Section I Introduction
Chapter 1 ? Cloud Computing Essentials 3
Anna Squicciarini, Daniela Oliveira, and Dan Lin
Chapter 2 ? An Overview of Cloud Computing 13
William Stallings
Chapter 3 ? Cloud Security Baselines 31
Daniela Oliveira, Anna Squicciarini, and Dan Lin
Chapter 4 ? Cloud Security, Privacy and Trust Baselines 45
Nikolaos Pitropakis, Sokratis Katsikas, and Costas Lambrinoudakis
Chapter 5 ? Infrastructure as a Service (IaaS) 65
Mario Santana
Section II Risk Analysis and Division of Responsibility
Chapter 6 ? Risk and Trust As ess ment: Schemes for Cloud Services 73
Erdal Cayirci
Chapter 7 ? Managing Risk in the Cloud 85
Michaela Iorga and Anil Karmel
Chapter 8 ? Cloud Security Risk Management 95
Marco Cremonini
Chapter 9 ? Secure Cloud Risk Management: Risk Mitigation Methods 115
Jim Harmening and Randall DeVitto
Section III Securing the Cloud Infrastructure
Chapter 10 ? Specification and Enforcement of Access Policies in Emerging Scenarios 129
Sabrina De Capitani di Vimercati, Sara Foresti, and Pierangela Samarati
Chapter 11 ? Cryptographic Key Management for Data Protection 151
Sarbari Gupta
Chapter 12 ? Cloud Security Access Control: Distributed Access Control 157
Jim Harmening and Randall DeVitto
Chapter 13 ? Cloud Security Key Management: Cloud User Controls 167
Weiyu Jiang, Jingqiang Lin, Zhan Wang, Bo Chen, and Kun Sun
Chapter 14 ? Cloud Computing Security Ess entials and Architecture 195
Michaela Iorga and Anil Karmel
Chapter 15 ? Cloud Computing Architecture and Security Concepts 213
Pramod Pandya and Riad Rahmo
Chapter 16 ? Secure Cloud Architecture 225
Pramod Pandya
Section IV Operating System and Network Security
Chapter 17 ? Locking Down Cloud Servers 237
Thorsten Herre
Chapter 18 ? Third-Party Providers Integrity Assurance for Data Outsourcing 255
Jiawei Yuan and Shucheng Yu
Section V Meeting Compliance Requirements
Chapter 19 ? Negotiating Cloud Security Requirements with Vendors 271
Daniel S. Soper
Chapter 20 ? Managing Legal Compliance in the Cloud: Understanding Contractual and
Personal Data Protection Requirements 283
Paolo Balboni
Chapter 21 ? Integrity Assurance for Data Outsourcing 299
Reza Curtmola and Bo Chen
Chapter 22 ? Secure Computation Outsourcing 311
Shams Zawoad and Ragib Hasan
Chapter 23 ? Computation Over Encrypted Data 329
Feng-Hao Liu
Chapter 24 ? Trusted Computing Technology 347
Felipe E. Medina
Chapter 25 ? Technology for Trusted Cloud Security: Survey and Open Issues 357
Roberto Di Pietro, Flavio Lombardi, and Matteo Signorini
Chapter 26 ? Trusted Computing Technology and Proposals for Resolving Cloud Computing
Security Problems 373
Ignazio Pedone, Daniele Canavese, and Antonio Lioy
Chapter 27 ? Assuring Compliance with Government Certification and Accreditation Regulations 387
Sarbari Gupta
Chapter 28 ? Government Certification, Accreditation, Regulations, and Compliance Risks 395
Thorsten Herre
Section VI Preparing for Disaster Recovery
Chapter 29 ? Simplifying Secure Cloud Computing Environments with Cloud Data Centers 411
Thorsten Herre
Chapter 30 ? Availability, Recovery, and Auditing across Data Centers 425
Reza Curtmola and Bo Chen
Section VII Advanced Cloud Computing Security
Chapter 31 ? Advanced Security Architecture for Cloud Computing 443
Albert Caballero
Chapter 32 ? Side-Channel Attacks and Defenses on Cloud Traffic 463
Wen Ming Liu and Lingyu Wang
Chapter 33 ? Clouds Are Evil 477
John Strand
Chapter 34 ? Future Directions in Cloud Computing Security: Risks and Challenges 489
Mohammad Kamrul Islam and Rasib Khan
