SRINIVAS INSTITUTE OF TECHNOLOGY VALACHIL, MANGALURU
DEPARTMENT OF COMPUTER SCIENCE AND ENGINEERING
21CS72
CLOUD COMPUTING
TOPIC
INTRODUCTION AND CLOUD SECURITY RISK TRUST
PRESENTED BY:
PRITHVI DK [4SN22CS408]
SANJANA [4SN21CS084]
SHRAVANYA [4SN21CS092]
RASHMITHA [4SN22CS409]
INTRODUCTION
Cloud computing has revolutionized the way organizations manage, store, and process data. By moving
from traditional on-premises infrastructure to the cloud, companies benefit from scalability, flexibility,
cost-effectiveness, and enhanced collaboration.
However, with these advantages come significant security risks that need to be addressed to ensure data
confidentiality, integrity, and availability.
Cloud security is a critical concern for businesses because, in a cloud environment, sensitive data is no
longer controlled solely by an internal IT team.
Instead, it is hosted and managed by third-party cloud service providers (CSPs) who are responsible for a
portion of the security infrastructure.
Organizations must trust that their cloud service providers will adequately safeguard their data and
provide sufficient transparency and accountability regarding security practices.
CLOUD SECURITY RISKS
1. Data Breaches
Cloud services can be vulnerable to cyber-attacks, potentially leading to data theft or corruption if security protocols are
inadequate.
2. Insider Threats
Employees or contractors with access to cloud systems may misuse privileges, posing risks to sensitive data.
3. Data Loss
Cloud data can be lost due to CSP failures or accidental deletion. Backup services may not guarantee full recovery.
4. Weak Authentication
Insufficient authentication practices (e.g., lack of multi-factor authentication) can expose systems to unauthorized access.
5. DoS Attacks
Cloud systems can be overwhelmed by malicious users in Denial of Service attacks, disrupting service availability.
6. Vendor Lock-in
Proprietary tools and formats may make it difficult to switch providers, limiting flexibility and increasing long-term costs.
7. Shared Responsibility Model
Security is a shared responsibility between the customer and the CSP, with each party responsible for different aspects
depending on the cloud service model (IaaS, PaaS, SaaS).
Cloud Security Trust
It refers to the confidence that customers, users, and organizations have in the
security measures and practices implemented by a cloud service provider (CSP). Building
and maintaining trust in cloud security is essential for adopting cloud technologies,
ensuring regulatory compliance, and mitigating risks associated with storing and
processing sensitive data.
Components of Cloud Security Trust:
[Link]:
•CSPs must provide clear documentation on their security policies, compliance certifications,
and data handling practices.
•Regular security audits and reports (e.g., SOC 2, ISO 27001) demonstrate adherence to
industry standards.
[Link] Security:
• Encryption (in-transit and at-rest) ensures that sensitive information is protected.
3. Privacy Protections:
•Policies ensuring customer data is not accessed or misused by the provider.
•Providing customers with visibility and control over how their data is used.
4. Certifications and Accreditations:
•Certifications such as FedRAMP, CSA STAR, and others demonstrate the CSP’s
commitment to security.
5. Customer Empowerment:
•Offering tools and resources that allow customers to configure and monitor their
security settings.
•Educating customers on security best practices in cloud environments.
Building Trust in Cloud Security:
Organizations can enhance trust by conducting due diligence when selecting a CSP,
implementing robust internal security measures, and continuously monitoring and
auditing cloud usage.