Privacy and Security for Cloud Computing Computer Communications and Networks

Annotation This book analyzes the latest advances in privacy, security and risk technologies within cloud environments. With contributions from leading experts, the text presents both a solid overview of the field and novel, cutting-edge research. A Glossary is also included at the end of the book. Topics and features: considers the various forensic challenges for legal access to data in a cloud computing environment; discusses privacy impact assessments for the cloud, and examines the use of cloud audits to attenuate cloud security problems; reviews conceptual issues, basic requirements and practical suggestions for provisioning dynamically configured access control services in the cloud; proposes scoped invariants as a primitive for analyzing a cloud server for its integrity properties; investigates the applicability of existing controls for mitigating information security risks to cloud computing environments; describes risk management for cloud computing from an enterprise perspective Despite the enormous potential of cloud computing, consumer uncertainty and concern regarding issues of privacy, security and trust remain a major barrier to the switch to cloud models. This comprehensive and authoritative text/reference provides an in-depth analysis of the latest advances in privacy, security and risk technologies within cloud environments. Containing contributions from leading experts in the field, the text presents both a thorough introduction to the core issues, and a practical selection of innovative solutions to common problems. A Glossary is also included at the end of the book. Topics and features: Considers the various forensic challenges for legal access to data in a cloud computing environment. Discusses privacy impact assessments for the cloud, and examines the use of cloud audits to attenuate cloud security problemsReviews conceptual issues, basic requirements and practical suggestions for provisioning dynamically configured access control services in the cloud. Proposes scoped invariants as a primitive for analyzing a cloud server for its integrity propertiesInvestigates the applicability of existing controls for mitigating information security risks to cloud computing environments. Describes risk management for cloud computing from an enterprise perspective. This pioneering volume is essential reading for business professionals, students and researchers interested in the field of privacy and security protection for the cloud, and/or complex service provisioning. Newcomers to these areas will benefit from the solid overview of the field, whereas established experts will value the novel, cutting-edge research described in the work Despite the enormous potential of cloud computing, consumer uncertainty and concern regarding issues of privacy, security and trust remain a major barrier to the switch to cloud models. This comprehensive and authoritative text/reference provides an in-depth analysis of the latest advances in privacy, security and risk technologies within cloud environments. Containing contributions from leading experts in the field, the text presents both a thorough introduction to the core issues, and a practical selection of innovative solutions to common problems. A Glossary is also included at the end of the book. Topics and features: Considers the various forensic challenges for legal access to data in a cloud computing environment Discusses privacy impact assessments for the cloud, and examines the use of cloud audits to attenuate cloud security problems Reviews conceptual issues, basic requirements and practical suggestions for provisioning dynamically configured access control services in the cloud Proposes scoped invariants as a primitive for analyzing a cloud server for its integrity properties Investigates the applicability of existing controls for mitigating information security risks to cloud computing environments Describes risk management for cloud computing from an enterprise perspective This pioneering volume is essential reading for business professionals, students and researchers interested in the field of privacy and security protection for the cloud, and/or complex service provisioning. Newcomers to these areas will benefit from the solid overview of the field, whereas established experts will value the novel, cutting-edge research described in the work Front Matter....Pages i-xvi Front Matter....Pages 1-1 Privacy, Security and Trust in Cloud Computing....Pages 3-42 Front Matter....Pages 43-43 Accessing Data in the Cloud: The Long Arm of the Law Enforcement Agent....Pages 45-71 A Privacy Impact Assessment Tool for Cloud Computing....Pages 73-123 Understanding Cloud Audits....Pages 125-163 Front Matter....Pages 165-165 Security Infrastructure for Dynamically Provisioned Cloud Infrastructure Services....Pages 167-210 Modeling the Runtime Integrity of Cloud Servers: A Scoped Invariant Perspective....Pages 211-232 Front Matter....Pages 233-233 Inadequacies of Current Risk Controls for the Cloud....Pages 235-255 Enterprise Information Risk Management: Dealing with Cloud Computing....Pages 257-291 Back Matter....Pages 293-306