Policing as a Service in the Cloud

• Published in: Information security journal (Print) Vol. 23; no. 4-6; pp. 148 - 158
• Main Authors: Zargari, Shahrzad A., Smith, Anthony
• Format: Journal Article Conference Proceeding
• Language: English
• Published: Philadelphia, PA Taylor & Francis 04.07.2014
• Subjects: Applied sciences; Cloud computing; cloud computing security; Computation; Computer information security; Computer science; control theory; systems; Computer systems and distributed systems. User interface; Computer systems performance. Reliability; confidentiality; Customizing; data protection; data security; Exact sciences and technology; Gain; Guards; Memory and file management (including protection and security); Memory organisation. Data processing; Monitors; multi-jurisdiction; policing; Privacy; Software; trust; Private life; trust; Cloud computing; Transparency; policing; Forensic science; data security; Customization; privacy; Barrier; multi-jurisdiction; Audit; cloud computing security; User service; Confidence; Confidentiality; Information protection; Security of data; Complication; Intention; data protection; Purchases; Computer security
• ISSN: 1939-3555; 1939-3547
• DOI: 10.1080/19393555.2014.931490

Security and privacy are fundamental concerns in cloud computing both in terms of legal complications and user trust. Cloud computing is a new computing paradigm, aiming to provide reliable, customized, and guaranteed computing dynamic environment for end users. However, the existing security and privacy issues in the cloud still present a strong barrier for users to adopt cloud computing solutions. This paper investigates the security and privacy challenges in cloud computing in order to explore methods that improve the users' trust in the adaptation of the cloud. Policing as a Service can be offered by the cloud providers with the intention of empowering users to monitor and guard their assets in the cloud. This service is beneficial both to the cloud providers and the users. However, at first, the cloud providers may only be able to offer basic auditing services due to undeveloped tools and applications. Similar to other services delivered in the cloud, users can purchase this service to gain some control over their data. The subservices of the proposed service can be Privacy as a Service and Forensics as a Service. These services give users a sense of transparency and control over their data in the cloud while better security and privacy safeguards are sought.