Featured Research

from universities, journals, and other organizations

Blue skies thinking for cloud security?

Date:
March 10, 2010
Source:
Inderscience
Summary:
As cloud computing moves data and services from local systems to remote centers, the question of security for organizations must be addressed. A research paper suggests that a cloud-free security model is the best way forward and will circumvent the fact that cloud service providers are not yet meeting regulations and legal standards.

As cloud computing moves data and services from local systems to remote centres, the question of security for organisations must be addressed. A research paper published in the International Journal of Services and Standards suggests that a cloud-free security model is the best way forward and will circumvent the fact that cloud service providers are not yet meeting regulations and legal standards.

In the early days of computing, users accessed resources using desktop terminals connected to a mainframe. The personal computer changed all that uniting the input, processing and output devices in a single machine.

Recently, however, the merits of separating the computers on our desks and in our pockets from the processing workhorses has re-emerged especially as broadband and mobile networks have got faster. Today, countless business and individuals access their email and documents on remote web-based systems. Social networking tools, such as MySpace, Facebook, and Twitter maintain data on remote servers accessed through a web browser. Data storage and back up too are often undertaken on remote servers.

In this "cloud" model of computing, data and services are held in a connected cloud of computers and users access them from devices that are sophisticated versions of the old dummy terminals in the mainframe model. "Cloud computing is characterised by low investment cost, economies of scale, open standards and sustainability, and is being increasingly adopted by organisations," explains Manal Yunis of the School of Business, at the Lebanese American University, in Beirut.

Google and others offering online office tools and email systems, and remote web services and hosting from the likes of Amazon aimed at e-commerce sites are establishing the cloud as the future of computing. Other companies are offering cloud-based antivirus, social networking, file sharing, and other services. Almost half of all internet users are utilising cloud resources in some shape or form. While the cloud is growing, now is probably the best time to address the issue of data and service security.

Yunis has developed a model to assess all the various risks associated with relocating an organisation's data and services to remote computer servers in the clouds. "The model can be applied in assessing the security issues emanating from cloud computing, identifying the security countermeasures needed to address these issues and coordinating the efforts of the various participants to enhance information security in organisations adopting cloud computing," explains Yunis.

She points out that there are six important issues that must be addressed to ensure an organisation or individual's use of cloud computing is not compromised.

The first is "resource sharing. On shared services, there is the possibility that another user on the same system may gain access inadvertently or deliberately to one's data, with potential for identity theft, fraud, or industrial sabotage. Second, because data is held offsite data ownership might be compromised. Third, the intrinsic latency of transferring data back and forth for processing in the cloud means that some users might lower encryption levels to cut send and receive delays, giving rise to additional security concerns. Fourth, the issue of Service Line Agreements (SLAs) may lead to an organisation being refused access to data and services if there are technical, security or commercial disagreements between them and the cloud service provider. Fifth, data might be lost or otherwise compromised because of a technical or other failure on the part of the provider. Finally, negative aspects of interoperability and portability in which failure or attack of a virtual component in the processing and storage may compromise security.

Yunis' cloud-free approach to cloud security involves two points that taken together offer an optimal approach to cloud security: risk assessment of data and threats and a security management plan to address the conclusions from the assessment. The management of security risk involves users, the technology itself, the cloud service providers, and the legal aspects of the data and services being used. "This last point is critical given the fact that most cloud providers, if not all, do not meet the current compliance rules and regulations," says Yunis.

Understanding and controlling security risks when using cloud computing must be based on an analysis of the potential losses (caused by the cloud computing security risks) against potential benefits and cost savings (originating from using cloud computing's scalability and low cost) compared to conventional data storage and processing.


Story Source:

The above story is based on materials provided by Inderscience. Note: Materials may be edited for content and length.


Journal Reference:

  1. Manal M. Yunis. A 'cloud-free' security model for cloud computing. Int. J. Services and Standards, 2009; 5: 354-375

Cite This Page:

Inderscience. "Blue skies thinking for cloud security?." ScienceDaily. ScienceDaily, 10 March 2010. <www.sciencedaily.com/releases/2010/03/100310083838.htm>.
Inderscience. (2010, March 10). Blue skies thinking for cloud security?. ScienceDaily. Retrieved April 24, 2014 from www.sciencedaily.com/releases/2010/03/100310083838.htm
Inderscience. "Blue skies thinking for cloud security?." ScienceDaily. www.sciencedaily.com/releases/2010/03/100310083838.htm (accessed April 24, 2014).

Share This



More Computers & Math News

Thursday, April 24, 2014

Featured Research

from universities, journals, and other organizations


Featured Videos

from AP, Reuters, AFP, and other news services

Monkeys Are Better At Math Than We Thought, Study Shows

Monkeys Are Better At Math Than We Thought, Study Shows

Newsy (Apr. 23, 2014) A Harvard University study suggests monkeys can use symbols to perform basic math calculations. Video provided by Newsy
Powered by NewsLook.com
High Court to Hear Dispute of TV Over Internet

High Court to Hear Dispute of TV Over Internet

AP (Apr. 22, 2014) The future of Aereo, an online service that provides over-the-air TV channels, hinges on a battle with broadcasters that goes before the U.S. Supreme Court on Tuesday. (April 22) Video provided by AP
Powered by NewsLook.com
Aereo Takes on Broadcast TV Titans in Supreme Court Today

Aereo Takes on Broadcast TV Titans in Supreme Court Today

TheStreet (Apr. 22, 2014) Aereo heads to the Supreme Court today to fight for its right to stream broadcast TV over the Internet -- against broadcasters who say the start-up infringes upon copyright law. TheStreet Deputy Managing Editor Leon Lazaroff explains the importance of the case in the TV industry and details what the outcome of it could mean for broadcasters and for cloud storage services -- as Aereo allows its subscribers to not just watch live TV shows but also store content to a DVR in the cloud. Video provided by TheStreet
Powered by NewsLook.com
Lytro Introduces 'Illum,' A Professional Light-Field Camera

Lytro Introduces 'Illum,' A Professional Light-Field Camera

Newsy (Apr. 22, 2014) The light-field photography engineers at Lytro unveiled their next innovation: a professional DSLR-like camera called "Illum." Video provided by Newsy
Powered by NewsLook.com

Search ScienceDaily

Number of stories in archives: 140,361

Find with keyword(s):
Enter a keyword or phrase to search ScienceDaily for related topics and research stories.

Save/Print:
Share:

Breaking News:
from the past week

In Other News

... from NewsDaily.com

Science News

Health News

Environment News

Technology News



Save/Print:
Share:

Free Subscriptions


Get the latest science news with ScienceDaily's free email newsletters, updated daily and weekly. Or view hourly updated newsfeeds in your RSS reader:

Get Social & Mobile


Keep up to date with the latest news from ScienceDaily via social networks and mobile apps:

Have Feedback?


Tell us what you think of ScienceDaily -- we welcome both positive and negative comments. Have any problems using the site? Questions?
Mobile: iPhone Android Web
Follow: Facebook Twitter Google+
Subscribe: RSS Feeds Email Newsletters
Latest Headlines Health & Medicine Mind & Brain Space & Time Matter & Energy Computers & Math Plants & Animals Earth & Climate Fossils & Ruins