Regional Gardens Ltd: Hybrid Cloud and Microservices Strategy

This report provides a detailed analysis of implementing a hybrid cloud and microservices strategy for Regional Gardens Ltd, a gardening enterprise. It covers the selection of cloud architectures, specifically Platform as a Service (PaaS), and justifies its suitability for a hybrid environment, highlighting benefits such as faster deployment, streamlined application management, and cost-effectiveness. The report also addresses potential issues like BCP/DR concerns and inadequate SLA provisions. Furthermore, it identifies various security risks associated with hybrid cloud and microservices, including lack of encryption, inadequate risk assessment, compliance issues, and weak security management, and proposes mitigation controls for each. The document outlines crucial information security steps, business continuity planning, and considerations for remote server administration, resource management, and SLA management, as well as migration to AWS services, offering a comprehensive overview for organizations considering similar cloud implementations. Desklib is your go-to platform to access similar solved assignments and study resources.

Running head: CLOUD COMPUTING
Cloud Computing
Name of the Student
Name of the University
Author’s Note:

1
CLOUD COMPUTING
Table of Contents
Introduction...............................................................................................................................2
Discussion...................................................................................................................................2
1. Selection of Cloud Architectures for a Hybrid Cloud and the Reasons for the
Deployment............................................................................................................................2
2. Benefits and Issues for the Deployment of the Selected Cloud Architectures..................4
3. Risks Associated with Hybrid Cloud and Micro services Strategy with their Controls......5
4. Information Security Steps and controls for Securing Hybrid Cloud.................................9
5. Business Continuity Planning for Hybrid Cloud and Micro services Approach................11
6. Remote Server Administration, Resource Management and SLA Management............13
7. Migration to AWS Services...............................................................................................13
8. Critical Points and Issues for these Steps.........................................................................14
Conclusion................................................................................................................................15
References................................................................................................................................17

2
CLOUD COMPUTING
Introduction
Regional Gardens Ltd is a specific organization, which is responsible for running a
number of gardening enterprises. This particular organization has a huge display garden,
which it would be opening for the purpose of public inspection various number of times in
one year. Moreover, all other infrastructures would be moved into the cloud (Dinh et al.,
2013). They have taken the exclusive decision to initially move their Web services within the
cloud for providing an incremented level of HA or high availability and the better degree of
flexibility or scalability for the purpose of supplying data to all the employees or customers.
The various security risks or threats that are possible for their selected Hybrid Cloud should
be mitigated on time.
The following report outlines a brief discussion on the implementation of cloud
within the organization of Regional Gardens Ltd. Various significant details will be provided
in this report. A specific risk and security workshop for assessing the risks, several methods
to control these risks will also be provided here. Moreover, the BCP or business continuity
plan will also be given here. All the cloud architectures for this organization and the most
suitable architecture will be provided here. Moreover, the critical points or issues will also
be provided here.
Discussion
1. Selection of Cloud Architectures for a Hybrid Cloud and the Reasons for the Deployment
There are various important and significant cloud architectures that would be helpful
for the organization of Regional Gardens Ltd (Arora, Parashar & Transforming, 2013). The
three significant types of cloud architecture models are Infrastructure as a service or IaaS,

3
CLOUD COMPUTING
platform as a service or PaaS and software as a service or SaaS. All of these cloud
architecture models are extremely important for any organization as they help to reduce the
complexities of cloud services to a greater level. Regional Gardens Ltd. have decided to shift
to the hybrid cloud model. Hence they should be selecting such cloud architectures that are
the most suitable for their hybrid cloud approach (Fernando, Loke & Rahayu, 2013). The
proposed cloud architecture for the organization of Regional Gardens Ltd for their hybrid
cloud is PaaS or platform as a service.
PaaS or platform as a service is the platform based category of the various cloud
computing services, which is responsible for providing the platform and enabling the clients
or customers for developing, running and finally managing all the applications without any
type of complexity to build or maintain the basic infrastructure associated with the
development as well as launching of the application (Hashem et al., 2015). This platform as a
service could be eventually delivered in three ways. They are as a typical public cloud service
from the provider, where the consumer has the capability in controlling the software
deployment with minimum options of configuration and providing various networks,
operating system, storage and servers. The second method for delivering a platform as a
service is as a private service like appliance or software within the firewall and the final
method is as the software that is being deployed on any public IaaS or infrastructure as a
service. The main reason for proposing platform as a service is that it could be easily
implemented within the hybrid cloud. Since, they have decided to shift to hybrid cloud; PaaS
would be the bezst optrion for the organization of Regional Gardens Ltd (Li et al., 2013). The
best example of platform as a service model or PaaS model is AWS or Amazon Web Services.
Hence, PaaS should be selected by this organization.

4
CLOUD COMPUTING
2. Benefits and Issues for the Deployment of the Selected Cloud Architectures
There are various benefits as well as issues for deploying the platform as a service
within the organization of Regional Gardens Ltd. The major benefits for selecting this cloud
architecture are given below:
i) Faster in Nature: The first and the foremost advantage of the deployment of
platform as a service or PaaS is that it is extremely faster in nature. All the applications
would be eventually functioning properly as the service offerings (Garg, Versteeg & Buyya,
2013). Each and every hybrid platform as a service subsequently simplifies the entire
procedure of the deployment of applications, scaling and management is checked with the
help of this platform as a service. The developer productivity is properly incremented with
this process.
ii) Streamlining Application Management: The second important benefit of the
hybrid platform as a service is the proper streamlining of application management. For any
hybrid cloud, streamlining of the application management is mandatory and hence should
be done even for the organization of Regional Gardens Ltd (Xiao, Song & Chen, 2013).
Moreover, it helps to gain competitive advantages and access the information technology
infrastructure properly.
iii) Reduction of Complexities and Increment of Agility: The next important
advantages of the hybrid platform as a service cloud architecture is that it helps to reduce
the complexities to a greater level and the agility is eventually increased or incremented
(Rittinghouse & Ransome, 2016). The inheritable cloud architecture is checked in this
phenomenon and thus should be checked properly.

5
CLOUD COMPUTING
iv) Cost Effective: The next important advantage of this hybrid platform as a service
cloud architecture for the organization of Regional Gardens Ltd is that it is extremely cost
effective and hence could be easily afforded by everyone (Hashizume et al., 2013).
In spite of having all these advantages, there are some of the most significant risks
that are vulnerable for the hybrid platform as a service cloud architecture model. The major
risks are given below:
i) BCP and DR: The first and the foremost disadvantage of the hybrid platform as a
service cloud architecture model for the organization of Regional Gardens Ltd is the
business continuity planning and disaster recovery with the vendor of this platform as a
service (Jain & Paul, 2013). Both of these planning are extremely important for this
particular organization and these are eventually absent within the selected cloud
architecture model.
ii) Lack of SSDLC: Another significant risk within the cloud architecture model of
hybrid platform as a service is that it does not comprise of the secure software development
process life cycle or SSDLC (Yang & Jia, 2013). Due to the absence of secure software
development process life cycle, insecure code occurs within the architecture model.
iii) Lack of Adequate Provisions in SLA: The next risk within the cloud architecture
model is the lack of sufficient provisions in SLA. This is a major security concern for the users
of the cloud and thus Regional Gardens Ltd can be affected in the process.
3. Risks Associated with Hybrid Cloud and Micro services Strategy with their Controls
The hybrid cloud and the micro services strategy are always vulnerable to various
types of security risks and threats for their organization (Krishna, 2013). However, all these

6
CLOUD COMPUTING
risks and threats could be easily mitigated with the help of various mitigation controls. The
several risks or threats that are vulnerable for the hybrid cloud and the micro services
strategy with the mitigation and security controls are given below:
Security Risks
or Threats
Description of the Risks Mitigation or Control of the Risks
1. Lack of
Encryption
This is the most dangerous security risk for
the hybrid cloud and the micro services
strategy (Herbst, Kounev & Reussner, 2013).
The network transmissions that is
vulnerable for man in the middle as well as
eavesdropping attacks by means of
impersonating endpoints. There are two
types of algorithms in encryption. They are
symmetric key and asymmetric key
algorithms.
The only way to control or fix this
type of attack is the shield
transmissions from various random
attacks with the cryptographic
protocols including endpoint
authentication (Wei et al., 2014).
The employment of a reliable VPN
is another way to mitigate this
problem.
2. Inadequate
Security Risk
Assessment
The second important security risk or threat
is the inadequate security risk assessment.
The administrators of the network are
unable determine how and where the
intrusion is occurring (Rong, Nguyen &
Jaatun, 2013). Moreover, the future
breaches could not be prevented easily.
This particular type of security risk
or threat could be easily mitigated
by a proper risk prevention and
assessment. The IDS or IPS systems
must scan for the malicious traffic
or activities.
3. Lack of
Compliance
The hybrid clouds eventually need more for
the diligence, especially if it comes for
compliance (Botta et al., 2016). The
The only method to mitigate this
particular problem is by
coordinating the two clouds

7
CLOUD COMPUTING
maintenance as well as demonstration of
compliance is much difficult for the hybrid
cloud as data moves back and forth.
properly and the private and the
public cloud could be easily kept in
compliance (Gupta, Seetharaman &
Raj, 2013).
4. Weak
Security
Management
The lack of authentication is yet another
important issue in hybrid cloud and micro
services strategy. This is mainly because the
various cloud security protocols are not
integrated in this type of cloud (Almorsy,
Grundy & Müller, 2016).
The easiest method to mitigate this
type of issue is to replicate various
controls for both the controls.
Moreover, proper synchronization
of security of the data should be
done and this would help in
mitigation of all these risks
properly.
5. Poor Data
Redundancy
Another important and significant security
risk or threat is the poor data redundancy.
The lack of redundancy subsequently puts
the hybrid IT cloud at major risk and hence
the distribution of data should be done
properly.
The redundancy should be
implemented and this could be
done wither by using multiple data
centres from any one cloud
provider (Xiao & Xiao, 2013).
Furthermore, this could also be
implemented from various
providers of public cloud.
6. Failure in
Authentication
and
Identification
The next important security risk or threat in
the hybrid cloud and micro services strategy
for the organization of Regional Gardens Ltd
is the failure in proper authentication and
proper identification.
This issue could be easily fixed by
proper monitoring and verification
of every access permission and by
simply synchronization of data
security.
7. Unprotected This is again one of the most important The only way to mitigate this type

8
CLOUD COMPUTING
Application
Programming
Interfaces
security risks for the hybrid cloud of
Regional Gardens Ltd (Whaiduzzaman et al.,
2014). The end points of APIS or application
programming interfaces eventually expose
all the sensitive data to the malicious attacks
and thus exploiting the authorization and
authentication token for manipulation of
personal information or data.
of security risk or threat is by
handling the API keys similar as
encryption as well as code signing
keys (Sanaei et al., 2014). The third
party developers should e sure of
handling all these keys properly.
8. Denial of
Service
Attacks
The perpetrator or attacker makes the
machine or system completely unavailable
for all the authorized users and thus they
are unable to access the shared resources
like RAM or CPU properly (Tao et al., 2014).
Moreover, the attackers can also affect the
network bandwidth.
The denial of service or DoS attacks
could be easily mitigated with the
help of flow analytics. This would
eventually react to the incursion
and hence redirecting the traffic to
the mitigation device.
9. Poor IP
Protection
This is again one of the most important
security risk or threat for the organization of
Regional Gardens Ltd. It does not comprise
of high encryption as well as security
protocol within place. The proper
identification or classification could not be
done for this security risk.
This particular security risk or
threat could be mitigated by the
inadequate automated systems for
quantifying the risks (O’Driscoll,
Daugelaite & Sleator, 2013).
Furthermore, the source of the
threats should be known by the IT
team of the organization. The
network infrastructure should also
be made safe and secured.
10. Failure to This is the next significant security risk or This type of security risk or threat

9
CLOUD COMPUTING
Communicate
with the Cloud
Provider
threat to the hybrid cloud and micro
services strategy (Avram, 2014). The cloud
vendors should be vetted for the security
controls while they are handling the data.
could be mitigated by te verification
of data ownership as well as
security. The vendors of the hybrid
cloud do not have the ability in
providing reasonable ownership
expectations.
4. Information Security Steps and controls for Securing Hybrid Cloud
Information security is the proper practice to prevent the unauthorized access,
disclosure, utilization, destruction, modification, or recording the information. The various
information security steps or controls for proper security of the hybrid cloud are given
below:
i) Security from Advanced Threats: The first and the foremost information security
step and control to properly secure the hybrid cloud of the organization of Regional Gardens
Ltd is the proper security from the advanced threats. The network, storage as well as the
computing environments is properly protected from the various advanced threats (Khan et
al., 2013). The advanced threats eventually refer to the various types of dangerous attacks
that are taken by the world. These attacks often become a major issue for the organization,
who are dealing with them in their information systems and hybrid cloud. The security from
the advanced threats is the most significant and important requirement in the hybrid cloud.
Thus this would be the first step for the organization of Regional Gardens Ltd for eventually
securing their hybrid cloud.

10
CLOUD COMPUTING
ii) Scaling of Security: The second important and significant information security step
and control for perfectly securing the hybrid cloud of the organization of Regional Gardens
Ltd is the proper scaling of security for changing or adding the newer cloud providers (Carlin
& Curran, 2013). This security scaling is extremely important for this particular
organizational hybrid cloud as this would increase the security properly. The scaling of
security should be done by this organization.
iii) Keeping Operational Costs Lower: The third important step for the organization
of Regional Gardens Ltd to mitigate or control their security risks and controlling the hybrid
cloud is to keep the operational costs or expenses lower than usual (Oliveira, Thomas &
Espadanal, 2014). These operational costs should be checked or kept lower for the
betterment of the organization and thus the organization would be getting organizational
benefits eventually. These operational expenses could be kept lower by means of reducing
the complexities eventually.
iv) Getting Optimized Security: Another important information security step and
control is to get the optimized security. The hybrid deployments and the virtual
environments require this optimized networks eventually and thus should be properly
checked and basic mitigation strategies should be undertaken (Alshamaila, Papagiannidis &
Li, 2013). This optimization of security is extremely important for any organization. Thus,
Regional Gardens Ltd. should take up this step within their organization.
v) Obtaining Visibility: The fifth significant and important security control for the
organization of Regional Gardens Ltd is to obtain visibility within their hybrid cloud. The data
is thus protected in this manner and the storage of the data does not make any difference in
the phenomenon (Xia et al., 2016). Due to the visibility, the IT security team is able to notice

11
CLOUD COMPUTING
all the vulnerabilities or threats within the organization and thus mitigating each and every
risk or threat for the organization. This type of visibility is eventually for the betterment of
the security of the organization and hence is termed as the best of all.
5. Business Continuity Planning for Hybrid Cloud and Micro services Approach
Business continuity planning or BCP is the successful creation of any particular
strategy with the perfect identification of several security risks or threats, which are faced
by the organization with an assurance that all of their assets or personnel are properly safe
and secured and also have the ability to function in disasters (Pearson, 2013). This type of
planning involves the several important risks, which would be determining the procedure of
the risks, affecting every operation of the business. Various safeguards are also
implemented in this process and all these processes are designed to mitigate every security
risk. The processes are then tested properly to ensure that these processes are upgraded.
Regional Gardens Ltd. must develop a specific BCP in their business for reducing the
disasters of the system properly. Various issues are present within the hybrid cloud for
backup, disaster recovery and application resilience. The steps of the BCP of this
organization are given below:
i) The first and the foremost step of the BCP is to conduct the business impact
analysis for perfect recognition of time sensitiveness and several critical business processes
and resources that are supporting all the processes (Dinh et al., 2013).
ii) The next important step of the BCP is the proper recognition, documentation as
well as final implementation of the several security measures to properly recover from the
threats.

12
CLOUD COMPUTING
iii) The third significant step in business continuity planning for the organization of
Regional Gardens Ltd is the perfect organization of the business continuity team and finally
compiling the BCP for proper management of the business disruption (Arora, Parashar &
Transforming, 2013).
iv) The final step in the business continuity planning for the organization of Regional
Gardens Ltd is to conduct the training of the business continuity team and thus testing to
evaluate the strategies or planning.
The various issues that are related to the application resilience, backup and DR or
disaster recovery in the hybrid cloud environment. The several issues are given below:
i) Slow Adoption of Cloud: The first significant issue that is related to the application
resilience, backup and DR or disaster recovery in the hybrid cloud environment is the slow
adoption of cloud (Fernando, Loke & Rahayu, 2013). The protection of data is eventually
challenged in this phenomenon. Due to the slower adoption of cloud, the traditional storage
of data is targeted and hence this is resolved. The BCP can easily solve the issue without any
complexity.
ii) Slow Recoveries: The next significant problem that is related to backup or
recovery is the slow recovery of data. BCP thus could be helpful in this particular case as al
types of security controls are present (Hashem et al., 2015).
iii) Lack of Reliability and Scalability: The lack of reliability and scalability is another
important issue related to the application resilience. All the security measures are present
within cloud environment. Moreover, reliability of this cloud is extremely higher.
6. Remote Server Administration, Resource Management and SLA Management

13
CLOUD COMPUTING
There are various requirements for remote server administration for the
organization of Regional Gardens Ltd (Li et al., 2013). The most significant tools for remote
server administration are Server Manager, Consoles, Microsoft Management Console or
mmc snap ins, Windows PowerShell cmdlets and many more. All of these are extremely
important for the organization of Regional Gardens Ltd. This remote server administration is
mainly conducted for the IaaS and PaaS instances eventually. For the purpose resource
management, the most important requirements are the shared resources (Garg, Versteeg &
Buyya, 2013). This is extremely important for both the IaaS and PaaS and finally the SLA
management requirements are the cloud resources and services. The service level
agreement helps any user to manage all the cloud resources as well as services properly in
the IaaS and PaaS. Moreover, the negotiation of the SLA is also done subsequently.
7. Migration to AWS Services
The board of Regional Gardens Ltd has eventually decided for moving the email
instance to the Amazon Web Services cloud for the purpose of beginning the procedure of
migration and also testing the strategy (Xiao, Song & Chen, 2013). There are some of the
major steps for migration of the email instances to the AWS services. These steps are given
below:
i) Preparation of Migration: The first step of migration to the AWS services is the
preparation of migration. For this purpose a proper planning is required.
ii) Portfolio Discovery and Planning: The second step is the portfolio discovery as
well as planning (Rittinghouse & Ransome, 2016). The dependencies within the applications

14
CLOUD COMPUTING
and the various types of migration strategies that are employed for meeting the business
objectives are considered.
iii) Designing Application: The third step in the migration process is the designing of
application. This should be done properly.
iv) Migrating and Validating Application: The fourth step in the migration process is
the migration and validation of the applications (Hashizume et al., 2013).
v) Operating: The final step is the operation. This step would decide if the
application would run or not.
8. Critical Points and Issues for these Steps
The above mentioned steps of migration do comprise of some of the critical point or
issues. They are as follows:
i) Preparation of Migration: The main issue here is the wrong planning. If the plan
will not be made perfectly, the migration will not be done successfully (Jain & Paul, 2013).
ii) Portfolio Discovery and Planning: The main issue here is the inaccurate discovery
and planning of portfolio. If this portfolio is not made perfectly, it is sure to bring problems
for the migration.
iii) Designing Application: The main issue here is the wrong design of the
application. Wrong designing can lead to major failure of the system (Krishna, 2013).
iv) Migrating and Validating Application: The major critical point here is the
incorrect validation of application. It can make the application lack of redundancy.

15
CLOUD COMPUTING
v) Operating: The main critical issue in this step is the wrong operation of the
services.
Conclusion
Therefore, from the above discussion, conclusion can be drawn that cloud
computing is the most significant paradigm of information technology, which eventually
enables the ubiquitous access to the shared pool of configurable resources of systems and
the high level services, which could be rapidly provisioned with the minimum effort of
management on the Internet. This particular technology subsequently relies on the resource
sharing for the purpose of achieving coherence as well as economies of scale, which is
absolutely similar to the public utility. Each and every third party cloud subsequently
enables the companies in focusing on the major businesses and not only on the computer
infrastructure and maintenance. Cloud computing is responsible for allowing various
organizations in avoiding or minimizing the upfront costs of IT infrastructure. The
organization of Regional Gardens Ltd has decided to upgrade their systems for running
various numbers of IT related gardening enterprises. The above report will be outlining a
brief description on the implementation of cloud computing within the organization of
Regional Gardens Ltd. Eight specific questions will be answered in this report. The first part
discusses about the cloud architectures that are suitable for the organization and moreover
what are the benefits or issues of the cloud architecture selected. Moreover, the risks
related to the hybrid cloud and the micro services strategies are provided here. The
information security steps as well as controls recommended for the organization are also
given here. Remote server administration, SLA management and the resource management
are also provided here. The AWS cloud should be migrated properly for the migration

16
CLOUD COMPUTING
process and testing purposes. The final part of the report has explained about the critical
points or issues of the steps of migration.

17
CLOUD COMPUTING
References
Almorsy, M., Grundy, J., & Müller, I. (2016). An analysis of the cloud computing security
problem. arXiv preprint arXiv:1609.01107.
Alshamaila, Y., Papagiannidis, S., & Li, F. (2013). Cloud computing adoption by SMEs in the
north east of England: A multi-perspective framework. Journal of Enterprise
Information Management, 26(3), 250-275.
Arora, R., Parashar, A., & Transforming, C. C. I. (2013). Secure user data in cloud computing
using encryption algorithms. International journal of engineering research and
applications, 3(4), 1922-1926.
Avram, M. G. (2014). Advantages and challenges of adopting cloud computing from an
enterprise perspective. Procedia Technology, 12, 529-534.
Botta, A., De Donato, W., Persico, V., & Pescapé, A. (2016). Integration of cloud computing
and internet of things: a survey. Future Generation Computer Systems, 56, 684-700.
Carlin, S., & Curran, K. (2013). Cloud computing security. In Pervasive and Ubiquitous
Technology Innovations for Ambient Intelligence Environments (pp. 12-17). IGI
Global.
Dinh, H. T., Lee, C., Niyato, D., & Wang, P. (2013). A survey of mobile cloud computing:
architecture, applications, and approaches. Wireless communications and mobile
computing, 13(18), 1587-1611.
Fernando, N., Loke, S. W., & Rahayu, W. (2013). Mobile cloud computing: A survey. Future
generation computer systems, 29(1), 84-106.

18
CLOUD COMPUTING
Garg, S. K., Versteeg, S., & Buyya, R. (2013). A framework for ranking of cloud computing
services. Future Generation Computer Systems, 29(4), 1012-1023.
Gupta, P., Seetharaman, A., & Raj, J. R. (2013). The usage and adoption of cloud computing
by small and medium businesses. International Journal of Information
Management, 33(5), 861-874.
Hashem, I. A. T., Yaqoob, I., Anuar, N. B., Mokhtar, S., Gani, A., & Khan, S. U. (2015). The rise
of “big data” on cloud computing: Review and open research issues. Information
Systems, 47, 98-115.
Hashizume, K., Rosado, D. G., Fernández-Medina, E., & Fernandez, E. B. (2013). An analysis
of security issues for cloud computing. Journal of internet services and
applications, 4(1), 5.
Herbst, N. R., Kounev, S., & Reussner, R. H. (2013, June). Elasticity in Cloud Computing: What
It Is, and What It Is Not. In ICAC (Vol. 13, pp. 23-27).
Jain, R., & Paul, S. (2013). Network virtualization and software defined networking for cloud
computing: a survey. IEEE Communications Magazine, 51(11), 24-31.
Khan, A. N., Kiah, M. M., Khan, S. U., & Madani, S. A. (2013). Towards secure mobile cloud
computing: A survey. Future Generation Computer Systems, 29(5), 1278-1299.
Krishna, P. V. (2013). Honey bee behavior inspired load balancing of tasks in cloud
computing environments. Applied Soft Computing, 13(5), 2292-2303.

19
CLOUD COMPUTING
Li, M., Yu, S., Zheng, Y., Ren, K., & Lou, W. (2013). Scalable and secure sharing of personal
health records in cloud computing using attribute-based encryption. IEEE
transactions on parallel and distributed systems, 24(1), 131-143.
O’Driscoll, A., Daugelaite, J., & Sleator, R. D. (2013). ‘Big data’, Hadoop and cloud computing
in genomics. Journal of biomedical informatics, 46(5), 774-781.
Oliveira, T., Thomas, M., & Espadanal, M. (2014). Assessing the determinants of cloud
computing adoption: An analysis of the manufacturing and services
sectors. Information & Management, 51(5), 497-510.
Pearson, S. (2013). Privacy, security and trust in cloud computing. In Privacy and Security for
Cloud Computing (pp. 3-42). Springer, London.
Rittinghouse, J. W., & Ransome, J. F. (2016). Cloud computing: implementation,
management, and security. CRC press.
Rong, C., Nguyen, S. T., & Jaatun, M. G. (2013). Beyond lightning: A survey on security
challenges in cloud computing. Computers & Electrical Engineering, 39(1), 47-54.
Sanaei, Z., Abolfazli, S., Gani, A., & Buyya, R. (2014). Heterogeneity in mobile cloud
computing: taxonomy and open challenges. IEEE Communications Surveys &
Tutorials, 16(1), 369-392.
Tao, F., Cheng, Y., Da Xu, L., Zhang, L., & Li, B. H. (2014). CCIoT-CMfg: cloud computing and
internet of things-based cloud manufacturing service system. IEEE Transactions on
Industrial Informatics, 10(2), 1435-1442.

20
CLOUD COMPUTING
Wei, L., Zhu, H., Cao, Z., Dong, X., Jia, W., Chen, Y., & Vasilakos, A. V. (2014). Security and
privacy for storage and computation in cloud computing. Information Sciences, 258,
371-386.
Whaiduzzaman, M., Sookhak, M., Gani, A., & Buyya, R. (2014). A survey on vehicular cloud
computing. Journal of Network and Computer Applications, 40, 325-344.
Xia, Z., Wang, X., Zhang, L., Qin, Z., Sun, X., & Ren, K. (2016). A privacy-preserving and copy-
deterrence content-based image retrieval scheme in cloud computing. IEEE
Transactions on Information Forensics and Security, 11(11), 2594-2608.
Xiao, Z., & Xiao, Y. (2013). Security and privacy in cloud computing. IEEE Communications
Surveys & Tutorials, 15(2), 843-859.
Xiao, Z., Song, W., & Chen, Q. (2013). Dynamic resource allocation using virtual machines for
cloud computing environment. IEEE transactions on parallel and distributed
systems, 24(6), 1107-1117.
Yang, K., & Jia, X. (2013). An efficient and secure dynamic auditing protocol for data storage
in cloud computing. IEEE transactions on parallel and distributed systems, 24(9),
1717-1726.