Shall we share our opinions on the topic where most is happening in industry and research today?
cloud computing became the cornerstone for computation, but also new kind of security problems arises. In cloud, you have two options; trust the service provider or find a strong trusted protection technique to secure you data and programs executed on cloud
If cloud computing is worth enough to stay in the computing world, then necessary security features will get evolved and standardised over a period of time.
You may visit http://cloudsecurity.org/ for details
in cloud computing scalability and security are two important to things for better QoS.New type of security problems arises compared to wireless networks or any other networks, so there is a need to evolve security features under the f optimum QoS metrics,
Instead of discussing how to secure cloud computing, I would personally like to look at it in the other direction. That is, how should we use cloud and its power to assist in making networks and devices more secure?
For example, why not use cloud to continously monitor our network? Why not use it for intrusion detection (using the power of cloud, it may finally be possible to detect attacks or abnormalities in real-time) or prevention? Why not use it to help us scan for virus and orther malware better?
Eventually, attackers will use cloud and its resource to break cryptography and cryptographic protocols. Why don't we use cloud to make things more secure?
@Sirapat Boonkrong:
You are right in pointing that the computational power offered by cloud computing may be used to implement computationally-demanding security mechanisms like monitoring or malware detection (probably not so much intrusion detection). The problem in this case is the possibility of the cloud turning out in our worst nightmare for privacy and freedom. Strong privacy-preserving solutions should be a core part of those mechanisms. Otherwise, they will not be accepted. We have worked in the field of privacy-respectful cloud monitoring in the PASSIVE project (http://ict-passive.eu/) and I can tell you that the development of "fair" solutions (those with a good balance between security and privacy) are far from easy to achieve.
In answer 1 and 4 it was stated that trust (or trust protection mechanisms) in the cloud provider is of upmost importance: Ghada Abozaid "….or find a strong trusted protection technique to secure you data and programs executed on cloud." Arun Velagapalli : "In current scenario high trust on service providers for cloud is required "
If you are interested in a technology to increase trust in the cloud provider (by giving the customer a proof about the provider's system) look at our paper: https://www.researchgate.net/publication/264037748_Retaining_Control_Over_Private_Virtual_Machines_Hosted_by_a_Cloud_Provider
Conference Paper Retaining Control Over Private Virtual Machines Hosted by a ...
We've also been working on the use of TPMs for security in cloud computing for a while. See:
- https://www.researchgate.net/publication/262209548_Bridging_the_GAP_between_Software_Certification_and_Trusted_Computing_for_Securing_Cloud_Computing?ev=prf_pub
- http://www.cumulus-project.eu/
@Armin: Maybe we could think of some way to collaborate...
Conference Paper Bridging the GAP between Software Certification and Trusted ...
- Badges
- Science method