Security And Privacy Of Cloud Computing Essay

Cloud computing is one of the fastest growing segment of Information technology today. In simple words cloud computing means storing and accessing data and programs over the internet instead on the computer's hard drive which can be accessed from any part of the world if the individual are connected to the internet or a network connection is available 24/7. A simple example of cloud computing is g-mail. With the connection of internet through any medium we can send and receive emails.

Cloud computing is a new technology that comes with both benefits and drawbacks and like any new tech it can be used to great success when paired with steps to mitigate the security issues it raises. Cloud computing has become somewhat of an ambiguous term often having different meaning for different people. An article in InfoWorld (2013) stated, ”Cloud computing comes into focus only when you think about what IT always needs: a way to increase capacity or add capabilities on the fly without investing in new infrastructure, training new personnel, or licensing new software. Cloud computing encompasses any

Cloud computing is where an individual can save data on a server rather than their own system, such as on their hard drive. This allows more data to be created without it effecting the individual’s computer. An example is one drive by Microsoft.

Cloud computing is an internet based computing which provides various applications and services like storage, servers, infrastructure, networking with low cost, on-demand self service, pay as you go model, location independent resource pooling, reasonable price , rapid elasticity etc. Cloud computing is one way to increase the capacity add capabilities without investing in new infrastructures like computer hardware involves storage memory, licensing for new software, training for a person and in a dynamic way.

Cloud computing is the practice of storing, managing, and processing data on a network of remote servers hosted on the internet, instead of locally on servers or hard drives. Cloud computing has unlimited storage, capacity and scalability, as well as back up and recovery systems. It allows you to access your data anywhere with an internet connection. However, security and privacy is a concern when managing confidential data.

The risk of cloud computing could be the security of the information being stored by a large company like Amazon. It is still unclear how safe out-sourced data is and when using these services ownership of data is not always clear. In a study done in 2009, a team of computer scientists from the University of California, San Diego and Massachusetts Institute of Technology examined the widely-used Amazon EC2 services. They found that ‘it is possible to map the internal cloud infrastructure, identify where a particular target VM is likely to reside, and then instantiate new VMs until one is placed co-resident with the target’ (Ristenpart et al. 2009: 199). This demonstrated that the research team was able to load their eavesdropping software onto the same servers hosting targeted websites (Hardesty 2009). By identifying the target VMs, attackers can potentially monitor the cache (a small allotment of high-speed memory used to store frequently-used information) in order to steal data hosted on the same physical machine (Hardesty 2009). Such an attack is also known as side-channel attack. The findings of this research may

Despite these advantages, cloud computing carries with it some inherent risks that need to be evaluated before a firm makes the decision to adopt this computing model. In order to eschew the in-house data center and IT department for a cloud-based solution, a business must hand over its most sensitive data to a third party service provider—this requirement carries with it major drawbacks, as we will see. A recently conducted survey of nearly 300 IT Experts done by the Journal of Computer Information Systems found the three primary concerns are loss governance, service availability, and information security (Dutta, Peng, & Choudhary, 2013).

Cloud computing is a computing resource which provides service through internet. Cloud computing provides various service models such as Platform as a Service (PaaS) where developer can design, build and test application that run on cloud providers infrastructure. [1] Example: Google application engine, Software as a Service (SaaS) is

Firstly, it is necessary to clearly explain the definition of cloud computing. Cloud computing is a delivery service model with five essential characteristics of cloud computing which includes: on-demand self service, broad network access, resource pooling, rapid elasticity and measured service. It is also a general term for anything that includes conveying facilitated administrations over the Internet.

Cloud services: The organizations have been highly dependent on the cloud services. The cybercriminals have been seeking ways to exploit corporate security policies for protecting cloud services. The cloud services have been providing immense risk of data being disclosed deliberately or accidentally. The hosting companies have a greater ease of control over the private data and information and can even communicate between the end user and access his user data even without his permission. Therefore this threat has to be placed at the highest priority. Additionally, the cloud providers have the authority to the share information with any of the third parties even without any warrant. All these activities poses privacy concerns as the data can be access on the cloud anywhere and anytime where the information can be deleted, or even altered. All these activities have further left a room for potential unwanted disclosure of data and information on the cloud. Thus using cloud services in an organization poses a threat to exploitation and stealing of confidential data by their competitors, cybercriminals and vigilante justice seekers (Shaikh, F. B., & Haider, S., 2011).

Cloud computing is a shared resource that holds valuable data from masses of people and organisations and is therefore an easy target for hackers. Security within cloud computing involves a set of control-based technologies, polices, processes and standards to protect information, data applications and infrastructures related to cloud computing usage. Security within this area addresses the physical and logical security issues across the different service models as well as how these services are delivered ie.via the public, private or hybrid model. There are many points of entry for an attacker in the cloud environment and people are more exposed to data breaches than they think e.g. using an insecure website on your mobile phone or if a database administrator shares a password, personal details can be accessed.

This paper analyses security of Docker. The security is tested using two contexts: 1.Internal security in Docker.2.Interaction of Docker with Linux security features. This paper also discuss about ways to increase security in Docker. Container-based virtualization is able to provide a more lightweight and efficient virtual environment, but not without security concerns. The structure of paper is as follows: 1. Introduction to Cloud Computing; 2. Docker Engine; Docker Container; 3.Docker security analysis; 4.Docker internal security.

Cloud computing is a relatively new business model in the computing world. According to the official NIST definition, "cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications and services) that can be rapidly provisioned and released with minimal management effort or

Cloud computing is a form of computing in which large groups of remote servers are networked to allow centralized data storage and online access to computer services or resources [Wikipedia].

Cloud computing is a model for allowing convenient on-demand access from anywhere to a shared pool of computing resources. These can include servers’ storage, networking, applications, and services that can be rapidly and easily provisioned and released.