• DocumentCode
    2384695
  • Title

    Analysis on Cloud-Based Security Vulnerability Assessment

  • Author

    Li, Huan-Chung ; Liang, Po-Huei ; Yang, Jiann-Min ; Chen, Shiang-Jiun

  • Author_Institution
    Grad. Inst. of Networking & Multimedia, Nat. Taiwan Univ., Taipei, Taiwan
  • fYear
    2010
  • fDate
    10-12 Nov. 2010
  • Firstpage
    490
  • Lastpage
    494
  • Abstract
    Cloud computing delivery model can significantly reduce enterprise IT costs and complexities. This technology can handle the rapidly gowning environment and provide more flexible resources sharing and hence it has become as anew information technology infrastructure recently. In contrast to traditional enterprise IT solution, cloud computing moves the application software and databases to the servers in large data centers which raise many security challenges. The business model now allows the users to purchase the capacity they require when they require it. The providers can maximize the utilization by multiplexing customer virtual machines (VMs) across a shared physical infrastructure. In the shared cloud environment, it would be possible to launch an attack cross VMs. How to define the policies for individual virtual firewall becomes more important. In this paper, we investigate the different security vulnerability assessments among the cloud environments. Experiment shows there are more vulnerability happened if vulnerability tools and the servers are in the same LAN. In other word, the hackers can find an easier way to get the target information if sit on the same LAN. This experimental result can be used to analysis the risk in third party compute clouds.
  • Keywords
    authorisation; cloud computing; computer network security; local area networks; virtual machines; LAN; business model; cloud computing; cloud-based security vulnerability assessment; data center; enterprise IT solution; hacker; information technology infrastructure; virtual firewall; virtual machine; Cloud computing; Electronic mail; Encryption; Fires; Servers; Virtual machining; Cloud computing; Security; Virtualization; Vulnerability;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    e-Business Engineering (ICEBE), 2010 IEEE 7th International Conference on
  • Conference_Location
    Shanghai
  • Print_ISBN
    978-1-4244-8386-0
  • Electronic_ISBN
    978-0-7695-4227-0
  • Type

    conf

  • DOI
    10.1109/ICEBE.2010.77
  • Filename
    5704304