Cloud Computing – Security implications and Views

Abstract -Cloud computing is a relatively very popular and beneficial because they are easy and inexpensive in use,
recent term for virtualization, distributed computing and most scalable and no wasted resources. A hybrid cloud is a cloud
recently for networking, web and software services. It is flexible, or environment in cloud computing in which an organization
cost effective, reduced information technology overhead for the
locally provides and manages some resources and has others
end users, on-demand services and many more. Albeit the benefit
provided publically or externally. For example, an
of cloud computing are clear but we need to develop proper
organization might use a public cloud service, such
security for cloud implementation. This paper discusses the
concept of cloud computing and also concern about the security
as Amazon Simple Storage Service (Amazon S3) for archived
of clouds. data but continue to maintain in-local storage for operational
customer data. Ideally, the hybrid approach allows a business
Keyword- Cloud computing, Infrastructure-as-a-Service to take advantage of the scalability and cost-effectiveness that
(IaaS), Software-as-a-Service (SaaS), Platform-as-a-Service a public cloud computing environment offers without
(PaaS), Security. exposing mission-critical applications and data to third-party
vulnerabilities.
Cloud computing represents a way of computing that uses
internet and central remote servers to manage data and 1. Basic Layers
applications on internet. This computing permits their Hosted services are divided into three categories-
consumers to use applications without any installation of Infrastructure-as-a-services (IaaS), Platform-as-a-service
software and access their data at any time at any computer (PaaS), Software-as-a-service (SaaS)
with just an internet connection.
Main aim of cloud computing is to provide consumers and 1.1 Infrastructure-as-a-Service (IaaS)

businesses easy and scalable access to computing resources
and services.
A cloud can be private, public and hybrid. Private or internal
cloud is one that provides hosted services (Amazon's Elastic
Compute Cloud (EC2) or Simple Storage Service (S3)) to a
few number of people. Public cloud is the basis of cloud
standard model of cloud computing, in which the service
IaaS is the base layer of the cloud stack. It provides the
foundation for the other two layers, for their execution. This
cloud stack uses a keyword virtualization. We can understand
this using Amazon EC2(Elastic Compute Cloud). In Amazon
EC2 our application will be executed on a virtual computer

providers provides the resources like applications and storage

to the public over the internet. Public cloud services may be
offered free or pay-per-usage based. Public clouds are

1

Figure-Basic Layers of Cloud Computing
(instance). We are free to choose the configuration of virtual
computer, like configuration of CPU, memory & storage that
is optimal for our application. The whole cloud infrastructure
viz. servers, routers, hardware based load-balancing, firewalls,
storage and other network equipments are provided by the
IaaS providers. The customers buy these resources as a service
on a need basis.
1.2 Software-as-a-Service (SaaS)
SaaS is one of the strategies of Cloud Computing, which is
based on a "one-to-many" model whereby an application is
shared across multiple clients.
SaaS apply a major impact on the software industry, because
software as a service will be changed by the way of people
build, sell, buy, and use software. Software as a service (or
SaaS) is a way of delivering applications over the Internet-as a
service. In other words we can simply access the software
without any installation and maintaining of it specifically
using internet connection. SaaS applications run on a SaaS
provider's servers. The provider manages access to the
application, including security, availability, and performance.
SaaS customers do not have hardware or software to buy,
install, maintain, or update. Accessing applications is to make
easy: All we need is just an Internet connection.
1.3 Platform-as-a-Service (PaaS)
For instace, next step up into the cloud from SaaS is the
Platform as a Service. While SaaS offers applications for end
users, PaaS offers a wide development platform for
developers. Developers do not need to worry about the
operating system, storage or hosting. Developers write the
code and the PaaS provider provides a very simple method to
upload that code and present it over the internet. The PaaS
provider provides the hardware, operating system, software
upgrades, security and everything else related to the day to
day hosting of an application to the developer. Mostly PaaS
providers are limited to specific languages and IDEs. As set
apart, the IDE is web based and in others, the IDE provides
features for uploading code.
2. Difference between IaaS, SaaS, and PaaS
The lowest level is infrastructure-as-a-service (IaaS). This is
where pre-configured hardware is provided via a virtualized
interface or hypervisor. There is no high level infrastructure
software provided such as an operating system, this must be
provided by the buyer embedded with their own virtual
applications. Platform as a service (PaaS) goes a stage further
and includes the operating environment included the operating
system and application services. PaaS suits organizations that
are committed to a given developing environment for a given
application but like the idea of someone else maintaining the
deployment platform for them. Saas offers fully functional
applications on-demand to provide specific and reliable
services such as email management, CRM, ERP, web
conferencing and an increasingly wide range of other
applications.
3. Cloud Security
Security as a service is not only a reality but as the world
becomes a more insecure. The reality of the situation is that
data is flowing through the internet in all over the world
2
Infrastructure today. The internet cloud makes up both the
private a public infrastructure of the worlds business and
private communication.
If we take the fictitious assumption that the private cloud
provide perfect transparency than the public cloud, but in
reality private cloud have some level of opacity. On the basis
of this assumption we conclude that public cloud have higher
level of opacity than private cloud because of the perfect
transparency of private clouds. Therefore anything that we can
know about the public cloud, we can also know about the
private cloud, but the reverse is not true. Finally we conclude
that private clouds are more secure than public cloud. The
policies, procedures, technologies, architecture, and controls
in place define the "security" of a given cloud. Risk analysis
and transparency are critical component in assessing the
security of a system. Higher risk associated with the lack of
transparency with the public cloud provider can be mitigated:
If we securely encrypt the file systems in the cloud
If we keep the encryption keys away from the cloud
provider
These two controls offset the lack of transparency from the
cloud provider enabling us to meet our business objectives
with only a moderately higher level of risk. Subsequently, if
the benefits of public cloud over private cloud outweigh that
moderate risk, then we should out rightly deploy in the public
cloud. Otherwise, the private cloud represents the best risk
scenario. If we determine the public cloud risk in this aura
apparently it is not acceptable even with the compensating
controls, however, that does not mean we have concluded that
our private cloud is more secure and protected than the public
cloud provider.
With IaaS, more responsibility for security maintain
amalgamated with the client than service provider for control
and security. Highlighting, easily accessible features is
available to the operating system supporting virtual images,
networking and storage etc. In SaaS most of the responsibility
for security maintaining associated and coordinated with
service provider. Service provider embraces number of ways
to control access to the web portal like management of user
identities, configuration of applications and restriction on
access to the particular IP address ranges. In PaaS
responsibility of managing the configuration, database
software and application run time environment associated with
client rather than service provider.
Most of the organizations are intrigued with these three
services because of their flexibility, reliability and cost
effectiveness but they are highly concerned about security.
Recent cloud studies show that lack of visibility and control,
concerns about the protection of sensitive information and
storage of regulated information in a shared, externally via
their managed environment.
Conclusion-
In this paper we discussed, cloud computing which is internet
based application services and depends on the inter cloud
computing (private) or intra cloud computing (public),in
which clustering of networks via interconnected network
made a significance impact on computer utilities.
Subsequently, data representation over internet in public or
private clouds embraces external giant network, helps to build
security in networks of network. Although security is a major
aspect in inter or intra cloud computing as in terms refers to
security maintenance massive concentrations of resources and
data representation a more attractive way to attackers, and
cloud based privacy can be more reliable, scalable, robust and
cost effective.
The key conclusion of this paper is the cloud’s economies of
scale, and flexibility both are friend and a foe they are
intertwined, when it comes to security aspects. Apart from that
inter cloud or intra cloud computing raising many challenging
features i.e. federations, cloud security, QOS, monitoring,
interoperability etc. And these resources spanning across
multiple servers, through three basic layers of cloud
computing- IaaS , PaaS, SaaS for building up external network
via managed environment .highlighting , the features of
3
security aspects which lightens data representations and
business reviews makes easily accessible by building a huge
network over the external developed networks.

References

1. Michael Miller, Que, Amazon.com@Reviews Cloud

Computing: Web-Based Applications That Change
The Way You Work And Collaborate Online.

2. George Reese, Amazon.com Cloud Computing

Architectures: Building Applications And
Infrastructure In The Cloud( Theory In Practice(
O’Reilly).

3. Toby Velte, Antony Velte, Robert Elsenpeter Cloud

Computing, A Practical Approach.

4. http://en.wikipedia.org/wiki/Cloud_computing