Classifying Security Threats in Cloud Networking

Bruno M. Barros, Leonardo H. Iwaya, Marcos A. Simplício Jr., Tereza C. M. B. Carvalho, András Méhes, Mats Näslund

2015

Abstract

A central component of managing risks in cloud computing is to understand the nature of security threats. The relevance of security concerns are evidenced by the efforts from both the academic community and technological organizations such as NIST, ENISA and CSA, to investigate security threats and vulnerabilities related to cloud systems. Provisioning secure virtual networks (SVNs) in a multi-tenant environment is a fundamental aspect to ensure trust in public cloud systems and to encourage their adoption. However, comparing existing SVN-oriented solutions is a difficult task due to the lack of studies summarizing the main concerns of network virtualization and providing a comprehensive list of threats those solutions should cover. To address this issue, this paper presents a threat classification for cloud networking, describing threat categories and attack scenarios that should be taken into account when designing, comparing, or categorizing solutions. The classification is based on the CSA threat report, building upon studies and surveys from the specialized literature to extend the CSA list of threats and to allow a more detailed analysis of cloud network virtualization issues.

Paper Citation

in Harvard Style

M. Barros B., H. Iwaya L., A. Simplício Jr. M., C. M. B. Carvalho T., Méhes A. and Näslund M. (2015). Classifying Security Threats in Cloud Networking . In Proceedings of the 5th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER, ISBN 978-989-758-104-5, pages 214-220. DOI: 10.5220/0005489402140220

in Bibtex Style

@conference{closer15,
author={Bruno M. Barros and Leonardo H. Iwaya and Marcos A. Simplício Jr. and Tereza C. M. B. Carvalho and András Méhes and Mats Näslund},
title={Classifying Security Threats in Cloud Networking},
booktitle={Proceedings of the 5th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER,},
year={2015},
pages={214-220},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0005489402140220},
isbn={978-989-758-104-5},
}

in EndNote Style

TY - CONF
JO - Proceedings of the 5th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER,
TI - Classifying Security Threats in Cloud Networking
SN - 978-989-758-104-5
AU - M. Barros B.
AU - H. Iwaya L.
AU - A. Simplício Jr. M.
AU - C. M. B. Carvalho T.
AU - Méhes A.
AU - Näslund M.
PY - 2015
SP - 214
EP - 220
DO - 10.5220/0005489402140220