دانلود کتاب امنیت ابری – حملات، تکنیک ها، ابزارها و چالش ها

We are living in the era of cloud computing, where services are provisioned to the users on demand and ‘pay-per-use’ basis from a resource pool. Cloud computing has evolved gradually over a period of time. National Institute of Standards and Technology (NIST) defines cloud computing as a model for enabling convenient, ubiquitous and on-demand network access to a shared pool of computing resources (e.g., servers, network, storage and applications) that can be rapidly provisioned and released with minimal management effort or service provider interaction”. Users are gradually adopting cloud services because of the ease and flexibility with cloud services. Most of the companies are changing the way they operate and moving toward cloud-based services. However, attacking incidents are also increasing day by day with the evolu- tion of cloud computing. Security in such a complex technological environment is very important for providing assurance to cloud customers. Any vulnerabil- ity present in cloud, can allow the attacker to gain illegal privileges of Virtual Machine (VM) users. A malicious user can install advanced malware programs and gain higher access privileges (guest OS kernel privilege). A compromised guest kernel can call malicious drivers and can perform malicious actions. Once a VM is fully compromised, an attacker can try to launch attacks such as spreading malwares (virus, worm, etc.), flooding and scanning other VMs. A compromised VM is a big threat to cloud infrastructure which can bypass the security of other VMs. It could further lead to monetary disputes between cloud service provider (CSP) and legitimate VM users. Other than VM Se- curity, there exist various other security issues related to application level, Network level, Virtualization level, Data storage level, Identity management and Role-based access control, Cryptographic key management level, SLA and trust level, Auditing, governance and regulatory compliance and Cloud & CSP migration level security, discussed in the book in detail.