I am willing to do work on cloud security issues at SaaS and IaaS. for the same. Can anyone suggest approaches and future scopes for this?
Dear respected researchers,
I have a complete section about "Implementation Challenges of CC Adoption" in my new paper (65-pages) which contains 65 pages about this subject and the IoT:
Nidhal Kamel Taha El-Omari, “Cloud IoT as a Crucial Enabler: a Survey and Taxonomy”, Modern Applied Science, The Canadian Center of Science and Education, published by Canadian Center of Science and Education, Canada, p-ISSN: 1913-1844, e-ISSN: 1913-1852, DOI:10.5539/mas.v13n8p86, 13(8):86-149, 2019.
Or simply you can click the link below:
https://www.researchgate.net/publication/334725286_Cloud_IoT_as_a_Crucial_Enabler_a_Survey_and_Taxonomy
That's a pretty nice challenge... I did some work on that already as a part of my MSc. Thesis, and I started working to publish a full article on that in a journal when I finished my MSc. I'm more than 60% done with the article already. We can share ideas about it if you don't mind, as a form of collaboration, and I'll credit you as a co-Author when I publish the research...
Thanks!!!
what other research challenges need to be addressed in IaaS/PaaS that you analysed during your research work?
Security point of View, the difference between SaaS and IaaS are;
SaaS: In SaaS, the Cloud Customers will use Software as a Solution for their Business process,here Customer wont be having any control over it, the Cloud Service Provider will have ultimate control so it directly rises the issue of Security.
IaaS:In Infrastructure as a Solution, the Cloud User will be having control over application,software and on some platform but the data process and storage takes place out of the organisational infrastructure, wherefore it involves data protection and other security threats like Cyber attack.
You can start from here - if you haven't already found it
https://cloudsecurityalliance.org/
There are still challenges on Resource Allocation, Resource Monitoring, and Adherence to Service Level Agreements (SLAs)...
A "hot topic" in IaaS clouds is trust: How can the cloud customer trust the cloud provider? The easy - in my opinion solved - "problem" is: confidentiality of DATA sent to STORAGE clouds -> solution: just encrypt the data at the customer's site; then send it. Same with integrity of data sent to storage clouds: just add a default integrity technology (MAC oder digital signature): check it after receiving back the data from the cloud.
The real problem (and thus) the hot topic is: How can the cloud customer trust the cloud provider when sending CODE to the cloud. We cannot just encrypt the code at the customer site. The provider must decrypt the code on his site -> the problem is: the provider has full insight (and control) of code sent to the cloud. This scenario is the normal scenario in many cloud environments: sending code (=virtual machines) to the provider or hosting (private) virtual machines that belong to the customer at the provider site. If you are interested in this topic see the slides of my talk I gave at ECCWS2014 and my paper.
https://www.researchgate.net/publication/264338893_RetainingControlSimma_v6?ev=prf_pub
https://www.researchgate.net/publication/264037748_Retaining_Control_Over_Private_Virtual_Machines_Hosted_by_a_Cloud_Provider
Data RetainingControlSimma v6
Conference Paper Retaining Control Over Private Virtual Machines Hosted by a ...
Data Security is the key issue as well as others below
Network Security
Authentication
Access
Data confidentiality
Web Application Security
- Badges
- Science topic