Requirements and Challenges for Securing Cloud Applications and Services

ABSTRACT: Adopting cloud computing is a complex decision involving many factors. This paper focuses on the central issues of cloud computing security. The Cloud Computing Architectural Framework, provides a conceptual framework to help evaluate initial cloud risks and inform security decisions. It’s a quick method for evaluating the tolerance for moving an asset to various cloud computing models. The keys to understanding how cloud architecture impacts security architecture are a common and concise lexicon, coupled with a consistent taxonomy of offerings by which cloud services and architecture can be deconstructed, mapped to a model of compensating security and operational controls, risk assessment and management frameworks, and in turn to compliance standards. Understanding the relationships and dependencies between Cloud computing models is critical to understanding Cloud computing security risks. The purpose of this paper is to provide needed context for assistance in making educated risk management decisions regarding their cloud adoption strategies