MITS5002 Assignment 1 & 2: Security Issues in Cloud Computing

This report delves into the security challenges inherent in cloud computing environments. It highlights key concerns such as data security, the risk of external cyber-attacks leading to data breaches, and the importance of data integrity to prevent unauthorized access or modification. The report also addresses the issue of information availability, emphasizing the potential for server failures and the subsequent impact on data accessibility. Furthermore, it explores data confidentiality issues, including the risks associated with third-party data handlers and data analysis. The report proposes mitigation strategies, such as the incorporation of MAC algorithms for encryption, to enhance cloud computing operations and concludes by emphasizing the importance of addressing these limitations to ensure organizational success. The report is based on the MITS5002 Software Engineering Methodology curriculum, focusing on the critical aspects of cloud computing security.

Security Issue in Cloud Computing

Introduction
Cloud computing is one of the emerging technology in the field of information management as
well as the utilization of the virtual storage for the organizational purpose. However, there are
several benefits related to the services of cloud computing there are various limitations present
in the field of data security, privacy, information integrity, information availability as well as
the data confidentiality.

Characteristics of Cloud Computing
 One of the significant aspect of the application of cloud computing is it offer on demand
resource utilization.
 It is highly cost effective due to its automatic nature.

Cloud Computing

Service Models of Cloud Computing
 Infrastructure as a Service (IaaS) provides virtual infrastructure for organizational purpose.
 Platform as a Service (PaaS) offers cloud platforms for the organizational use.
 Software as a Service (SaaS) offers to install and perform the operations of organization in
the cloud platform.

Deployment Models of Cloud Computing
 Public Cloud- offers an open accessibility for public use.
 Private Cloud- offers the accessibility to the cloud only to an organization.
 Community Cloud- offers the accessibility of cloud services among a group of
organization which are internally connected however physically separated
 Hybrid Cloud- offers the cloud services by combining three of the cloud deployment
models.

Cloud Security Issue
Data Security- occurs due to the possibility of external cyber-attacks by which the attacker can
easily steel the stored information. Thus, it has been noticed that due to the utilization of the
cloud computing in organizational information handling the possibility of DoS attack holds
significant responsibility for hacking the organizational information.

Cloud Threats
 Data Security- occurs due to the possibility of external cyber-attacks by which the attacker can easily steel the stored
information.
 Information Integrity- occurs when there is any possibility of unauthorized access in order to get information as well as
in order to modify the information.
 Information Availability- due to its online aspects the possibility of failure of the cloud server cannot be avoided which
can cause a significant impact related to the data availability as the user will not be able to access the information.
 Data Confidentiality- due to the incorporation of the third party information handler there is a significant risk related to
the data confidentiality.

Data Integrity issue in Cloud Computing
Information Integrity- occurs when there is any possibility of unauthorized access in order to get
information as well as in order to modify the information.

Mitigation Process
Incorporation of the MAC algorithm to implement encryption process for data resources can
effectively help the organization to enhance the operations related to the cloud computing.

Data Availability Issue
Information Availability- due to its online aspects the possibility of failure of the cloud server
cannot be avoided which can cause a significant impact related to the data availability as the
user will not be able to access the information.

Data confidentiality issue
Data Confidentiality- due to the incorporation of the third party information handler there is a
significant risk related to the data confidentiality. Along with this the aspects of data analysis
signifies a risk related to the information security. Followed by this while dealing with the
sensitive areas like military information and government information cloud computing consists
major risk.