1
A Glance View on Cloud Infrastructures Security and Solutions

Srinivasa Rao Gundu1, Charanarur Panem2* and J. Vijaylaxmi3

1Department of Computer Science, Government Degree College-Sitaphalmandi, Hyderabad, Telangana, India

2School of Cyber Security and Digital Forensic, National Forensic Sciences University, Goa Campus, Goa, India

3PVKK Degree & PG College, Anantapur, Andhra Pradesh, India

Abstract

Clients may benefit from cutting-edge cloud computing solutions created and offered in a cost-effective way by firms. In terms of cloud computing, the most serious problem is security, which serves as a significant disincentive to individuals from embracing the technology in the first place. Making cloud computing secure, particularly when it comes to the underlying infrastructure, is essential. The domain of cloud infrastructure security has been subjected to a number of different research programs; nonetheless, certain gaps remain unresolved, and new challenges continue to emerge. This article provides an in-depth analysis of security issues that might arise at various levels of the cloud architecture hierarchy. Specifically, it focuses on the most significant infrastructure-related challenges that might have an impact on the cloud computing business model in the near future.

This chapter also discusses the several literature-based approaches to dealing with the different security challenges at each level that are now accessible. To assist in the resolution of the challenges, a list of the obstacles that have still to be conquered is presented. It has been discovered that numerous cloud characteristics such as flexibility, elasticity, and multi-tenancy create new problems at each infrastructure level after conducting an examination of the existing challenges. According to research, a variety of security threats, including lack of availability, unauthorized usage, data loss, and privacy violations, have the greatest effect across all levels of infrastructure. Multi-tenancy, in particular, has been proven to have the largest effect on infrastructure at all levels, even the most basic. The study comes to a close with a number of suggestions for further research.

Keywords: Cloud computing, secure cloud infrastructure, application security, network security, host security, data security

1.1 Introduction

Models for offering cloud computing services include the ones listed below as examples:

When it comes to providing cloud services, there are three fundamental models to consider, each of which is becoming more established and common with each passing generation. For this, there are many various approaches to consider, including software as a service, platform as a service, and infrastructure as a service (to name a few). A few of these strategies include software development, platform and infrastructure as a service, and cloud computing, among others (IaaS). In contrast to these three major models [1], an SPI model is a combination of them and may be characterized as follows:

In order to get access to programs that are hosted on service provider infrastructure, users must connect to them over the Internet. This is referred to as software as a service (also known as SaaS for short) or cloud computing, depending on who you ask. These strategies assist the customers of software offered under the SaaS business model, who are typically end users who subscribe to readily available programs. The SaaS model has also been associated with a pay and use feature that would allow the end users to access software through a web browser without having to deal with the headaches of installation, maintenance, or making a significant upfront payment [2]. Some of the popular SaaS apps include Sales force, Google Apps, and Google Docs.

User awareness is an important component of SaaS security from a security viewpoint. However, the SaaS provider must hold on to a set of security conditions in order to ensure that users adhere to the essential security protocols while using the service. Things like multi-factor authentication, complicated passwords, and password retention are examples of these requirements. An additional component that SaaS providers should have in place is the adoption of security measures to secure customers' data and to guarantee that it is available for permitted usage at all times [3].

In computing, the phrase Platform as a Service refers to a collection of software and development tools that are stored on the servers of a service provider and are available from any location on the Internet. It provides developers with a platform on which they may construct their apps without having to worry about the underlying mechanics of the service they are relying on for support. It also makes it easier to manage the software development life cycle, from planning to maintenance, in an efficient and effective way, thanks to the PaaS architecture.

The platform also makes use of programming languages such as VC++, Python, Java, etc. to allow users to construct their own apps on top of it. Many developers and programmers now depend on Platform as a Service (PaaS) firms such as WordPress, Go Daddy, and Amazon Web Services to build their websites and host their online applications. Security, according to the PaaS paradigm, is a shared responsibility that must be handled by both developers and service providers in equal measure. Example: When developing applications, developers must follow security standards and best practices to guarantee that the applications are safe and secure. A programmer, for example, must certify that the software is free of flaws and vulnerabilities [4] before exposing it to the general public.

Aspects of this process that are equally important include the detection and correction of any security flaws that attackers may exploit in order to get access to and compromise users' data. For developers, the dependability of PaaS technology, on the other hand, is critical in order to provide a safe and secure environment for application development. For example, several programming environments, such as C++, are well-known for having poor memory management, which enables attackers to conduct a variety of assaults against their victims, including stack overflows.

A lack of sufficient authentication in some relational database management systems (RDBMSs), such as Oracle, may also be exploited by attackers. Oracle, for example, allows users who have been granted admin permissions at the operating system level to access the database without the need for a username and password [5].

A kind of cloud computing paradigm in which a cloud computing service provider keeps the resources that are only shared with contractual customers that pay a per-use charge to the cloud computing service provider is known as Infrastructure as a Service (IaaS). In particular, one of the key benefits of the Equipment as a Service model is that it removes the need for a significant initial investment in computer infrastructure such as networking devices, computer processors and storage capacity, and servers. The technology may also be used to quickly and cost-effectively increase or reduce the amount of computer resources available to a user. In this day and age, with the proliferation of cloud delivery systems, it may be challenging to determine the boundaries of one's security responsibilities. Security is the responsibility of both cloud service providers (CSPs) and the clients that use their services. As seen in Illustration 5, the duties of cloud computing service delivery models are outlined. Cloud computing services include infrastructure as a service (IaaS) offerings such as Amazon Web Services, Cisco Meta-cloud, Microsoft Azure, and Google Compute Engine (GCE). It is important to note that customer-facing infrastructure is critical in terms of security since it acts as the first line of defense for the system's perimeter.

In this environment, attackers may use a variety of strategies to target the infrastructure, including denial of service (DoS) attacks and malware distribution campaigns. The majority of the time, the security of a PaaS solution is the responsibility of the service provider.

Cloud Models and Architectures: An introduction determining the kind of cloud an institution should use is the first and most important stage in cloud deployment, as this will allow for a more smooth installation process to take place. During the cloud deployment process, the second and final step is known as deployment. According to the authors, institutions who have failed to execute a deployment plan have done so as a result of selecting the incorrect kind of cloud infrastructure. In order to prevent failure, organizations must first assess their data before deciding on the kind of cloud infrastructure to use. While many consumers consider security when signing up for cloud services, many do not because they have a misconception of the efficiency of the protection given by cloud services in and of itself. When it comes to keeping their data secure, many businesses that use cloud computing depend only on the security measures employed by cloud service providers. This may provide hostile actors the ability to exploit client-side vulnerabilities in order to attack the systems of one or more tenants as a result of the situation [6].

To mention a few examples, public cloud, private cloud, community cloud, and hybrid cloud are all concepts that are being explored.

Public cloud is often referred to as an external cloud in some areas, as is the...