Extensive Study of Cloud Computing Technologies, Threats and Solutions Prospective  

作　　者：Mwaffaq Abu-Alhaija Nidal M.Turab AbdelRahman Hamza 

机构地区：[1]Department of Networks and Information Security,Faculty of Information Technology,Al-Ahliyya Amman University,Amman,19328,Jordan [2]Department of Computer Science,Information Technology,Al-Ahliyya Amman University,Amman,19328,Jordan

出　　处：《Computer Systems Science & Engineering》2022年第4期225-240,共16页计算机系统科学与工程（英文）

摘　　要：Infrastructure as a Service(IaaS)provides logical separation between data,network,applications and machines from the physical constrains of real machines.IaaS is one of the basis of cloud virtualization.Recently,security issues are also gradually emerging with virtualization of cloud computing.Different security aspects of cloud virtualization will be explored in this research paper,security recognizing potential threats or attacks that exploit these vulnerabilities,and what security measures are used to alleviate such threats.In addition,a dis-cussion of general security requirements and the existing security schemes is also provided.As shown in this paper,different components of virtualization environ-ment are targets to various attacks that in turn leads to security issues compromis-ing the whole cloud infrastructure.In this paper an overview of various cloud security aspects is also provided.Different attack scenarios of virtualization envir-onments and security solutions to cater these attacks have been discussed in the paper.We then proceed to discuss API security concerns,data security,hijacking of user account and other security concerns.The aforementioned discussions can be used in the future to propose assessment criteria,which could be useful in ana-lyzing the efficiency of security solutions of virtualization environment in the face of various virtual environment attacks.

关 键 词：Cloud computing environment paravirtualization full virtualization cloud virtualization security HYPERVISOR virtual machines 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]