoption framework. International Journal of Information Technology
and Web Engineering (IJITWE), 11(3), 50-64.
Krishna, B. H., Kiran, S., Murali, G., & Reddy, R. K. (2016). security Issues In Service
Model Of Cloud Computing Environment. Procedia Computer Science, 87, 246-251.
Kshetri, N. (2013). Security and security issues in cloud computing: The role of institutions
and institutional evolution. Telecommunications Policy, 37(4), 372-386.
Lin, I. C., & Liao, T. C. (2017). A Survey of Blockchain security Issues and Challenges. IJ
Network security, 19(5), 653-659.
Luna, J., Taha, A., Trapero, R., & Suri, N. (2017). Quantitative reasoning about cloud
security using service level agreements. IEEE Transactions on Cloud Computing.
McCormac, A., Zwaans, T., Parsons, K., Calic, D., Butavicius, M., & Pattinson, M. . (2017).
Individual differences and information security awareness. Computers in Human
Behavior, 69, 151-156.
Mishra, A. (2017). Cloud Computing Models: Background, Data security, &security Issues.
Journal of Web Development and Web Designing, 2(1,2).
Modi, C., Patel, D., Borisaniya, B., Patel, A., & Rajarajan, M. (2013). A survey on security
issues and solutions at different layers of Cloud computing. The Journal of

39
CLOUD COMPUTING
Supercomputing, 63(2), 561-592.
Mohammad, A., Kak, S. M., & Alam, M. A. (2017). Cloud Computing: Issues and security
Challenges. International Journal, 8(2).
Mumme, D. C., Wallace, B., & McGraw, R. (2017). Cloud security via Virtualized Out-of-
Band Execution and Obfuscation. In Cloud Computing (CLOUD), 2017 IEEE 10th
International Conference, 286-293.
Pachauri, S., Srivastava, R., & Trivedi, U. B. (2014). Cloud-computing: Challenges, security
and Solutions Using, SaaS.
Security Act 1993. (2017, September 28). Retrieved from Legislation:
http://www.legislation.govt.nz/act/public/1993/0028/latest/DLM296639.html
Puthal, D., Sahoo, B. S., Mishra, S., & Swain, S. (2015, January). Cloud computing features,
issues, and challenges: a big picture. In Computational Intelligence and Networks
(CINE), 2015 International Conference (pp. 116-123). IEEE.
Rai, R., Sahoo, G., & Mehfuz, S. (2013). Securing software as a service model of cloud
computing: Issues and solutions. arXiv preprint arXiv:1309.2426.
Rajasekaran, S., Ni, Z., Shah, N., Chawla, H. S., Wood, T., & Berger, E. (2016). Scalable
Cloud security via Asynchronous Virtual Machine Introspection. In HotCloud.
Ramachandra, G., Iftikhar, M., & Khan, F. A. (2017). A Comprehensive Survey on security
in Cloud Computing. Procedia Computer Science, 465-472.
Ren , Q., & Gao, H. (2016). Research on Information security in Cloud Computing
Environment. Electronics Science Technology and Application, 3(1), 42-45.

40
CLOUD COMPUTING
Rewadkar, D. N., & Ghatage , S. Y. (2014). Cloud storage system enabling secure security
preserving third party audit. In Control, Instrumentation, Communication and
Computational Technologies (ICCICCT), 2014 International Conference (pp. 695-
699). IEEE.
Rittinghouse, J. W., & Ransome, J. F. (2016). Cloud computing: implementation,
management, and security.
Sabahi, F. (2011). Cloud computing security threats and responses. In Communication
Software and Networks (ICCSN), 2011 IEEE 3rd International Conference (pp. 245-
249). IEEE.
Samarati, P., di Vimercati, S. C., Murugesan, S., & Bojanova, I. (2016). Cloud security:
Issues and concerns. Encyclopedia on Cloud Computing, 1-14.
Saxena, T. (2013). IT security Issue in Cloud Computing Model. In Proceedings of
International Conference on Cloud, Big Data and Trust, (pp. 13-15).
Sethi, S., & Sruti, S. (2016). Cloud security Issues and Challenges. Resource Management
and Efficiency in Cloud Computing Environments, 89.
Shahzad, A., & Hussain, M. (2013). security issues and challenges of mobile cloud
computing. International Journal of Grid and Distributed Computing, 6(6), 37-50.
Shei, S., Mouratidis, H., & Delaney, A. (2017). A security Requirements Modelling
Language to Secure Cloud Computing Environments. In Enterprise, Business-
Process and Information Systems Modeling (pp. 337-345). Springer, Cham.
Sihgh, S., Jeong, Y. S., & Park, J. H. (2016). A survey on cloud computing security: Issues,
threats, and solutions. Journal of Network and Computer Applications, 75, 200-222.

41
CLOUD COMPUTING
Singh, A., & Chatterjee, K. (2017). Cloud security issues and challenges: A survey. Journal
of Network and Computer Applications, 79, 88-115.
Soofi, A. A., Khan, M. I., Talib, R., & Srwar, U. (2014). security Issues in SaaS Delivery
Model of Cloud Computing. International journal of computer science and mobile
computing, 3(3), 15-21.
Stojmenovic, I., Wen, S., Huang, X., & Luan, H. (2016). An overview of fog computing and
its security issues. Concurrency and Computation: Practice and Experience, 28(10),
2991-3005.
Talluri, S. (2016). Novel Techniques In Detecting Reputation based Attacks And Effectively
Identify Trustworthy Cloud Services. IJSEAT, 4(6), 287-289.
Yadav, D. S., & Doke, K. (2016). Mobile Cloud Computing Issues and Solution Framework.
Zibouh, O., Dalli, A., & Drissi, H. (2016). Cloud computing security through parallelizing
fully homomorphic encryption applied to multi-cloud approach. Journal of
Theoretical and Applied Information Technology, 87(2), 300.