Privacy and Security for Cloud Computing

Despite the enormous potential of cloud computing, consumer uncertainty and concern regarding issues of privacy, security and trust remain a major barrier to the switch to cloud models.

This comprehensive and authoritative text/reference provides an in-depth analysis of the latest advances in privacy, security and risk technologies within cloud environments. Containing contributions from leading experts in the field, the text presents both a thorough introduction to the core issues, and a practical selection of innovative solutions to common problems. A Glossary is also included at the end of the book.

Topics and features:

• Considers the various forensic challenges for legal access to data in a cloud computing environment
• Discusses privacy impact assessments for the cloud, and examines the use of cloud audits to attenuate cloud security problems
• Reviews conceptual issues, basic requirements and practical suggestions for provisioning dynamically configured access control services in the cloud
• Proposes scoped invariants as a primitive for analyzing a cloud server for its integrity properties
• Investigates the applicability of existing controls for mitigating information security risks to cloud computing environments

• Describes risk management for cloud computing from an enterprise perspective This pioneering volume is essential reading for business professionals, students and researchers interested in the field of privacy and security protection for the cloud, and/or complex service provisioning. Newcomers to these areas will benefit from the solid overview of the field, whereas established experts will value the novel, cutting-edge research described in the work.

Auteur

Dr. Siani Pearson is a senior researcher in the Cloud and Security Research Lab of HP Labs, Bristol, UK.

Dr. George Yee is a consultant with his own company, and an Adjunct Research Professor in the Department of Systems and Computer Engineering at Carleton University, Ottawa, ON, Canada.

Résumé
This book analyzes the latest advances in privacy, security and risk technologies within cloud environments. With contributions from leading experts, the text presents both a solid overview of the field and novel, cutting-edge research. A Glossary is also included at the end of the book. Topics and features: considers the various forensic challenges for legal access to data in a cloud computing environment; discusses privacy impact assessments for the cloud, and examines the use of cloud audits to attenuate cloud security problems; reviews conceptual issues, basic requirements and practical suggestions for provisioning dynamically configured access control services in the cloud; proposes scoped invariants as a primitive for analyzing a cloud server for its integrity properties; investigates the applicability of existing controls for mitigating information security risks to cloud computing environments; describes risk management for cloud computing from an enterprise perspective.

Contenu

Part I: Introduction to the Issues.- Privacy, Security and Trust in Cloud Computing.- Part II: Law Enforcement and Audits.- Accessing Data in the Cloud: The Long Arm of the Law Enforcement Agent.- A Privacy Impact Assessment Tool for Cloud Computing.- Understanding Cloud Audits.- Part III: Security and Integrity.- Security Infrastructure for Dynamically Provisioned Cloud Infrastructure Services.- Modeling the Runtime Integrity of Cloud Servers: a Scoped Invariant Perspective.- Part IV: Risk Considerations.- Inadequacies of Current Risk Controls for the Cloud.- Enterprise Information Risk Management: Dealing with Cloud Computing.