Security in the cloud

TL;DR: This work aims to promote the use of multi-clouds due to its ability to reduce security risks that affect the cloud computing user.

TL;DR: In this article, the authors present a descriptive literature review and classification scheme for cloud computing research, which includes 205 refereed journal articles published since the inception of cloud computing and classify them into four main categories: technological issues, business issues, domains and applications, and conceptualizing cloud computing.

TL;DR: The focus of this paper is on mitigation for cloud computing security risks as a fundamental step towards ensuring secure cloud computing environments.

TL;DR: How IT-based capabilities may be used to leverage cloud delivery models to positively influence the successful implementation of cloud computing, and ultimately, firm performance for the processes and operations supported by the cloud is discussed.

TL;DR: It is shown that it is possible to map the internal cloud infrastructure, identify where a particular target VM is likely to reside, and then instantiate new VMs until one is placed co-resident with the target, and how such placement can then be used to mount cross-VM side-channel attacks to extract information from a target VM on the same machine.

TL;DR: This work considers the problem of building a secure cloud storage service on top of a public cloud infrastructure where the service provider is not completely trusted by the customer and describes several architectures that combine recent and non-standard cryptographic primitives to achieve this goal.

TL;DR: This work presents a solution that is highly scalable, centralizes guest protection into a security VM, supports Linux and Windows operating systems and can be easily extended to support new operating systems, and does not assume any a-priori semantic knowledge of the guest.