EXPLORING THE SECURITY OF CLOUD COMPUTING: AN ANALYSIS OF THREATS AND COUNTERMEASURES FOR CLOUD COMPUTING IN THE ERA OF DIGITAL TRANSFORMATION
Keywords:
Cloud computing, security, threats, countermeasures, digital transformationAbstract
Cloud computing has gained immense popularity for delivering computing resources over the internet, enabling organizations to efficiently and cost effectively store, process, and access data from any location worldwide. However, the security of data stored and processed outside of the organization's premises has raised concerns. In order to address the changing threat landscape and guarantee the integrity and confidentiality of data in the cloud environment, we address the latest developments and best practices in cloud security in this article, which delves into the complex world of security threats and related countermeasures for cloud computing in the contemporary era of digital transformation. Offered a thorough examination of cloud computing security risks and solutions in the age of digital transformation. The paper defines cloud computing, explores its advantages and disadvantages, identifies major security threats in cloud computing, including data breaches, insider threats, and denial of service attacks, and discusses the countermeasures that can be implemented to mitigate these threats. Τhe most popular cryptographic algorithms in cloud computing environments as part of their defense are presented. Special emphasis is given on the mode of operation of these algorithms is presented so that we can choose the appropriate one in each situation. Finally, access control and monitoring are presented in order to have a thorough understanding of protection methods in cloud computing environments
References
Bikramjit S., Avik S., Debanjan D., Gourab D., Krishnendu K. (2024). A Survey on the Advanced Encryption Standard (AES): A Pillar of Modern Cryptography. IJCSMC, 13(4), pp.68 87.
Garg, S., Versteeg, S., Buyya, R., & Gandomi, A. (2018). A break in the clouds: Towards a cloud definition. ACM Transactions on Internet Technology, 18(2), p19.
Johnson, M., & Brown, S. (2020). Comparing AES and RSA for Data Encryption: Performance and Security Considerations. Journal of Information Security, 10(3), pp127 154.
Lee S. et al. (2019). Comprehensive Evaluation of AES and RSA Integration in Hybrid Clouds. International Journal of Computer Security, 32(2), pp112 128.
Mell, P., & Grance, T. (2018). The NIST Definition of Cloud Computing. Communications of the ACM. 61(11) 54
National Institute of Standards and Technology (NIST). (2018). NIST Special Publication 800 144: Guidelines on Security and Privacy in Public Cloud Computing.
Puthal, D., Mohanty, S.P., & Kougianos, E. (2018). Machine learning based IoT malware detection for fog computing environments. IEEE Network, 32(6), pp96 101.
Raza, S., & Rajarajan, M. (2017). A survey on security and privacy issues in cloud computing, Journal of Cloud Computing. 6(1), pp1 17.
Santos, N., Gummadi, R., & Rodrigues, R. (2018). Towards trusted cloud computing. Communications of the ACM, 61(10), pp50 60.
Sarma, B., Wijesekera, D., & Shmatikov, V. (2019). Moving beyond taint tracking for automatic discovery of information leaks in Android applications In Proceedings of the ACM SIGSAC Conference on Computer and Communications Security, pp1193 1208.
Varghese, B., & Buyya, R. (2020). Blockchain based decentralized management of fog to cloud computing systems for internet of things. IEEE Transactions on Network and Service Management. B(1), pp381 397.
Zhang, J., Lin, Z., & Zhang, J. (2019). Fog computing in the context of internet of things: A systematic review. IEEE Internet of Things Journal, 6(2), pp2951 2962.
Zuo, C., Chen, X., & Liu, J., (2017). A machine learning based approach for detecting IoT devices in fog environments. IEEE Symposium on Service Oriented System Engineering, pp11 19.
