journal article·2021-09-27Open access

Secure Cloud Infrastructure: A Survey on Issues, Current Solutions, and Open Challenges

Yara Alghofaili, Albatul Albattah, Noura Alrajeh, Murad A. Rassam, Bander Ali Saleh Al-rimy

Applied Sciences· Volume 11· Issue 19

Abstract

Cloud computing is currently becoming a well-known buzzword in which business titans, such as Microsoft, Amazon, and Google, among others, are at the forefront in developing and providing sophisticated cloud computing systems to their users in a cost-effective manner. Security is the biggest concern for cloud computing and is a major obstacle to users adopting cloud computing systems. Maintaining the security of cloud computing is important, especially for the infrastructure. Several research works have been conducted in the cloud infrastructure security area; however, some gaps have not been completely addressed, while new challenges continue to arise. This paper presents a comprehensive survey of the security issues at different cloud infrastructure levels (e.g., application, network, host, and data). It investigates the most prominent issues that may affect the cloud computing business model with regard to infrastructure. It further discusses the current solutions proposed in the literature to mitigate the different security issues at each level. To assist in solving the issues, the challenges that are still unsolved are summarized. Based on the exploration of the current challenges, some cloud features such as flexibility, elasticity and the multi-tenancy are found to pose new challenges at each infrastructure level. More specifically, the multi-tenancy is found to have the most impact at all infrastructure levels, as it can lead to several security problems such as unavailability, abuse, data loss and privacy breach. This survey concludes by giving some recommendations for future research.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Cloud Data Security Solutions · Blockchain Technology Applications and Security · IoT and Edge/Fog Computing

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Department of Information Technology, College of Computer, Qassim University, Buraydah 51452, Saudi Arabia

Faculty of Engineering and Information Technology, Taiz University, Taiz 6803, Yemen

Faculty of Engineering, Universiti Teknologi Malaysia, Johor Bahru 81310, Malaysia

References (100+)

Show source-provided references
1. An extended Intelligent Water Drops algorithm for workflow scheduling in cloud computing environment
2. An enhanced healthcare system in mobile cloud computing environment10.1007/s40595-016-0076-y ↗
3. Mell, P., and Grance, T. (2011). The NIST Definition of Cloud Computing, Nation-al Institute of Standards and Technology.10.6028/NIST.SP.800-145 ↗
4. Cloud Computing Security Aspects, Vulnerabilities and Countermeasures
5. Dinh, P.T., and Park, M. (2020, January 20–23). Dynamic Economic-Denial-of-Sustainability (EDoS) Detection in SDN-based Cloud. Proceedings of the 2020 Fifth International Conference on Fog and Mobile Edge Computing (FMEC), Paris, France.10.1109/FMEC49853.2020.9144972 ↗
6. Karajeh, H., Maqableh, M., and Masa’deh, R. (2020, January 13–14). Privacy and security issues of cloud computing environment. Proceedings of the 23rd IBIMA Conference Vision, Valencia, Spain.
7. Han, J., Zang, W., Chen, S., and Yu, M. (2017, January 19–21). Reducing Security Risks of Clouds Through Virtual Machine Placement. Proceedings of the IFIP Annual Conference on Data and Applications Security and Privacy, Philadelphia, PA, USA.10.1007/978-3-319-61176-1_15 ↗
8. Lattice based access control for protecting user data in cloud environments with hybrid security10.1016/j.cose.2020.102074 ↗
9. Vaquero, L.M., Rodero-Merino, L., Caceres, J., and Lindner, M. (2008). A Break in the Clouds: Towards a Cloud Definition, ACM.10.1145/1496091.1496100 ↗
10. Siddiqui, S., Darbari, M., and Yagyasen, D. (2019). A Comprehensive Study of Challenges and Issues in Cloud Computing. Soft Computing and Signal Processing, Springer.10.1007/978-981-13-3600-3_31 ↗
11. Cloud Computing—The Business Perspective10.1016/j.dss.2010.12.006 ↗
12. Cloud computing security issues and challenges
13. Cloud Computing Delivery and Delivery Models: Opportunity and Challenges10.1166/asl.2018.11537 ↗
14. Cloud Computing: A review of the Concepts and Deployment Models
15. Exposing cloud computing as a failure
16. Exploring the cloud deployment and service delivery models
17. A survey on security challenges in cloud computing: Issues, threats, and solutions10.1007/s11227-020-03213-1 ↗
18. Reviews on Security Issues and Challenges in Cloud Computing10.1088/1757-899X/160/1/012106 ↗
19. Cloud Computing Environment and Security Challenges: A Review
20. Sikeridis, D., Papapanagiotou, I., Rimal, B.P., and Devetsikiotis, M. (2017). A Comparative taxonomy and survey of public cloud infrastructure vendors. arXiv.
21. Recent security challenges in cloud computing10.1016/j.compeleceng.2018.06.006 ↗
22. Exploring Data Security Issues and Solutions in Cloud Computing10.1016/j.procs.2017.12.089 ↗
23. A Survey on Cloud Computing
24. Survey on Threats and Risks in the Cloud Computing Environment10.1016/j.procs.2019.11.248 ↗
25. A Survey on Distributed Denial of Service (DDoS) Attacks in SDN and Cloud Computing Environments10.1109/ACCESS.2019.2922196 ↗
26. Alhenaki, L., Alwatban, A., Alamri, B., and Alarifi, N. (2019, January 1–3). A Survey on the Security of Cloud Computing. Proceedings of the 2019 2nd International Conference on Computer Applications & Information Security (ICCAIS), Riyadh, Saudi Arabia.10.1109/CAIS.2019.8769497 ↗
27. Privacy-preserving cloud computing on sensitive data: A survey of methods, products and challenges
28. On cloud security requirements, threats, vulnerabilities and countermeasures: A survey10.1016/j.cosrev.2019.05.002 ↗
29. Trusted Cloud Computing Architectures for infrastructure as a service: Survey and systematic literature review10.1016/j.cose.2018.12.014 ↗
30. Security Challenges over Cloud Environment from Service Provider Prospective
31. Security Mechanisms at different Levels in Cloud Infrastructure
32. Security Issues Associated with Big Data in Cloud Computing
33. Data Security Challenges and Its Solutions in Cloud Computing10.1016/j.procs.2015.04.171 ↗
34. Study on Cloud Security Risk and Remedy10.14257/ijgdc.2015.8.2.15 ↗
35. Cloud computing and data security threats taxonomy: A review10.3233/JIFS-179539 ↗
36. Balogh, Z., and Turčáni, M. (2016, January 18–21). Modeling of data security in cloud computing. Proceedings of the 2016 Annual IEEE Systems Conference (SysCon), Orlando, FL, USA.10.1109/SYSCON.2016.7490658 ↗
37. Wani, A.R., Rana, Q.P., Saxena, U., and Pandey, N. (2019, January 4–6). Analysis and Detection of DDoS Attacks on Cloud Computing Environment using Machine Learning Techniques. Proceedings of the 2019 Amity International Conference on Artificial Intelligence (AICAI), Dubai, United Arab Emirates.10.1109/AICAI.2019.8701238 ↗
38. Al Amri, S.M., and Guan, L. (2016, January 13–15). Infrastructure as a service: Exploring network access control challenges. Proceedings of the 2016 SAI Computing Conference (SAI), London, UK.10.1109/SAI.2016.7556042 ↗
39. Sharma, A., Keshwani, B., and Dadheech, P. (2019, January 26–28). Authentication issues and techniques in cloud computing security: A review. Proceedings of the International Conference on Sustainable Computing in Science, Technology and Management (SUSCOM), Jaipur, India.10.2139/ssrn.3362164 ↗
40. Kazim, M., and Zhu, S.Y. (2015). A survey on top security threats in cloud computing. Int. J. Adv. Comput. Sci. Appl., 6.10.14569/IJACSA.2015.060316 ↗
41. Evaluation of the impact of EDoS attacks against cloud computing services10.1007/s13369-014-1548-y ↗
42. Cloud Computing Challenges and Solutions
43. A Survey among Network Operators on BGP Prefix Hijacking10.1145/3211852.3211862 ↗
44. Mohiuddin, I., Almogren, A., Alrubaian, M., and Al-Qurishi, M. (2019, January 1–3). Analysis of network issues and their impact on Cloud Storage. Proceedings of the 2019 2nd International Conference on Computer Applications & Information Security (ICCAIS), Riyadh, Saudi Arabia.10.1109/CAIS.2019.8769585 ↗
45. Tank, D., Aggarwal, A., and Chaubey, N. (2019). Virtualization vulnerabilities, security issues, and solutions: A critical study and comparison. Int. J. Inf. Technol., 1–16.
46. Krishna, S.R., and Rani, B.P. (2017). Virtualization Security Issues and Mitigations in Cloud Computing. Proceedings of the First International Conference on Computational Intelligence and Informatics, Springer.10.1007/978-981-10-2471-9_12 ↗
47. Classifying malware attacks in IaaS cloud environments10.1186/s13677-017-0098-8 ↗
48. Preventing from Cross-VM Side-Channel Attack Using New Replacement Method10.1007/s11277-017-4753-7 ↗
49. Data and infrastructure security auditing in cloud computing environments10.1016/j.ijinfomgt.2013.11.002 ↗
50. Optimized Public Auditing and Data Dynamics for Data Storage Security in Cloud Computing10.1016/j.procs.2016.07.286 ↗
51. Data Classification for Achieving Security in Cloud Computing10.1016/j.procs.2015.03.087 ↗
52. A Secure Cloud Computing Model based on Data Classification10.1016/j.procs.2015.05.150 ↗
53. Privacy-preserving outsourced classification in cloud computing10.1007/s10586-017-0849-9 ↗
54. MetaCloudDataStorage Architecture for Big Data Security in Cloud Computing10.1016/j.procs.2016.05.138 ↗
55. A combined approach to ensure data security in cloud computing10.1016/j.jnca.2012.07.007 ↗
56. A Study on Data Storage Security Issues in Cloud Computing10.1016/j.procs.2016.07.335 ↗
57. Ensuring attribute privacy protection and fast decryption for outsourced data security in mobile cloud computing10.1016/j.ins.2016.04.015 ↗
58. Amalarethinam, I.G., and Leena, H. (2017, January 2–4). Enhanced RSA Algorithm with Varying Key Sizes for Data Security in Cloud. Proceedings of the 2017 World Congress on Computing and Communication Technologies (WCCCT), Tiruchirappalli, India.10.1109/WCCCT.2016.50 ↗
59. Data Security in Cloud Computing Using Elliptic Curve Cryptography
60. Sajay, K.R., Babu, S.S., and Vijayalakshmi, Y. (2019). Enhancing the security of cloud data using hybrid encryption algorithm. J. Ambient. Intell. Hum. Comput., 1–10.10.1007/s12652-019-01403-1 ↗
61. Belguith, S., Jemai, A., and Attia, R. (2015, January 24–29). Enhancing data security in cloud computing using a lightweight cryptographic algorithm. Proceedings of the Eleventh International Conference on Autonomic and Autonomous Systems, Rome, Italy.
62. Scale Inside-Out: Rapid Mitigation of Cloud DDoS Attacks10.1109/TDSC.2017.2763160 ↗
63. Ficco, M., and Rak, M. (2016). Economic denial of sustainability mitigation in cloud computing. Organizational Innovation and Change, Springer International Publishing.10.1007/978-3-319-22921-8_18 ↗
64. Nautiyal, S., and Wadhwa, S. (2019, January 21–22). A Comparative Approach to Mitigate Economic Denial of Sustainability (EDoS) in a Cloud Environment. Proceedings of the 2019 4th International Conference on Information Systems and Computer Networks (ISCON), Mathura, India.10.1109/ISCON47742.2019.9036257 ↗
65. Rehman, F., Akram, S., and Shah, M.A. (2016, January 7–8). The framework for efficient passphrase-based multifactor authentication in cloud computing. Proceedings of the 2016 22nd International Conference on Automation and Computing (ICAC), Colchester, UK.10.1109/IConAC.2016.7604891 ↗
66. Ojha, S., and Rajput, V. (2017, January 10–11). AES and MD5 based secure authentication in cloud computing. Proceedings of the 2017 International Conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud) (I-SMAC), Palladam, India.10.1109/I-SMAC.2017.8058300 ↗
67. Rajeswari, P., Raju, S.V., Ashour, A.S., and Dey, N. (2017). Multi-fingerprint unimodel-based biometric authentication supporting cloud computing. Intelligent Techniques in Signal Processing for Multimedia Security, Springer.10.1007/978-3-319-44790-2_21 ↗
68. Multi Factor Two-way Hash-Based Authentication in Cloud Computing
69. Seamless secure anonymous authentication for cloud-based mobile edge computing10.1016/j.compeleceng.2020.106782 ↗
70. A Novel Pairing-Free Lightweight Authentication Protocol for Mobile Cloud Computing Framework10.1109/JSYST.2020.2998721 ↗
71. Zhang, Y., Krishnan, R., and Sandhu, R. (2014, January 3). Secure Information and Resource Sharing in Cloud Infrastructure as a Service. Proceedings of the 2014 ACM Workshop on Information Sharing & Collaborative Security, Scottsdale, AZ, USA.10.1145/2663876.2663884 ↗
72. Banyal, R.K., Jain, V.K., and Jain, P. (2014, January 14–16). Dynamic Trust Based Access Control Framework for Securing Multi-Cloud Environment. Proceedings of the 2014 International Conference on Information and Communication Technology for Competitive Strategies—ICTCS ’14, Udaipur, India.10.1145/2677855.2677884 ↗
73. Zhou, C., and Li, B. (2014, January 8–11). iHAC: A Hybrid Access Control Framework for IaaS Clouds. Proceedings of the 2014 IEEE/ACM 7th International Conference on Utility and Cloud Computing, London, UK.10.1109/UCC.2014.139 ↗
74. Auxilia, M., and Raja, K. (2014, January 17–19). Dynamic Access Control Model for Cloud Computing. Proceedings of the 2014 Sixth International Conference on Advanced Computing (ICoAC), Chennai, India.10.1109/ICoAC.2014.7229744 ↗
75. AuthPrivacyChain: A Blockchain-Based Access Control Framework with Privacy Protection in Cloud10.1109/ACCESS.2020.2985762 ↗
76. Bendiab, K., Kolokotronis, N., Shiaeles, S., and Boucherkha, S. (2018, January 12–15). WiP: A novel blockchain-based trust model for cloud identity management. Proceedings of the 2018 IEEE 16th Intl Conf on Dependable, Autonomic and Secure Computing, 16th Intl Conf on Pervasive Intelligence and Computing, 4th Intl Conf on Big Data Intelligence and Computing and Cyber Science and Technology Congress (DASC/PiCom/DataCom/CyberSciTech), Athens, Greece.10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00126 ↗
77. FCMDT: A novel fuzzy cognitive maps dynamic trust model for cloud federated identity management10.1016/j.cose.2019.06.011 ↗
78. Identity and Access Management as Security-as-a-Service from Clouds10.1016/j.procs.2016.03.117 ↗
79. Preserving Privacy in Cloud Identity Management Systems Using DCM (Dual Certificate Management)
80. Hassan, Z., Odarchenko, R., Gnatyuk, S., Zaman, A., and Shah, M. (2018, January 16–18). Detection of Distributed Denial of Service Attacks Using Snort Rules in Cloud Computing & Remote Control Systems. Proceedings of the 2018 IEEE 5th International Conference on Methods and Systems of Navigation and Motion Control (MSNMC), Kyiv, Ukraine.10.1109/MSNMC.2018.8576287 ↗
81. Badve, O.P., Gupta, B., Yamaguchi, S., and Gou, Z. (2015, January 27–30). DDoS detection and filtering technique in cloud environment using GARCH model. Proceedings of the 2015 IEEE 4th Global Conference on Consumer Electronics (GCCE), Osaka, Japan.10.1109/GCCE.2015.7398603 ↗
82. Jouini, M., and Rabai, L.B.A. (2019). A. A security framework for secure cloud computing environments. Cloud Security: Concepts, Methodologies, Tools, and Applications, IGI Global.10.4018/978-1-5225-8176-5.ch011 ↗
83. Rajendran, B., and Shetty, P. (August, January 30). Domain Name System (DNS) Security: Attacks Identification and Protection Methods. Proceedings of the International Conference on Security and Management (SAM), Las Vegas, NV, USA.
84. An Integrated Architecture for Software Defined and Virtualized Radio Access Networks with Fog Computing10.1109/MNET.2017.1600027NM ↗
85. Analyzing the Security Mechanisms to Prevent Unauthorized Access in Cloud and Network Security10.1166/jctn.2018.7407 ↗
86. Bayesian network based weighted APT attack paths modeling in cloud computing10.1016/j.future.2019.02.045 ↗
87. Designing an efficient security framework for detecting intrusions in virtual network of cloud computing10.1016/j.cose.2019.05.016 ↗
88. Velliangiri, S., Karthikeyan, P., and Kumar, V.V. (2021). Detection of distributed denial of service attack in cloud computing using the optimization-based deep networks. J. Exp. Artif. Intell., 1–20.10.1080/0952813X.2020.1744196 ↗
89. Dildar, M.S., Khan, N., Bin Abdullah, J., and Khan, A.S. (2017, January 26–27). Effective way to defend the hypervisor attacks in cloud computing. Proceedings of the 2017 2nd International Conference on Anti-Cyber Crimes (ICACC), Abha, Saudi Arabia.10.1109/Anti-Cybercrime.2017.7905282 ↗
90. HIDS: A host based intrusion detection system for cloud computing environment10.1007/s13198-014-0277-7 ↗
91. Jaber, A.N., Zolkipli, M.F., Shakir, H.A., and Jassim, M.R. (2017, January 8–10). Host based intrusion detection and prevention model against DDoS attack in cloud computing. Proceedings of the International Conference on P2P, Parallel, Grid, Cloud and Internet Computing, Barcelona, Spain.10.1007/978-3-319-69835-9_23 ↗
92. Ramamoorthy, S., and Rajalakshmi, S. (2016). A Preventive Method for Host Level Security in Cloud Infrastructure. Proceedings of the 3rd International Symposium on Big Data and Cloud Computing Challenges (ISBCC–16’), Springer.10.1007/978-3-319-30348-2_1 ↗
93. Kumara, A., and Jaidhar, C. (2015, January 26–28). Hypervisor and virtual machine dependent Intrusion Detection and Prevention System for virtualized cloud environment. Proceedings of the 2015 1st International Conference on Telematics and Future Generation Networks (TAFGEN), Kuala Lumpur, Malaysia.10.1109/TAFGEN.2015.7289570 ↗
94. Isolation in cloud computing infrastructures: New security challenges10.1007/s12243-019-00703-z ↗
95. Deshpande, S.M., and Ainapure, B. (2016, January 2–3). An Intelligent Virtual Machine Monitoring System Using KVM for Reliable And Secure Environment in Cloud. Proceedings of the 2016 IEEE International Conference on Advances in Electronics, Communication and Computer Technology (ICAECCT), Pune, India.10.1109/ICAECCT.2016.7942605 ↗
96. Gomez-Rodriguez, M.A., Sosa-Sosa, V.J., and Gonzalez-Compean, J.L. (2017, January 26–28). Assessment of Private Cloud Infrastructure Monitoring Tools. Proceedings of the 6th International Conference on Data Science, Technology and Applications, Madrid, Spain.10.5220/0006484503710381 ↗
97. Mahajan, V., and Peddoju, S.K. (2017, January 1–4). Deployment of Intrusion Detection System in Cloud: A Performance-Based Study. Proceedings of the 2017 IEEE Trustcom/BigDataSE/ICESS, Sydney, NSW, Australia.10.1109/Trustcom/BigDataSE/ICESS.2017.359 ↗
98. Hypervisor-based cloud intrusion detection through online multivariate statistical change tracking10.1016/j.cose.2019.101646 ↗
99. Security supportive energy-aware scheduling and energy policies for cloud environments10.1016/j.jpdc.2018.04.015 ↗
100. Singh, P., Khan, B., Vidyarthi, A., Alhelou, H.H., and Siano, P. (2019). Energy-Aware Online Non-Clairvoyant Scheduling Using Speed Scaling with Arbitrary Power Function. Appl. Sci., 9.10.3390/app9071467 ↗