Security issues in cloud environments: a survey

• Published in: International journal of information security Vol. 13; no. 2; pp. 113 - 170
• Main Authors: Fernandes, Diogo A. B., Soares, Liliana F. B., Gomes, João V., Freire, Mário M., Inácio, Pedro R. M.
• Format: Journal Article
• Language: English
• Published: Berlin/Heidelberg Springer Berlin Heidelberg 01.04.2014; Springer Nature B.V
• Subjects: Automation; Classification; Cloud computing; Coding and Information Theory; Communications Engineering; Computation; Computer centers; Computer Communication Networks; Computer information security; Computer Science; Computers; Cryptology; Customer services; Cybersecurity; Data centers; Internet; Literature reviews; Management of Computing and Information Systems; Networks; Operating Systems; Polls & surveys; Security; Software services; Special Issue Paper; Studies; Utility computing; Cloud computing; Survey; Clouds; Security; Issues
• ISSN: 1615-5262; 1615-5270
• DOI: 10.1007/s10207-013-0208-7

In the last few years, the appealing features of cloud computing have been fueling the integration of cloud environments in the industry, which has been consequently motivating the research on related technologies by both the industry and the academia. The possibility of paying-as-you-go mixed with an on-demand elastic operation is changing the enterprise computing model, shifting on-premises infrastructures to off-premises data centers, accessed over the Internet and managed by cloud hosting providers. Regardless of its advantages, the transition to this computing paradigm raises security concerns, which are the subject of several studies. Besides of the issues derived from Web technologies and the Internet, clouds introduce new issues that should be cleared out first in order to further allow the number of cloud deployments to increase. This paper surveys the works on cloud security issues, making a comprehensive review of the literature on the subject. It addresses several key topics, namely vulnerabilities, threats, and attacks, proposing a taxonomy for their classification. It also contains a thorough review of the main concepts concerning the security state of cloud environments and discusses several open research topics.