Even with the vast potential that cloud computing has, so far, it has not been adopted by the consumers with the enthusiasm and pace that it be worthy; this is a very reason statement why consumers still hesitated of using cloud computing for their sensitive data and the threats that prevent the consumers from shifting to use cloud computing in general and cloud storage in particular. The cloud computing inherits the traditional potential security and privacy threats besides its own issues due to its unique structures. Some threats related to cloud computing are the insider malicious attacks from the employees that even sometime the provider unconscious about, the lack of transparency of agreement between consumer and provider, data loss, traffic hijacking, shared technology and insecure application interface. Such threats need remedies to make the consumer use its features in secure way. In this review, we spot the light on the most security and privacy issues which can be attributed as gaps that sometimes the consumers or even the enterprises are not aware of. We also define the parties that involve in scenario of cloud computing that also may attack the entire cloud systems. We also show the consequences of these threats.
翻译:尽管云计算拥有巨大潜力,但迄今为止,消费者对其的采纳热情和速度尚未达到其应有的水平。这充分解释了为何消费者仍对将敏感数据用于云计算心存疑虑,以及阻碍消费者转向使用云计算(尤其是云存储)的威胁因素。云计算不仅继承了传统安全与隐私威胁,其独特架构还衍生出自身特有的问题。与云计算相关的一些威胁包括:来自员工(甚至服务提供商都未必察觉)的恶意内部攻击、消费者与服务商之间协议缺乏透明度、数据丢失、流量劫持、共享技术以及不安全的应用程序接口。这些威胁需要采取补救措施,使消费者能够安全地使用云计算的各项功能。本综述聚焦于最突出的安全与隐私问题——这些往往连消费者乃至企业都未能察觉的漏洞。我们还明确了云计算场景中可能攻击整个云系统的相关参与方,并展示了这些威胁可能导致的后果。