Volume-2 , Issue-3 , Jun 2014, ISSN 2320-7639 (Online) Go Back

• Open Access   Article

  Analysis of Cloud Computing Security Issues in Software as a Service

  Vishnu Patidar, Makhan Kumbhkar

  Review Paper | Isroset-Journal (IJSRCSE)

  Vol.2 , Issue.3 , pp.1-5, May-2014

  Abstract

  Full-Text HTML

  References

  Citation

  Abstract
  Cloud computing is current buzzword in the market. It is standard in which the assets can be leveraged on per use basis thus reducing the cost and complexity of service providers. Cloud computing promises to cut operational and capital costs and more importantly let IT departments focus on strategic projects instead of keeping datacenters running. It is much more than simple internet. It is a construct that allows user to access applications that actually reside at location other than user’s own computer or other Internet-connected devices. There are numerous benefits of this construct. For instance other company hosts user application[1]. This implies that they handle cost of servers, they manage software updates and depending on the contract user pays less i.e. for the service only. Confidentiality, Integrity, Availability, Authenticity, and Privacy are essential concerns for both Cloud providers and consumers as well. Software as a Service (SaaS) serves as the foundation layer for the other delivery models, and a lack of security in this layer will certainly affect the other delivery models, i.e., PaaS, and SaaS that are built upon IaaS layer. This paper presents an elaborated study of SaaS components’ security and determines vulnerabilities and countermeasures. Service Level Agreement should be Considered very much importance [1].

  Key-Words / Index Term
  Computing, Cloud Computing Security, Service Level Agreement (SLA), Software as a Service (SaaS)

  References
  [1].M. Jensen, J. Schwenk, N. Gruschka, and L. Lo Iacono, “ Technical Security Issues in Cloud Computing”. IEEE, 2009.
  [2]. Greg Boss, Padma Malladi, Denis Quan, Linda Legregni, Harold Hall, “Cloud Computing”, http://www.ibm.com/developerswork/websphere/zones/hip ods/library.html, October 2007, pp. 4-4.
  [3]G. Frankova, Service Level Agreements: Web Services and Security, ser. Lecture Notes in Computer Science. Berlin, Heidelberg: Springer Berlin Heidelberg, 2007, vol. 4607.
  [4]. “Service Level Agreement and Master Service Agreement”, http://www.softlayer.com/sla.html, accessed on April 05, 2009.
  [5]. S. Berger, R. Caceres, D. Pendarakis, R. Sailer, E. Valdez, R. Perez, W. Schildhauer, and D. Srinivasan, “Security for the cloud infrastrcture: trusted virtual data center (TVDc).” [Online]. Available: www.kiskeya.net/ramon/work/pubs/ibmjrd09.pdf
  [6]. http://www.cloudsecurity.org, accessed on April 10, 2009.
  [7]. “Sampling issues we are addressing”, http://cloudsecurityalliance.org/issues.html#15, accessed on April 09, 2009.
  [8]. MikeKavis,”Real time transactions in the cloud”, http://www.kavistechnology.com/ blog/?p=789, accessed on April 12, 2009.
  [9]. “Secure group addresses cloud computing risks”, http://www.secpoint.com/security-group-addresses-cloudcomputing- risks.html, April 25, 2009.
  [10]. “Service Level Agreement Definition and contents”, http://www.service-level-agreement.net, accessed on March 10, 2009.
  [11]“Cloud security alliance: Security guidance for critical areas of focus in cloud computing v2.1,” Dec 2009. Available at: www.cloudsecurityalliance.org.
  [12]. “Wesam Dawoud, Ibrahim Takouna, Christoph Meinel Infrastructure as a Service Security.
  [13]. Dynamic job Scheduling in Cloud Computing based on horizontal load “Mousumi Paul1, Debabrata Samanta2, Goutam Sanyal3 Department of CSE” Vol 2 (5), 1552-1556, ISSN:2229-6093
  [14]. V. Vijayalakshmi et al. / International Journal of Engineering Science and Technology (IJEST) “STUDY ON RECENT TRENDS AND OPPORTUNITIES IN CLOUD COMPUTING”
  [15]. M.Sudha et. al. / (IJCSE) International Journal on Computer Science and Engineering “Investigation on Efficient Management of workflows in cloud computing Environment”, Vol. 02, No. 05, 2010.
  [16] S L Saini, Dinesh Kumar Saini, Jabar H. Yousif and Sandhya V Khandage “Cloud Computing and Enterprise Resource Planning Systems” , ISSN: 2078-0958 (Print); ISSN: 2078-0966 (Online)
  [17 ] M.Sudha et. al. / (IJCSE) International Journal on Computer Science and Engineering Vol. 02, No. 05, 2010, 1841-1845 , “Investigation on Efficient Management of workflows in cloud computing Environment “
  [18] SADHANA RANA . “ RISK ANALYSIS IN WEB APPLICATIONS BY USING CLOUD COMPUTING” , International Journal of Multidisciplinary Research Vol.2 Issue 1, January 2012, ISSN 2231 5780.
  [19] Makhan Kumbhkar at el ,“Performance Improvement of Software as a Service and Platform as a Service in Cloud Computing Solution” Vol-1,Issue-6 ISSN: 2320-7639.
  

  Citation
  Vishnu Patidar, Makhan Kumbhkar, "Analysis of Cloud Computing Security Issues in Software as a Service," International Journal of Scientific Research in Computer Science and Engineering, Vol.2, Issue.3, pp.1-5, 2014

• Open Access   Article

  Security in Cloud Environment

  Vishal Kadam, Makhan Kumbhkar

  Technical Paper | Isroset-Journal (IJSRCSE)

  Vol.2 , Issue.3 , pp.6-10, May-2014

  Abstract

  Full-Text HTML

  References

  Citation

  Abstract
  Cloud computing is known as one of the big next things in information technology world. Unlike other traditional computing system, cloud computing paradigm that provide unlimited infrastructure to store or execute client‟s data/program. Cloud computing is a long dreamed vision of computing as a utility, where data owners can remotely store their data in the cloud to enjoy on- demand highly-quality application and services from a shared pool of configurable computing resources. This paper gives a brief introduction of cloud computing its types and security issue and approaches to secure the data in the cloud environment.

  Key-Words / Index Term
  Cloud Computing, Security, SAAS, PAAS, IAAS, Public cloud, Private cloud, Hybrid cloud

  References
  [1] Makhan Kumbhkar at el International Journal of Scientific Research in Computer Science and Engineering , Vol-1, Issue-6 ISSN: 2320-7639 “Performance Improvement of Software as a Service and Platform as a Service in Cloud Computing Solution”
  [2] Vishal Jain and Mahesh Kumar “Information Retrieval through Multi-Agent System with Data Mining in Cloud Computing”, ISSN:2229-6093, Vol 3 (1), 62-66.
  [3]. Andreas Klein, Christian Mannweiler, Joerg Schneider, and Hans D. Schotten. Access schemes for mobile cloud computing. In Eleventh International Conference on Mobile Data Management (MDM), 2010, pages 387–392, 2010.
  [4]. Amlan Jyoti Choudhury, Pardeep Kumar,Mangal Sain, Hyotaek Lim, Hoon Jae-Lee, “A Strong User
  Authentication Framework for Cloud Computing” 2011 IEEE Asia -Pacific Services Computing Conference
  [4]. Ramgovind S, Eloff MM, Smith E, “The Management of Security in Cloud Computing”2010 IEEE
  [6]. Bhagyaraj Gowrigolla, Sathyalakshmi Sivaji, M.Roberts Masillamani, “Design and Auditing of Cloud Computing Security “ 2010
  [7]. Elisa Bertino, Federica Paci, Rodolfo Ferrini, Ning Shang, “Privacy-preserving Digital Identity Management for Cloud Computing” Bulletin of the IEEE Computer Society Technical Committee on Data Engineering ,2009
  [8]. Richard Chow, Philippe Golle, Markus Jakobsson, Ryusuke Masuoka, Jesus Molina, Elaine Shi, Jessica Staddon Parc, “ Controlling Data in the Cloud:Outsourcing Computation without Outsourcing Control”CCSW’09, November 13, 2009, Chicago, Illinois, USA
  [9] Richard Chow Parc, Markus Jakobsson FatSkunk, Ryusuke Masuoka, “Authentication in the Clouds: A Framework and its Application to Mobile Users” CCSW’10, October 8, 2010, Chicago, Illinois, USA
  [10]. “Security and Privacy Challenges in Cloud Computing Environments” Copublished by the IEEE computer and reliability societies,November/December 2010
  [11]. Hongwei Li, Yuanshun Dai1, Ling Tian, and Haomiao Yang, “Identity-Based Authentication for Cloud Computing” M.G. Jaatun, G. Zhao, and C. Rong (Eds.): CloudCom 2009, LNCS 5931, pp. 157–166, 2009. Springer-Verlag Berlin Heidelberg 2009
  [12]. K.Valli Madhavi, R.Tamilkodi, R.BalaDinakar, “ Data Storage Security in Cloud Computing for Ensuring Effective and Flexible Distributed System”, National Conference on Research Trends in Computer Science and Technology – 2012, Volume 3, Issue (1) NCRTCST, ISSN 2249 –071X
  [13].Kim,TaeYoug,Lee,shirly,Lee,Hoonjae, “Mutual authentication Scheme for cloud computing” Security comm. Network 2010; Available online http://mc.manuscriptcentral.com/scn
  

  Citation
  Vishal Kadam, Makhan Kumbhkar , "Security in Cloud Environment," International Journal of Scientific Research in Computer Science and Engineering, Vol.2, Issue.3, pp.6-10, 2014