Page 1 of 12
European Journal of Business &
Social Sciences
Available at https://ejbss.org/
ISSN: 2235-767X
Volume 07 Issue 01
January 2019
Available online: https://ejbss.org/ P a g e | 505
Security Issues In Cloud Computing: A Review
EKTA DUREJA* RITU BHARDWAJ**
Assistant Professors, Faculty of Computer Science,
S.D. (PG) College, Panipat
ABSTRACT
Cloud computing is an Internet-based computing service provided by the third party allowing
share of resources and data among devices. It is widely used in many organizations nowadays
and becoming more popular because it changes the way of how the Information Technology
(IT) of an organization is organized and managed. It provides lots of benefits such as
simplicity and lower costs, almost unlimited storage, least maintenance, easy utilization,
backup and recovery, continuous availability, quality of service, automated software
integration, scalability, flexibility and reliability, easy access to information, elasticity, quick
deployment and lower barrier to entry. While there is increasing use of cloud computing
service in this new era, the security issues of the cloud computing become a challenges. Cloud
computing must be safe and secure enough to ensure the privacy of the users. The purpose of
this article is to understand the security issues and to defeat these events in parliamentary
procedure to secure users' assets. In the result of this study, they were able to understand the
issues and provide some new methods or algorithm to resolve these issues.
Key Words: Security Issues, Cloud Computing, Threats, Countermeasures
1. INTRODUCTION
With the advancement in technology, the IT infrastructure has changed completely. In the
past, an organization had to deploy expensive infrastructure to perform their routine tasks and
store the operational data of the organization. Normally data was stored in Relational
Databases on one or more servers located inside the organization and the clients needed to
request data from these server machines. This was quite costly as the organization needed to
hire personnel for deploying, managing and maintaining the infrastructure. In the last decades,
concept of Clusters and Grid Computing opened new ways for information architecture and
Page 2 of 12
European Journal of Business &
Social Sciences
Available at https://ejbss.org/
ISSN: 2235-767X
Volume 07 Issue 01
January 2019
Available online: https://ejbss.org/ P a g e | 506
storage. It became possible to store data on clusters or in the form of grids that were loosely
coupled, heterogeneous and geographically dispersed. The concept of Cloud Computing is
relatively a new concept originating its basis from Clusters and Grid Computing. It uses the
same idea of broad network access and resource pooling but it is different from the cluster and
grids as it can provide on-demand self services to its users. No doubt, Cloud Computing has
provided many exciting services and features like flexibility, reliability, unlimited storage,
portability and the quick processing power but cloud security is still a big issue. Security
issues including lack of trust, the risk of malicious insiders, and the failing of cloud services
have been discussed in.
2. RELATED WORKS
The architecture of cloud composed of several service models and deployment models.
2.1 Service Model
2.1.1 Software as a service (SaaS): It is the top layer of cloud service model. The cloud
service provider developed and hosts the software or application on the cloud infrastructure
allowing the users to use it with various devices by using the thin client interface such as web
browser. However the underlying cloud infrastructure, network, servers, operating systems or
even individual application capabilities is not manageable by the users. It helps the users to
save cost because of licensing of the traditional packages is more expensive compared to the
monthly fee for renting the application from cloud service.
2.1.2 Platform as a service (PaaS): A middle layer of cloud service model that provides a
software environment or platform for the users to design, develop, deploy and test their
application without worrying about the underlying of the cloud infrastructure using the virtual
servers of the cloud service provided. Therefore, the users can build their own applications
which running on the provider’s infrastructure and they have control over the deployed
application they built.
2.1.3 Infrastructure as a Service (IaaS): The user allowed rent the processing, storage and
other fundamental computing resources to deploy and run arbitrary software which include
operating system and applications and they have control over the operating system and
Page 3 of 12
European Journal of Business &
Social Sciences
Available at https://ejbss.org/
ISSN: 2235-767X
Volume 07 Issue 01
January 2019
Available online: https://ejbss.org/ P a g e | 507
network. It provides basic storage and computing capabilities. It also has a data centre space
that can help to handle workload.
2.2. Deployment Model
2.2.1 Public cloud: The entire infrastructure of this cloud model is located on the premises of
the cloud service provider. The users normally share the same infrastructure pool with limited
configuration. It is accessible by any user and any user can store their data in the same cloud
provided by the cloud service provider. It provides scalable, dynamically provisioned and
virtualized resources available over the Internet.
2.2.2 Private cloud: The cloud infrastructure is owned by only one user and it is not shared
with the others. The user has physical control over the cloud infrastructure and it is more
secure compared to the public cloud where everyone shares a same cloud infrastructure. It
provides host services on private network that helps most corporate network and data
administrators to become in-house service provider efficiently. Studies by provides an
insights of a private cloud that addresses the requirements and needs of e-learning and
collaboration in university.
2.2.3 Hybrid cloud: Combination of the public, the private or even the community cloud
infrastructure which allowed the transitive information exchange. It increased the flexibility
of the cloud infrastructure where the users can implement the private cloud using the public
cloud resources.
2.2.4 Community cloud: The cloud infrastructure is shared among organizations that share
the same concerns such as the mission, security requirement and policy. It may owned by
more organization and it can exist on premises or even off-premises.
Each type of cloud model provides different level of control, flexibility and management. The
users should choose the most suitable type of cloud computing model based on their own
situation and their unique needs. This is very important since using unsuitable cloud model
might cause the users to suffer for a great loss such as reduced organization efficiency and
might as well more serious like data breaches, data loss and corrupted.
Studies by discussed the security issues for the cloud includes storage security, middleware
security, data security, network security and application security. They also conducted a study
