Research Project on Mitigating Security Risks in Cloud Environments

Desklib provides past papers and solved assignments for students. This research project explores cloud computing security.

ITC595 Information Security
Assessment Item 3
Research Project

Topic: Security threats in cloud computing and preventive methods
Abstract:
Threats are known as security attacks in the term of computer context. It has different types
like computer viruses, hackers and predators, spyware threats and phishing. Cloud computing
is a hosting service over the internet that has three main types, IaaS, SaaS and PaaS. Cloud
computing reduces the cost to purchase and install a new device for the data storage, so it is
required to prevent it from different security threats. Keep offline backup of the data is not a
secure option as it can be accessed through data breach (Ko, R. K., Jagadpramana, P.,
Mowbray, M., Pearson, S., Kirchberg, M., Liang, Q., & Lee, B. S., 2011).
Different security threats are available in cloud computing like cloud abuse, insecure API,
malware attack, data loss and service hacking with many more. For the solution of these
security threats, select a reliable cloud provider with implement the encryption system.
Provide access only to authorised and validate person to monitor each process. Some more
challenging area in the cloud computing is like, insecure API, maintain availability in the
cloud, cloud migration with an evaluation of security controls and many more. It is required
to implement proper security in the cloud computing area for the government or big
organizations to save data of their people and prevent country or organization from a cyber-
attack (Saripalli, P., & Walters, B., 2010).
References:
Ko, R. K., Jagadpramana, P., Mowbray, M., Pearson, S., Kirchberg, M., Liang, Q., & Lee, B.
S. (2011, July). TrustCloud: A framework for accountability and trust in cloud computing.
In 2011 IEEE World Congress on Services (pp. 584-588). IEEE.
Saripalli, P., & Walters, B. (2010, July). Quirc: A quantitative impact and risk assessment
framework for cloud security. In 2010 IEEE 3rd international conference on cloud
computing(pp. 280-288). Ieee.