Privacy and Security for Cloud Computing

by Siani Pearson (Editor), George Yee (Editor)

Overview

This book analyzes the latest advances in privacy, security and risk technologies within cloud environments. With contributions from leading experts, the text presents both a solid overview of the field and novel, cutting-edge research. A Glossary is also included at the end of the book. Topics and features: considers the various forensic challenges for legal access to data in a cloud computing environment; discusses privacy impact assessments for the cloud, and examines the use of cloud audits to attenuate cloud security problems; reviews conceptual issues, basic requirements and practical suggestions for provisioning dynamically configured access control services in the cloud; proposes scoped invariants as a primitive for analyzing a cloud server for its integrity properties; investigates the applicability of existing controls for mitigating information security risks to cloud computing environments; describes risk management for cloud computing from an enterprise perspective.

Product Details

ISBN-13:	9781447141884
Publisher:	Springer London
Publication date:	08/28/2012
Series:	Computer Communications and Networks
Edition description:	2013
Pages:	308
Product dimensions:	6.10(w) x 9.25(h) x 0.03(d)

About the Author

Dr. Siani Pearson is a senior researcher in the Cloud and Security Research Lab of HP Labs, Bristol, UK.

Dr. George Yee is a consultant with his own company, and an Adjunct Research Professor in the Department of Systems and Computer Engineering at Carleton University, Ottawa, ON, Canada.

Table of Contents

Part I: Introduction to the Issues

Privacy, Security and Trust in Cloud Computing
S. Pearson

Part II: Law Enforcement and Audits

Accessing Data in the Cloud: The Long Arm of the Law Enforcement Agent
I. Walden

A Privacy Impact Assessment Tool for Cloud Computing
D. Tancock, S. Pearson, and A. Charlesworth

Understanding Cloud Audits
F. Doelitzscher, C. Reich, M. Knahl, and N. Clark

Part III: Security and Integrity

Security Infrastructure for Dynamically Provisioned Cloud Infrastructure Services
Y. Demchenko, C. Ngo, C. de Laat, D. Lopez, A. Morales, and J. A. García-Espín

Modeling the Runtime Integrity of Cloud Servers: a Scoped Invariant Perspective
J. Wei, C. Pu, C. V. Rozas, A. Rajan, and F. Zhu

Part IV: Risk Considerations

Inadequacies of Current Risk Controls for the Cloud
S. Creese, M. Goldsmith and P. Hopkins

Enterprise Information Risk Management: Dealing with Cloud Computing
S. Shiu, A. Baldwin, and D. Pym

Editorial Reviews

From the reviews:

“The volume consists of eight chapters across four headings, covering different aspects of privacy and security issues in cloud computing. … this informative volume … provides not only a comprehensive overview but also proposed practical solutions on how to increase privacy and security in cloud computing. The book will be beneficial to business professionals and researchers working in this area.” (Monika Zalnieriute, Privacy Laws & Business, International Report, Issue 124, August, 2013)

"This book offers insight into some of the issues in cloud computing that need immediate attention. The contributors and editors have done a good job in producing this book when it is most needed; it should stimulate research into privacy and security in cloud computing." (S. V. Nagaraj, ACM Computing Reviews, May 17 2013, Review #: CR141225)

From the Publisher