2009 · 652 citations · 12 references
ComputingCloud ComputingCybersecurityCloud InfrastructureCloud SecurityComputer SecurityCloud Cost ManagementCloud Data ManagementCloud EncryptionCloud Infrastructure DesignData SecuritySecure Data SharingCapital Expenditure To Operational Expenditure ShiftCloud Computing SystemsCross-domain TransferScalable Cloud ComputingScalable ComputingSecure Cloud ArchitectureSecurity Assurance In Cloud Computing
Cloud computing delivers scalable, cost‑saving services over the Internet, yet its adoption is hindered by security and trust challenges as data departs from the owner's control. The paper investigates technical security problems that arise from using cloud services and the underlying technologies that enable cross‑domain, Internet‑connected collaborations.
The Cloud Computing concept offers dynamically scalable resources provisioned as a service over the Internet. Economic benefits are the main driver for the Cloud, since it promises the reduction of capital expenditure (CapEx) and operational expenditure (OpEx). In order for this to become reality, however, there are still some challenges to be solved. Amongst these are security and trust issues, since the user's data has to be released to the Cloud and thus leaves the protection-sphere of the data owner. Most of the discussions on this topics are mainly driven by arguments related to organizational means. This paper focuses on technical security issues arising from the usage of Cloud services and especially by the underlying technologies used to build these cross-domain Internet-connected collaborations.
12
Rachna Dhamija, J. D. Tygar, Marti A. Hearst · 2006 · 1.3K citations
Risks of the Passport single signon protocol
David Kormann, Aviel D. Rubin · Computer Networks · 2000 · 172 citations
XML signature element wrapping attacks and countermeasures
Michael McIntosh, Paula Austel · 2005 · 169 citations
Security analysis of the SAML single sign-on browser/artifact profile
2004 · 131 citations
Vulnerable Cloud: SOAP Message Security Validation Revisited
Nils Gruschka, Luigi Lo Iacono · 2009 · 131 citations