Premium Essay

Cloud Computing and Risk Accessment

In: Business and Management

Submitted By lnaslxy
Words 12166
Pages 49
Cloud Computing Benefits, risks and recommendations for information security
Rev.B – December 2012

2

Cloud Computing Benefits, risks and recommendations for information security

Document History

Date December 2009

Version 1.0

Modification Initial Release, Rev.A

Author Daniele Catteddu, Giles Hogben Thomas Haeberlen Lionel Dupré

December 2012

2.0

Rev.B

About ENISA
The European Network and Information Security Agency (ENISA) is a centre of network and information security expertise for the EU, its member states, the private sector and Europe’s citizens. ENISA works with these groups to develop advice and recommendations on good practice in information security. It assists EU member states in implementing relevant EU legislation and works to improve the resilience of Europe’s critical information infrastructure and networks. ENISA seeks to enhance existing expertise in EU member states by supporting the development of cross-border communities committed to improving network and information security throughout the EU. More information about ENISA and its work can be found at www.enisa.europa.eu.

Contact details
This report has been edited by: Lionel Dupré, Thomas Haeberlen

For contacting ENISA or for general enquiries about this report, please use the following details: Email: resilience@enisa.europa.eu Internet: http://www.enisa.europa.eu

Cloud Computing 3 Benefits, risks and recommendations for information security

Legal notice
Notice must be taken that this publication represents the views and interpretations of the authors and editors, unless stated otherwise. This publication should not be construed to be a legal action of ENISA or the ENISA bodies unless adopted pursuant to the ENISA Regulation (EC) No 460/2004 as lastly amended by Regulation (EU) No 580/2011. This publication does not necessarily represent state-of…...

Similar Documents

Premium Essay

Cloud Computing

...reside on the Cloud (Internet). As a metaphor for the Internet, "the cloud" is a familiar cliché, but when combined with "computing", the meaning gets bigger and fuzzier. Some analysts and vendors define cloud computing narrowly as an updated version of utility computing: basically virtual servers available over the Internet. Others go very broad, arguing anything you consume outside the firewall is "in the cloud", including conventional outsourcing. Cloud computing comes into focus only when you think about what we always need: a way to increase capacity or add capabilities on the fly without investing in new infrastructure, training new personnel, or licensing new software. Cloud computing encompasses any subscription-based or pay-per-use service that, in real time over the Internet, extends ICT's existing capabilities. Cloud computing is at an early stage, with a motley crew of providers large and small delivering a slew of cloud-based services, from full-blown applications to storage services to spam filtering. Yes, utility-style infrastructure providers are part of the mix, but so are SaaS (software as a service) providers such as Salesforce.com. Today, for the most part, IT must plug into cloud-based services individually, but cloud computing aggregators and integrators are already emerging. ______________________________________Cloud computing - The Concept Cloud computing is Internet ("cloud") based development and use of computer technology ("computing").......

Words: 1794 - Pages: 8

Premium Essay

Cloud Computing

...Cloud computing Cloud computing is the use of computing resources (hardware and software) that are delivered as a service over a network (typically the Internet). The name comes from the use of a cloud-shaped symbol as an abstraction for the complex infrastructure it contains in system diagrams. Cloud computing entrusts remote services with a user's data, software and computation. There are many types of public cloud computing:[1] Infrastructure as a service (IaaS) Platform as a service (PaaS) Software as a service (SaaS) Storage as a service (STaaS) Security as a service (SECaaS) Data as a service (DaaS) Database as a service (DBaaS) Test environment as a service (TEaaS) Desktop virtualization API as a service (APIaaS) Backend as a service (BaaS) In the business model using software as a service, users are provided access to application software and databases. The cloud providers manage the infrastructure and platforms on which the applications run. SaaS is sometimes referred to as “on-demand software” and is usually priced on a pay-per-use basis. Saas providers generally price applications using a subscription fee. Proponents claim that the SaaS allows a business the potential to reduce IT operational costs by outsourcing hardware and software maintenance and support to the cloud provider. This will enable a business to reallocate IT operations to focus on other IT goals. In addition, the application is hosted centrally, so updates can be released without......

Words: 5808 - Pages: 24

Premium Essay

Cloud Computing

...Cloud Computing for Education and Learning: Education and Learning as a Service (ELaaS) Mohssen M. Alabbadi Computer Research Institute (CRI) King Abdulaziz City for Science & Technology (KACST) Riyadh, Saudi Arabia Alabbadi@kacst.edu.sa Abstract—Cloud computing, despite its hype, is being widely deployed, with its dynamic scalability and usage of virtualized resources, in many organizations for several applications. It is envisioned that, in the near future, cloud computing will have a significant impact on the educational and learning environment, enabling their own users (i.e., learners, instructors, and administrators) to perform their tasks effectively with less cost by utilizing the available cloud-based applications offered by the cloud service providers. This paper discusses the use of cloud computing in the educational and learning arena, to be called ‟Education and Learning as a Service” (ELaaS), emphasizing its possible benefits and offerings. It is essential for an educational and learning organization, with its budget restrictions and sustainability challenges, to use the cloud formation best suited for a particular IT activity. The Jericho Forum proposes a cloud computing formation model, called the Cloud Cube Model (CCM), which is based on 4 criteria. To preserve the symmetry of the cube, a new cloud computing formation model, called the Complete Cloud Computing Formations (C3F), is proposed. The IT activities in the educational and learning organizations......

Words: 5560 - Pages: 23

Premium Essay

Cloud Computing

...Cloud Computing overview advantage and challenges Overview Silver Lining or storm ahead The future of cloud computing Effective use of cloud computing in education institutions Cloud Computing for beginner Cloud computing Challenges and future directions http://www.businesswire.com/news/home/20110622006602/en/Future-Cloud-Computing-Survey-Reveals-Drivers-Cloud Cloud Computing GAP Task Force http://inews.berkeley.edu/articles/Spring2009/cloud-computing Table of contents 2 0 Relevant Resources 4 0 Relevant Resources 4 1 General guidelines of community design 6 2 Attracting new members 7 2.1 Methods of persuasion of a potential user 7 2.2 Encouraging users to invite friends 8 2.3 Entry barrier 9 2.4 Guidance for new members 9 3 Structure of the community 12 3.1 Member profiles 12 3.2 Member connections 13 3.3 Adding connections 15 3.4 Member reputation 16 3.5 Paid membership 18 3.6 Fake members 18 3.7 Lurkers 18 4 Encouraging user participation 20 4.1 Using uniqueness 20 4.2 Using controversy 20 4.3 Using individual recognition 21 4.4 By discouraging low quality contributions (moderation) 21 4.5 Using goal setting 23 4.6 Using E-Mail notifications 24 4.7 By showing the activity of community 24 5 Stimulating Social Interactions 26 5.1 By common Interests 26 5.3 By common current life transitions 27 5.4 By shared experience 28 5.5 By shared education 29 5.6 By showing the distance 29 5.7 By service: Photo Albums 30 5.8 By service: Profile...

Words: 10086 - Pages: 41

Premium Essay

Cloud Computing Risks

...Abstract Cloud computing is a term that refers to sources and computer systems available on demand through the network, which can provide a number of computer services integrated without being restricted local resources in order to make it easier for the user and include those resources space for data backup and synchronization self also includes processing capabilities software and scheduling of tasks and push e-mail and remote printing, and the user can control when it is connected to the network in these resources through a simple software interface simplifies and ignores a lot of detail and internal processes. Cloud computing has become increasingly popular because it offers users the illusion of having infinite computing resources, of which they can use as much as they need, without having to worry about how those resources are provided. It also provides greater scalability, availability, and reliability than users could achieve with their own resource The core property in cloud computing that held computing "in the cloud"; for clarity, the treatment process (and related data) is not confined to the place (places) private and unknown. Thus, this model is the antithesis of the treatment process is located in one or more of the servers are well known. Exposure model cloud of criticism and attack because of privacy advocates, for the ease of large governing the hosting companies for services cloud, and then, can impose censorship and domination, whether legal or......

Words: 2383 - Pages: 10

Premium Essay

Cloud Computing

...Cloud Computing Table of Contents Abstract 1 Evolution of Cloud Computing 1 Defining Cloud Computing 3 Deployment Models 5 Delivery Models 7 Essential Characteristics of Cloud Computing 10 Benefits of Cloud Computing 11 Risks of Cloud Computing 13 Conclusion 15 References 17 Cloud Computing Abstract Cloud computing is one of the latest computer and business industry buzz words. It joins the ranks of ‘virtualization’, ‘grid computing’, and ‘clustering’, among other buzz words in the IT industry. Cloud computing is a virtual network access, application, storage, and other computing resources on a pay-as-you-go basis. It allows users to access their networks, store information, and other resources from a virtual “cloud.” It is a relatively new concept that is still evolving. As a result, there is no standard definition of the cloud computing concept, which has led to many variations of the definition of cloud computing. Due to this lack of standardization members of the IT industry have created cloud products based on their own definitions of cloud computing, which has resulted in inconsistencies and confusion about what cloud computing really is. This paper will discuss the evolution, various definitions, deployment models, delivery models, characteristics, benefits and risks, of cloud computing. Evolution of Cloud Computing Cloud Computing has evolved through a number of phases, which include grid and utility computing, application......

Words: 4902 - Pages: 20

Premium Essay

Cloud Computing

...CLOUD COMPUTING Prepared for: James Smith DICE Prepared by Leslie Joshua Conestoga College December 12th 2013 Table of Contents Page Introduction........................................................................................................ 1 What is Cloud Computing....................................................................................1 Types of Cloud Service Models.......................................................................2 Types of Cloud Service Deployment Models...................................................2-3 What are the Benefits?........................................................................................3-4 What are the Downsides?....................................................................................4 What is the Future of Cloud Computing...............................................................5 Conclusion.............................................................................................................5 References.............................................................................................................6 List of Illustration 1. Types of Deployment Models..............................................................................3 2. Expected cloud computing Figure growth from 2011 to 2016.............................5 3. Flexibility of cloud computing...............................................

Words: 1715 - Pages: 7

Premium Essay

Cloud Computing

...flexible support for business strategies by IT, and faster response time to competitive conditions are combining to accelerate cloud computing adoption today. This report aims to learn the major aspects of IT sales especially in cloud computing, which involves understanding the technologies involved in the functioning of an IT business model. For this purpose, various articles were referred and few corporate visits were done within the span of two-week of the SLIP. The report discusses various information about overview of top IT companies, types of cloud, virtualization, Saas, Paas, DRaas, Capex, Opex, Marketing and pricing strategies involved in cloud solutions. Our professional mentor was from Zenith Infotech. Zenith Infotech is an international company that specializes in delivering innovative business continuity and cloud computing solutions for IT service providers. The report further discusses Zenith’s products,learnings imbibed from the programme and the future scope of cloud computing in detail. Literature Review 1.Identifying Cloud Computing Security Risks (February 2011) -Paul Wooley Tyco Electronics Abstract Cloud computing services including Infrastructure as a Service promise potential cost savings for businesses by offering remote, scalable computing resources. However attractive these services are, they pose significant security risks to customer applications and data beyond what is expected using traditional on-premises architecture. This......

Words: 3858 - Pages: 16

Premium Essay

Cloud Computing

...Abstract…………………………………………………………………….……….……..3 2. Business problem statement……………………………………….……………..3-8 3.1 Risks 3.2 Obstacles 3.3 Breaches 3.4 Are you secure? 3.5 What’s your support plan? 3. Security…………………………………………………….………….8 4. Name of the company or organization…………..…………….………….…..8-10 5.6 Types of Cloud Computing 5.7 High Level Solutions 5.8 Cloud Computing Economics 5. Brief Description of proposed solution…………………………..………….10-12 6.9 Products 6.10 Business Recommendations 6. General benefits it will provide the organization…………………..……12 7. Audience to whom you are presenting the recommendation(s)…..12 8. Conclusion………………………………………………………………………………..14-15 9. References…………………………………………………………..…………………...16 Abstract The latest major changes in information technology today is Cloud computing. Cloud computing creates a dynamic and competitive working environment where changes are made at a fast pace in many companies and organizations today that are looking for ways to save on hardware storage, costs and production. The option of having a system that would allow a company to store its files elsewhere helps a company by freeing up more space on its own main server. In today’s business Information technology (IT), infrastructure and systems on the cloud have benefits of variable pay per use costs, with better technology and high scalability. This is a “hot......

Words: 3804 - Pages: 16

Premium Essay

Cloud Computing

...Cloud Computing: The Benefits and the Downside Air, energy, the environment are intangible to the human eye, but yet all three play an integral part in our survival. Cloud computing relates to these three things because all of these could be adversely affected by cloud computing. Technology is an ever evolving and growing market dominated by the consumerism of Apple products and a world where instant gratification is gloried as information is processed in the matter of seconds. The evolution of technology has not only changed the way that we communicate with one another, but also the way in which businesses must conduct their daily transactions. A person in the United States can keep in touch with a friend thousands of miles of way in Brazil or England using Facebook or Twitter. World events spread in the same manner as wildfire, uniting citizens around the world with such topics as war and human rights. We live in a society in which technology has shaped the people that we are today. Most students in middle or high school have had access to a cellular phone since their birth. Beyond the surface of technology being used as a device to interact with one another, technology is used as a device to store information. Our society has transformed from storing information on a hard drive or a flash drive to the information being stored on the Internet via the concept of cloud computing. Cloud computing is the act in which information can be stored and reviewed over the Internet......

Words: 3023 - Pages: 13

Premium Essay

Cloud Computing

...Introduction Cloud computing has the potential to change the face of the Information Technology (IT) industry. Industry experts maintain that the cloud will eventually become a primary component of computing activities conducted over the Internet. Presently, major corporations like Google, Amazon, Microsoft, and IBM have embraced this trend and are using the technology to enhance IT supported services. As the number of benefits and potential uses of the technology grows, the funding earmarked for assessments and implementation of cloud services will likely multiply. Cloud computing consists of immense benefits that allows end users to utilize services that include infrastructure, applications, data storage capacity. Last year, the Brookings Institution released a study that endorses the benefits of cloud computing to the government. The writer of the study, Darrell West, who is the vice president and director of government studies at Brookings, stated in the paper, “that agencies that have moved to the cloud generally enjoyed 25percent to 50 percent savings on their IT cost. For the federal government as a whole, this translates into billions in cost savings, depending on the scope of the transition” (West, 2011). Cloud computing consist of a network of servers that run services that are operated as shared platforms. The characteristics of cloud computing include on-demand services, pay-per-use services, broadband network access, multi-tenancy, rapid elasticity and......

Words: 2173 - Pages: 9

Premium Essay

Cloud Computing

...about Cloud computing, the several cloud deployment and service models. This paper will cover the benefits and disadvantages of cloud computing over the traditional IT environment including scalability, flexibility, security, and privacy. Now a days cloud computing is considered the next big thing, a tool that is used by marketers to be impressive, for example Microsoft release a commercial back in 2010 with a man in front of a computer and then an image saying “Into the Cloud” (youtube.com). This tool is being used by many companies to attract customers yet many people fail to understand what Cloud computing is, Cloud computing is an overall philosophy and design concept that is much more complex and yet simpler then people give it credit for. Cloud Computing is a new term to many people since it was introduced to the general public in 2006 (infoworld.com). However it has been around for much longer, Western Union was thought to have created the term “The Cloud” in the 1960`s (infoworld.com). Those who have been in the business for a long time like David S. Linthicum who is a consultant at Cloud Technology Partners, and is an internationally recognized industry expert who has authored 13 books on cloud computing can recall the name “The Cloud” in the 1980`s in terms of networking semantics (infoworld.com).The term Cloud Computing itself has changed over the years and is still evolving to this day. Before diving any deeper one must first understand what is Cloud Computing?......

Words: 1647 - Pages: 7

Premium Essay

Analyzing the Dangers and Risk Associated with Cloud Computing in the Health Care Industry

...Analyzing the Dangers and Risk Associated with Cloud Computing in the Health Care Industry Alfonso I. Evans Excelsior College Abstract As technology continues to advance, so do the ever present threats to steal important information. Businesses all around the world are trying to cut cost to increase profits and sometimes it comes at the expense of information technology. One technological advance I will be analyzing is cloud computing and if it is a viable solution. The healthcare industry has begun putting patient information on networks that can be accessed by a number of physicians to maintain a complete record of health history. The problem with this system is that a single hospital does not have the space to maintain the supercomputers necessary to keep all that information so other solutions have to be examined. This assessment will look at the benefits and risk associated with cloud computing as it pertains to patient records. Analyzing the Dangers and Risk Associated with Cloud Computing in the Health Care Industry Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction (Mell & Grance, 2011). Cloud computing has become a valuable asset to businesses and individuals alike because it is convenient......

Words: 1929 - Pages: 8

Premium Essay

Cloud Computing

...370-01 2/12/15 Cloud Computing Cloud computing involves servers and software networks; this allows centralized data storage and online access to computer services or resources. In other words, users can access software applications through the internet or any other networks through the cloud application provider. Cloud computing is just a term used to describe this process. Many things can be achieved using cloud computing as long as it’s properly done and maintained. There are various positive outcomes that derive from this innovative business approach. However, some corporate executives would prefer not to use cloud computing due to security and privacy issues. The main concern is that people’s important data and personal information would not be secured, as well, as it should be and is at risk of being compromised. With this being said, there are potential positives outcomes as well as negative ones. Cloud computing is hosted on remote servers, which receive the data that is sent to “the cloud”. Using this type of accounting software saves businesses from having to install and maintain software on each individual desktop computer. It also allows employees, in remote or branch offices, to access the same data and the same version of that same software. There are three different types of clouds: private, public and hybrid. (Cloud computing accounting software) Each of these clouds has its own specifications relating how and where it will operate. A private cloud for......

Words: 1159 - Pages: 5

Premium Essay

Cloud Computing

...Abstract Cloud computing is defined by Cearly and Phifer in their case study titled “Case Studies in Cloud Computing” as “a style of computing in which scalable and elastic IT-related capabilities are provided ‘ as a service’ to customers using Internet technologies”. Cloud computing services had been provided by major vendors such as Google, Amazon, Microsoft, IBM, Hewlett-Packard, and others for business computing until recently when Apple Corporation announced iCloud for consumers. Therefore, cloud computing is now available for businesses as well as consumers. This case study will explain the how Ericsson benefitted from Amazon Web Services (AWS) in terms of cost reduction, automated software updates, remote access, and on-demand availability. It also evaluates the scalability, dependability, manageability, and adaptability of Amazon Elastic Compute Cloud (Amazon EC2), Amazon Simple Storage Services (Amazon S3), and RightScale. It examines the security concerns for cloud-based services and makes suggestions to cope with these concerns as well as assess possible scalability, reliability, and cost issues associated with cloud computing, and make suggestions to overcome each of these issues. Cloud Computing Cloud computing services are being used more widely in today’s time. This case study will explain the how Ericsson benefitted from Amazon Web Services (AWS) in terms of cost reduction, automated software updates, remote access, and on-demand......

Words: 1349 - Pages: 6