文章基本信息

标题：Security Policy Enforcement in Cloud Infrastructure
本地全文：下载
作者：Arijit Ukil ; Ajanta De Sarkar ; Debasish Jana 等
期刊名称：Computer Science & Information Technology
电子版ISSN：2231-5403
出版年度：2013
卷号：3
期号：5
页码：01-09
DOI：10.5121/csit.2013.3501
出版社：Academy & Industry Research Collaboration Center (AIRCC)
摘要：Cloud computing is a computing environment consisting of different facilitating components like hardware, software, firmware, networking, and services. Internet or a private network provides the required backbone to deliver the cloud services. The benefits of cloud computing like "on-demand, customized resource availability and performance management" are overpowered by the associated security risks to the cloud system, particularly to the cloud users or clients. Existing traditional IT and enterprise security are not adequate to address the cloud security issues. In order to deploy different cloud applications, it is understood that security concerns of cloud computing are to be effectively addressed. Cloud security is such an area which deals with the concerns and vulnerabilities of cloud computing for ensuring safer computing environment. This paper explores the challenges and issues of security concerns of cloud computing through different standard and novel solutions. This paper proposes architecture for incorporating different security schemes, techniques and protocols for cloud computing, particularly in Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS) systems. The proposed architecture is generic in nature, not dependent on the type of cloud deployment, application agnostic and is not coupled with the underlying backbone. This would facilitate to manage the cloud system more effectively and provide the administrator to include the specific solution to counter the threat
关键词：Cloud computing; security; PaaS; IaaS; authentication.