Posted: September 8th, 2022

Cloud Infrastructure Security Issues

Cloud Infrastructure Security Issues
Cloud technology promotes availability, agility, and scalability by providing cost-effective and faster computing methods. Both NIST and ISO/IEC has very similar definition that involves virtual technology and access of network. cloud security alliance use NIST standards and model to define cloud computing and ISO/IEC model for reference (Jouini, and Rabai, 2019, page, 249-263). Both NIST and ISO/IEC have similar cloud deployment models, including community cloud, hybrid cloud and public cloud. Commercial Cloud service providers face several security challenges, such as, trust and risk management.
Trust management and policy integration is a major issue among service providers which may lead to distrust. For customers to trust the provider, the provider should ensure the infrastructure is well secured and ensure proper management of information and virtualization technology (Qureshi, et, al.,2020, page 12-20). The provider should be aware of security policies and standards, disaster response and recovery and logging. Security threats could originate from anywhere, from the user, the provider or a third party when accessing user information stored in the cloud. The service provider should have control over data and reduce transparency in the cloud. Service providers also face financial challenges and competition from other cloud agencies such as private agencies.
Failure to provide security and manage risk is a challenge to many service providers. Service providers opt for a shared responsibility model where the user and the provider decide to share risks (Qureshi, et, al.,2020, page 12-20) . Service providers fail to include changes made in the security lifecycle due to a lack of coordination. Additionally, multi-tenancy and providers’ economic issues are among the challenges that expose the user and the companies’ integrity. The service providers fail to integrate a structured cyber assurance used to secure cloud infrastructure (Jouini, and Rabai, 2019, page, 249-263). The service providers should use the cloud control matrix (CCM) and consensus assessment initiative questionnaire (CAIQ) to document and ensure compliance of security standards.
Service providers deal with security challenges by undertaking security responsibilities, also known as measures. The main security measures include securing underlying virtualization technology and infrastructure and isolation (Othman, and El-Mousa, 2020, page, 318-323). First, isolation involves protecting virtual machine memory not to be visible and accessible to another. Separation of virtual tenant occurs even in situations where the virtual process runs in the same hardware. Additionally, the cloud commercial cloud services providers’ safeguard virtual technology and infrastructure from both internal and external attacks.
Securing virtual technology entails configuration and updating hypervisors to ensure maximum safety. Securing hypervisors protects the cloud infrastructure from any security vulnerability discovered in virtual technology (Othman, and El-Mousa, 2020, page, 318-323). Maintaining physical and network safety through a traditional network intrusion system to reduce or avoid security failure and compromising the security of all customers.
Nevertheless, service providers create a secure virtualization process, such as the image’s source, to the boot process with high-security maintenance and integrity. Securing the chain process ensures tenants do not access images not supposed to access to avoid access to images or the information that belongs to another tenant (Jouini, and Rabai, 2019, page, 249-263). Service providers should work hand in hand with the cloud users by ensuring security protocols get deployed. The service provider should let the customer know about the safety of the volatile memory and the problem involved in unapproved monitoring, for example loss of sensitive data or unauthorized access of the memory in use (Vakili, Jahangiri, and Sharifi, 2019, page 599-67)). Providers’ security controls should be known by the users to enable network security management and configuration.
The service provider uses a single and safe security model that is secure and safe and avoids a shared security model to ensure the orchestration layers are secure from security issues. The service providers make sure the company follows the NIST and ISO/ standards and regulations (Vakili, Jahangiri, and Sharifi, 2019, page 599-67)). The company has the compliance certificate and evidence the provider follows cloud infrastructure regulations and best practices.

List of References
Jouini, M. and Rabai, L.B.A., 2019. A security framework for secure cloud computing environments. In Cloud security: Concepts, methodologies, tools, and applications (pp. 249-263). IGI Global.
Othman, M.M. and El-Mousa, A., 2020, April. Internet of Things & Cloud Computing Internet of Things as a Service Approach. In 2020 11th International Conference on Information and Communication Systems (ICICS) (pp. 318-323). IEEE.
Qureshi, A., Dashti, W., Jahangeer, A. and Zafar, A., 2020. Security Challenges over Cloud Environment from Service Provider Prospective. Cloud Computing and Data Science, pp.12-20.
Vakili, M., Jahangiri, N. and Sharifi, M., 2019. Cloud service selection using cloud service brokers: approaches and challenges. Frontiers of Computer Science, 13(3), pp.599-617.

Order | Check Discount

Tags: Cloud Infrastructure Security Issues