...Cloud Computing Benefits, risks and recommendations for information security Rev.B – December 2012 2 Cloud Computing Benefits, risks and recommendations for information security Document History Date December 2009 Version 1.0 Modification Initial Release, Rev.A Author Daniele Catteddu, Giles Hogben Thomas Haeberlen Lionel Dupré December 2012 2.0 Rev.B About ENISA The European Network and Information Security Agency (ENISA) is a centre of network and information security expertise for the EU, its member states, the private sector and Europe’s citizens. ENISA works with these groups to develop advice and recommendations on good practice in information security. It assists EU member states in implementing relevant EU legislation and works to improve the resilience of Europe’s critical information infrastructure and networks. ENISA seeks to enhance existing expertise in EU member states by supporting the development of cross-border communities committed to improving network and information security throughout the EU. More information about ENISA and its work can be found at www.enisa.europa.eu. Contact details This report has been edited by: Lionel Dupré, Thomas Haeberlen For contacting ENISA or for general enquiries about this report, please use the following details: Email: resilience@enisa.europa.eu Internet: http://www.enisa.europa.eu Cloud Computing 3 Benefits, risks and recommendations for information security Legal notice Notice...
Words: 12166 - Pages: 49
...Analyzing the Dangers and Risk Associated with Cloud Computing in the Health Care Industry Alfonso I. Evans Excelsior College Abstract As technology continues to advance, so do the ever present threats to steal important information. Businesses all around the world are trying to cut cost to increase profits and sometimes it comes at the expense of information technology. One technological advance I will be analyzing is cloud computing and if it is a viable solution. The healthcare industry has begun putting patient information on networks that can be accessed by a number of physicians to maintain a complete record of health history. The problem with this system is that a single hospital does not have the space to maintain the supercomputers necessary to keep all that information so other solutions have to be examined. This assessment will look at the benefits and risk associated with cloud computing as it pertains to patient records. Analyzing the Dangers and Risk Associated with Cloud Computing in the Health Care Industry Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction (Mell & Grance, 2011). Cloud computing has become a valuable asset to businesses and individuals alike because it is convenient to...
Words: 1929 - Pages: 8
...The Benefits and Risks of Corporate Cloud Computing To compete in the competitive world of business entrepreneurs, business owners, and investors alike must think outside the box. There is no secret with today’s economy and all the hype surrounding government incentives that a major fact to doing business on a global scale is an efficiency information system. Information systems is define as interrelated components working together to collect, process, store, and disseminate information to support decision-making, coordination, control, analysis, and visualization in an organization. (Laudon G-7) This is one of the largest burdens face by corporate America. How to overcome the costs and obstacles which confronts companies seeking to break ground into new industries with adequate tools to accomplish their business goals can seem insurmountable. The Cloud’s computing utilities enable a nimble start up to compete with the capacity of established competitors’ captive data centers. Cloud programming models promise to democratize the web, enabling end user application development that supports enterprise and even Internet scale applications. (D. Thomas) Therefore, with the ever changing rate of new technology development corporations with small to medium infrastructure requirements have turned to cloud computing. With lower investment, training, planning and hardware requirements businesses have seemingly reap the benefits of cloud computing. However, do the...
Words: 2203 - Pages: 9
...Security Considerations for Cloud Computing Carlos Chandler Abstract Cloud computing is an emerging Information Technology (IT) model whereby a company utilizes a pay-per-use service for it computing needs rather than maintain a local data center run by its in-house IT department. By treating computing resources as a commodity or operating expense, it allows firms to focus less on IT and more on the core elements of the operations strategy. Because of advantages like this, its popularity has grown exponentially in recent years. However, cloud computing also has certain inherent risks in its present form. This paper seeks to understand the key advantages driving businesses to adopt this computing model in ever increasing numbers, while at the same time understanding what risks they are taking in doing so. To gain insight into these risks, this paper incorporates statistical research into what experts in the field believe to be the greatest down-sides to converting to this increasingly common IT model. Security Considerations for Cloud Computing What is Cloud Computing, Anyway? To begin, let us illustrate what cloud computing is. Imagine you run a cookie baking business that takes orders from around the country via an online store. To handle the orders, would your business buy a fleet of trucks and deliver its own shipments, or would you simply contract with UPS or FedEx to ship the orders on your behalf? Clearly the cost efficiencies in contracting the shipping...
Words: 1965 - Pages: 8
...CLOUD COMPUTING JOURNOUL Introduction Cloud computing is a most vital kind of data establishment, it is a substitute arrangement of action to give prevalent, irrelevant exertion preparing and information organizations, supporting particular combinations of data application. The quick change of distributed computing has brought an arrangement of non-standard security risks, and set forth a substitute and higher enthusiasm to data security. Cloud computing and its Security Issues Cloud computing otherwise called distributed computing is reevaluating the on - interest utilization of remotely put and especially available processing assets for the client. Tragically, while the different budgetary and mechanical purposes of speculation are clear, the movement of key division requests to the cloud has been limited because of a vital centerpiece: the absence of quantifiable estimations to review the tradeoffs (characteristics, issues and the business concerns) of security. In spite of the conspicuous worth of estimations in extraordinary circumstances to study such tradeoffs, a formal and standard - based framework for the tending to of security estimations in the cloud is a much harder and is an open issue. Additionally considering the consistent examination with relationship like the cloud security union and European meanders like Abc4trust, Comifin and INSPIRE. This paper likewise shows the cruciall building bits of a proposed security estimations structure for parts, for example...
Words: 950 - Pages: 4
...Cloud Computing Introduction Cloud computing is the idea of deploying groups of remote servers and software networks that allows remote access to computer resources. Cloud computing is the term that describes the delivery of computer as service rather than a product. The internet is like a cloud. Cloud computing users use the services of the computing. They don’t have ideas about the location of the computer infrastructure. Cloud computing provides computation, software, data access, and storage resources to its users. If businesses look for the computing services without establishing computing infrastructure, the cloud can be the solution to achieve the objective. How Cloud Computing works? Cloud computing changed the way of computer uses. It changed the concepts of use web and store the data. Cloud computing is the structure which was used by the sites like Google, Facebook, Twitter, Dropbox. Let’s consider that the cloud consists layers. There is the back-end layers and the front-end layers. Front-end is the public part and users can interact with the front end layer. For example, when we access on Google Drive, the public user interface is visible to us. The back-end consists of hardware and software architecture that delivers the data to the front-end. There are many computers integrated to work together in the cloud technology. The front-end application can use all available computer power to provide the services to end users. Cloud computing uses the network...
Words: 1233 - Pages: 5
...Zuora Inc. Venturing into Cloud Computing Executive Summary Zuora Inc is an industry leader in providing flexible, best in class billing software and platforms to Software-as-a-Service companies. Although only a year old, Zuora managed to outperform all its competitors and gain the leading market share, primarily on the strength of their corporate culture which lead to their aggressive marketing and sales team. However, an emerging trend in technology suggests that cloud computing may eclipse SaaS in the future. Economic downturn also threatens Zuora, as their funds are limited and the economy has caused valuations of companies to drop across the board. In order to suitably adapt to the changing marketplace, Zuora needs to make choices on how to grow and what areas to focus on, balancing the tradeoff given their limited resources. Zuora has three options available, choosing either to focus on just growing the SaaS slowly, expanding to the cloud computing market, or growing big to capture all subscription based businesses. Giving consideration the risk, cost, and strategic fit of these three options, the second one is the best choice for Zuora at this point in time. Zuora should expand into the cloud computing market while not neglecting the SaaS market. Current Situation Founded in December 2007, Zuora Inc was created to provide state of the art, low-cost billing systems for Software-as-a-Service. Zuora’s founding principle is that the world is moving from a manufacturing...
Words: 2270 - Pages: 10
...Economics of Cloud Computing B u s i n e s s W H iTe PA P e R Business Agility and the True Economics of Cloud Computing Executive Summary New groundbreaking global survey findings demonstrate the true value of cloud computing to the business. While it is understood in the industry that cloud computing provides clear cost benefits, CIOs are having difficulty getting a true fix on the business value that cloud might offer beyond cost reduction. These survey results reveal a direct link between cloud computing and business agility—how business outcomes are associated with agility, the role of IT for agile companies and the importance of cloud computing to business leaders. value to the enterprise. It shows that the hype around cloud computing is maturing into facts about what cloud can really deliver to both IT and the business. Game-changing CIOs think business transformation first, then how technology enables it. They are the ones strategizing with their CEOs and other business leaders to look beyond simple cost calculations to the business agility that cloud computing can enable. Defining Business Agility Business agility is the ability of a business to adapt rapidly and cost-efficiently in response to changes in the business environment. According to McKinsey & Company, the leading global management consulting firm, the benefits of agility include faster revenue growth, greater and more lasting cost reduction, and more effective management of risks and reputational...
Words: 2949 - Pages: 12
...535 Cloud Computing Summer Semester Table of Contents I. Executive Summary II. Definition/History of Cloud Computing - III. Background of Cloud Computing IV. Infrastructure and Platform as a Service V. Types of Cloud Computing environments VI. Benefits of Cloud Computing I. Executive Summary This research paper address some of the issues surrounding cloud computing as a model for enabling convenient on demand network access to a shared pool of configuration computing resources (e.g. network, servers, storage, applications and services.) The term cloud computing means that customers do not own network resources such as hardware software systems or service; network resources are delivered over the Web. While both the hype and promise surrounding cloud computing continue to accelerate at a rapid pace, confusion still remains about what exactly cloud computing is the risk and benefits associated with transitioning to cloud base environment. Additionally, this paper examines the advantages of cloud computing as well as the different types of cloud computing. Lastly, this paper outlines recommendations of how organizations use cloud computing to controlling risk and cost effectiveness. II. History /Definition of Cloud Computing History There was a time when every household, town farm or village had its own water well. Today, shared public utilities give us access to clean water by simple turning on the tap; cloud computing...
Words: 2489 - Pages: 10
...Running head: IN THE CLOUDS In the Clouds, the Future of Cloud Computing and Security Shane Thans American public University Abstract Cloud computing has grown in popularity and implantation across a wide venue of platforms and its uses have changed the way business and the private sector access and store not only data but applications and resources as well. The question that comes to mind is what the security of this platform is and what is in the future for cloud computing as a whole. The problem is with the growth of the cloud technology platform is that it is growing so fast in popularity that keeping all this information secure is trying to keep up with the security aspects of this new platform. The technology is growing and changing so quickly that as soon as we secure one area, hackers and those with the skills and time on their hands find way to circumvent the security put in place. In the Clouds, the Future of Cloud Computing and Security Cloud computing is a broad term, that covers not only storage but access to applications and information that resides on servers outside of the physical domain of the user. A major concern is the security of that platform, and most people do not even think twice about it. Today Approximately 90% of global internet users are already on the cloud – Danova, T. (2014). Most people do not even realize they are using cloud technology, and even fewer know what that even is., this is due to the integration of the technology in...
Words: 1469 - Pages: 6
...- 2011 Cloud Hooks: Security and Privacy Issues in Cloud Computing Wayne A. Jansen, NIST Abstract In meteorology, the most destructive extratropical cyclones evolve with the formation of a bent-back front and cloud head separated from the main polar-front, creating a hook that completely encircles a pocket of warm air with colder air. The most damaging winds occur near the tip of the hook. The cloud hook formation provides a useful analogy for cloud computing, in which the most acute obstacles with outsourced services (i.e., the cloud hook) are security and privacy issues. This paper identifies key issues, which are believed to have long-term significance in cloud computing security and privacy, based on documented problems and exhibited weaknesses. • applications can be developed upon and deployed. It can reduce the cost and complexity of buying, housing, and managing hardware and software components of the platform. Infrastructure-as-a-Service (IaaS) enables a software deployment model in which the basic computing infrastructure of servers, software, and network equipment is provided as an on-demand service upon which a platform to develop and execute applications can be founded. It can be used to avoid buying, housing, and managing the basic hardware and software infrastructure components. 1. Introduction Cloud computing has been defined by NIST as a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources...
Words: 7808 - Pages: 32
...What’s New About Cloud Computing Security? Yanpei Chen Vern Paxson Randy H. Katz Electrical Engineering and Computer Sciences University of California at Berkeley Technical Report No. UCB/EECS-2010-5 http://www.eecs.berkeley.edu/Pubs/TechRpts/2010/EECS-2010-5.html January 20, 2010 Copyright © 2010, by the author(s). All rights reserved. Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. To copy otherwise, to republish, to post on servers or to redistribute to lists, requires prior specific permission. What’s New About Cloud Computing Security? Yanpei Chen, Vern Paxson, Randy H. Katz CS Division, EECS Dept. UC Berkeley {ychen2, vern, randy}@eecs.berkeley.edu ABSTRACT While the economic case for cloud computing is compelling, the security challenges it poses are equally striking. In this work we strive to frame the full space of cloud-computing security issues, attempting to separate justified concerns from possible over-reactions. We examine contemporary and historical perspectives from industry, academia, government, and “black hats”. We argue that few cloud computing security issues are fundamentally new or fundamentally intractable; often what appears “new” is so only relative to “traditional” computing of the past several...
Words: 5878 - Pages: 24
...economics works with cloud computing. Is economics the way to go with cloud computing? What is the general understanding of economics when it comes to cloud computing? How will businesses benefit from cloud computing? Will cloud computing work within a budget of an organization? Businesses will economically grow and benefit with cloud computing. Cloud computing has significant implications for the way companies, businesses, and governments access and use information technology. It enables users to remotely access scalable, high-powered computing services via broadband networks from a range of devices, all on-demand. Cloud computing has the potential to provide users with increased computing capability, greater efficiency, and lower energy and infrastructure costs. According to Kevin Jackson of Forbes.com he describes cloud computing as a metrics. According to Kevin Jackson the four sets of cloud computing economics are the number of unique customer sets, customer set duty cycles, relative duty cycle displacement and customer set load. These metrics reduce resources and creates more resource demand. According to Mr. Jackson of Forbes.com this “properly balancing these factors across a well characterized user group can lead to approximately 30-percent savings in IT resources, and enables the near real-time modification of the underlying physical infrastructure required for the delivery of the desired “illusion of infinite resources” synonymous with a cloud computing user’s experience...
Words: 1324 - Pages: 6
...INTRODUCTION Cloud computing has boost a large amount of interest in the IT industry. The market research and analysis firm IDC suggests that the market for cloud computing services was $16bn in 2008 and will rise to $42bn/year by 2012 (Chhabra, Verma &ump; Taneja, 2010) .The era of cloud computing introduces a new dimension for Enterprises. The academia and research worlds have developed a keen interest into challenges and issues introduced by this relatively new concept (Sriram &ump; Khajeh-Hosseini, 2009). As experienced by large or small companies while adopting cloud computing technology, the issues can be outlined as security, privacy, data migration as (Hosseini, et al., 2010 ). Adoption of cloud technology by enterprises especially those are using KBE (knowledge based engineering) systems are in risk in terms of migration their data over the cloud. Most enterprises are in a midst of creating, sharing, streaming and storing data in digital formats to allow collaboration , hence there is a need to continuously managed and protect the data to ensure its value and authenticity (Yale &ump; Chow, 2011). Enterprises now acquire increasingly more information about their products, customers and partners- whether it’s stored in a cloud environment or not and failure to protect this data can be damaging. Partners and clients anticipate their information will be constantly protected before conducting business with a company. Within lay the need for complete data governance to...
Words: 2090 - Pages: 9
...Cloud computing is now evolving like never before, with companies of all shapes and sizes adapting to this new technology. Industry experts believe that this trend will only continue to grow and develop even further in the coming few years. While cloud computing is undoubtedly beneficial for mid-size to large companies, it is not without its downsides, especially for smaller businesses. We now bring you a list of advantages of disadvantages of cloud computing, with a view to helping such establishments fully understand the concept of cloud computing. Saas, Paas and IaaS in the Mobile Industry Advantages of Cloud Computing If used properly and to the extent necessary, working with data in the cloud can vastly benefit all types of businesses. Mentioned below are some of the advantages of this technology: Why Cloud Computing Is Ideal for Small Businesses Cost Efficient Cloud computing is probably the most cost efficient method to use, maintain and upgrade. Traditional desktop software costs companies a lot in terms of finance. Adding up the licensing fees for multiple users can prove to be very expensive for the establishment concerned. The cloud, on the other hand, is available at much cheaper rates and hence, can significantly lower the company’s IT expenses. Besides, there are many one-time-payment, pay-as-you-go and other scalable options available, which makes it very reasonable for the company in question. Almost Unlimited Storage Storing information in the cloud...
Words: 831 - Pages: 4
