Network · 2023 · 94 citations · 27 references
ComputingCloud ComputingComputer ScienceCloud InfrastructureCloud SecurityComputer SecurityCloud Infrastructure DesignCloud Risk ManagementCloud Security RiskCloud Security Risk ManagementCloud Threat ManagementCloud Threat ModelingSecure Cloud ArchitectureSecurity Assurance In Cloud ComputingSecurity Control FrameworksWeb Services
The rapid growth of cloud computing has heightened security concerns, with inherent attack vectors posing risks to cloud environments. This study examines cloud security frameworks, addresses associated issues, and proposes solutions to aid informed selection and implementation of security measures. The authors conduct a comparative analysis of COBIT5, NIST, ISO, CSA STAR, and AWS Well‑Architected frameworks, evaluating focus, scope, strengths, limitations, implementation steps, and required tools, while also identifying key security issues and countermeasures. The research enhances understanding of these frameworks and supports decision‑making for selecting and implementing appropriate cloud security measures.
The rapidly growing use of cloud computing raises security concerns. This study paper seeks to examine cloud security frameworks, addressing cloud-associated issues and suggesting solutions. This research provides greater knowledge of the various frameworks, assisting in making educated decisions about selecting and implementing suitable security measures for cloud-based systems. The study begins with introducing cloud technology, its issues and frameworks to secure infrastructure, and an examination of the various cloud security frameworks available in the industry. A full comparison is performed to assess the framework’s focus, scope, approach, strength, limitations, implementation steps and tools required in the implementation process. The frameworks focused on in the paper are COBIT5, NIST (National Institute of Standards and Technology), ISO (International Organization for Standardization), CSA (Cloud Security Alliance) STAR and AWS (Amazon Web Services) well-architected framework. Later, the study digs into identifying and analyzing prevalent cloud security issues. This contains attack vectors that are inherent in cloud settings. Plus, this part includes the risk factor of top cloud security threats and their effect on cloud platforms. Also, it presents ideas and countermeasures to reduce the observed difficulties.
27
Michael Armbrust, Armando Fox, Rean Griffith et al. · Communications of the ACM · 2010 · 9K citations · Full text
Rodrigo N. Calheiros, Rajiv Ranjan, Anton Beloglazov et al. · Software Practice and Experience · 2010 · 4.9K citations · Full text