RESEARCH OF CYBER SECURITY TECHNOLOGIES OF CLOUD SERVICES IAAS, PAAS AND SAAS
DOI:
https://doi.org/10.28925/2663-4023.2024.24.627Keywords:
cyber security; access control; privacy; computer science; cloud services; telecommunication system; IaaS; PaaS; SaaS.Abstract
Cybersecurity threats are constantly evolving, and cloud computing is no exception. Attackers are improving attack techniques aimed at identifying vulnerabilities in IaaS, PaaS, and SaaS. The work examines the following problematic issues: insufficient analytical tools; data privacy and security; financial and organizational costs to ensure cyber security of IaaS, PaaS and SaaS cloud technologies. The aim of the work is to investigate how the common models of cloud computing: infrastructure as a service (IaaS), platform as a service (PaaS) and software as a service (SaaS) need to properly implement adequate and appropriate protection measures to ensure cyber security. For this purpose, the paper examined models of cloud technologies, it was determined that cloud services include various models that allow users to access various types of resources via the Internet. It has been found that there are three generally accepted models of cloud services: infrastructure as a service (IaaS), platform as a service (PaaS) and software as a service (SaaS), and two main players: the cloud provider and the cloud subscriber. The set of levels over which each of these players has control depends on the model of the cloud service or environment. For each of these cloud services, its description was given, recommendations were given for access control, privacy assurance, terms of use were defined, advantages and disadvantages were given, and market trends of these services were considered. Proposed approaches to the formation of a secure application development environment in cloud services. Features such as wide network access, resource pooling, fast elasticity, service metering, and data sharing are also summarized. Guidelines for designing access control for IaaS, PaaS, and SaaS according to their different characteristics are proposed. In addition, the security policy rules for each cloud system are summarized. Technologies are proposed to protect security at each of the three main layers of cloud services: the application, middleware, and virtual machine layers, due to differences in the organization that controls each of these layers. It was found that for any level it is possible to provide more effective protection if the same subject controls the level below. Since the network, hardware, and resource abstraction layer in all cloud service models are controlled by the cloud provider, it has more effective protections at its disposal.
Downloads
References
Nogueira, M., Sun, X., & De Sousa, R. T. (2019). Cybersecurity in Cloud Computing: Threats and Solutions. IEEE Communications Surveys & Tutorials, 21(1).
Kshetri, N. (2019). Privacy and security issues in cloud computing: The role of institutions and institutional evolution. Journal of Business Research, 92.
ISACA. (2022). State of cybersecurity 2022: cyber workforce challenges.
Verizon. (2023). 2023 Data Breach Investigations Report.
Bleeping Computer. (2022). MFA fatigue: hackers ’new favorite tactic in high-profile breaches.
Integrity Systems. (n.d.). Сloud computing. http://integritysys.com.ua/solutions/pricatecloud-solution
Wikipedia. (n.d.). Security as a service. https://uk.wikipedia.org/wiki/Безпека_як_послуга
Microsoft Azure. (n.d.). What is IaaS? Infrastructure as a Service. https://azure.microsoft.com/en-us/resources/cloud-computing-dictionary/what-is-iaas
Petrov, K. E., & Zakharchenko, D. O. (2022). Research and use of cloud technologies in the process of designing the IT infrastructure of organizational systems. In Scientific Collection “InterConf”, (116): with the Proceedings of the 12th International Scientific and Practical Conference “Scientific Research in XXI Century”, 410−413.
Deloitte. (2021). The cloud imperative Asia Pacific’s unmissable opportunity. https://www2.deloitte.com/content/dam/Deloitte/sg/Documents/technology/sg-techcloud-imperative-executive-summary.pdf
NIST (National Institute of Standards and Technology). (2020). Security and Privacy Controlsfor Information Systems and Organizations. https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf
Abid, A., Manzoor, M.F., Farooq, M.S., Farooq, U., & Hussain, M. (2020). Challenges and issues of resource. allocation techniques in cloud computing. KSII Transactions on Internet and Information Systems (TIIS), 14(7), 2815–2839.
Hadwer, A., Tavana, M., Gillis, D., & Rezania, D. (2021). A systematic review of organizational factors impacting cloud-based technology adoption using Technology-organization-environment framework. Internet of Things, 15, 100407.
Alkhater, N., Walters, R., & Wills, G. (2018). An empirical study of factors influencing cloud adoption among private sector organisations. Telematics and Informatics, 35(1), 38–54.
Tverdokhlib, A. O., & Korotin, D. S. (2022). Efektyvnist funktsionuvannia kompiuternykh system pry vykorystanni tekhnolohii blokchein i baz dannykh. Tavriiskyi naukovyi visnyk. Seriia: Tekhnichni nauky, (6).
Tsvyk, O. S. (2023). Analiz i osoblyvosti prohramnoho zabezpechennia dlia kontroliu trafiku. Visnyk Khmelnytskoho natsionalnoho universytetu. Ceriia: Tekhnichni nauky, (1).
Lemeshko, A. V., Antonenko, A. V., Balvak, A. A., & Novichenko, Ye. O. (2023). Сurrent principles of creating information processing algorithms for logistics centers. Таuridа Scientific Herald. Series: Technical Sciences, (1), 25–32. https://doi.org/10.32851/tnv-tech.2023.1.3
Attaran, M., & Woods, J. (2019). Cloud computing technology: improving small business performance using the Internet. Journal of Small Business & Entrepreneurship, 31(6), 495–519.
Contributors to Wikimedia projects. (2007). Cloud computing - Wikipedia. Wikipedia, the free encyclopedia. https://en.wikipedia.org/wiki/Cloud_computing#Service_models
Marko, K., & Bigelow, S. J. (2022). The pros and cons of cloud computing explained. TechTarget.
Ryan, M. D. (2011). Cloud Computing Privacy Concerns on Our Doorstep. Communications of the ACM, 54(1), 36–38. https://doi.org/10.1145/1866739.1866751
Kanaker, H., et al. (2022). Trojan Horse Infection Detection in Cloud Based Environment Using Machine Learning. International Journal of Interactive Mobile Technologies, 16(24), 81–106. https://doi.org/10.3991/ijim.v16i24.35763
Gartner. (2022). Gartner Says More Than Half of Enterprise IT Spending in Key Market Segments Will Shift to the Cloud by 2025. https://www.gartner.com/en/newsroom/press-releases/2022-02-09-gartner-says-more-than-half-of-enterprise-it-spending
Al-Mudhafar Aqeel, A.M., Smirnova, T., Buravchenko, K., & Smirnov, O. (2023). The method of assessing and improving the user experience of subscribers in software-configured networks based on the use of machine learning. Advanced Information Systems, 7(2), 49–56. https://doi.org/10.20998/2522-9052.2023.2.07
Smirnov, O., Alimseitova, Zh., Adranova, A., Akhmetov, B., Lakhno, V., & Zhilkishbayeva, G. (2020). Models and algorithms for ensuring functional stability and cybersecurity of virtual cloud resources. Journal of theoretical and applied information technology, 98(21), 3334–3346.
Smirnov, O., Drieieva, H., Drieiev, O., Polishchuk, Y., Brzhanov, R., & Aleksander, M. (2020). Method of fractal traffic generation by a model of generator on the graph. 2nd International Workshop on Control, Optimisation and Analytical Processing of Social Networks, 2616, 366–379.
Smirnov, O., Odarchenko, R., Abakumova, A., Usik, P., & Kundyz, M. (2019). QoE optimization technique for media delivery in 5G networks. IEEE International Scientific-Practical Conference Problems of Infocommunications, Science and Technology, 597–601. https://doi.org/10.1109/PICST47496.2019.9061469
Smirnov, O., Kuznetsov, A., Kiian, A., Zamula, A., Rudenko, S., & Hryhorenko, V. (2019). Variance Analysis of Networks Traffic for Intrusion Detection in Smart Grids. IEEE 6th International Conference On Energy Smart Systems, 353–358. https://doi.org/10.1109/ESS.2019.8764195
Smirnov, O., Kuznetsov, A., Kavun, S., Babenko, B., Nakisko, O., & Kuznetsova, K. (2019). Malware Correlation Monitoring in Computer Networks of Promising Smart Grids. IEEE 6th International Conference On Energy Smart Systems, 347–352. https://doi.org/10.1109/ESS.2019.8764228
Smirnov, A. A., Kuznetsov, A. A., Danilenko, D. A., & Berezovsky, A. (2015). The statistical analysis of a network traffic for the intrusion detection and prevention systems. Telecommunications and Radio Engineering, 74(1), 61–78. https://doi.org/10.1615/TelecomRadEng.v74.i1.60
Smirnov, O. A., Smirnova, T. V., Buravchenko, K. O., Kravchenko, S. S., & Gorbov, V.O. (2021). A cloud-based decision support system for the technological process of restoring the surfaces of structures and machine parts. Modern information systems, 5(4), 79–95. https://doi.org/10.20998/2522-9052.2021.4.12
Smirnov, O. A., Smirnova, T. V., Polishchuk, L. I., Buravchenko, K. O., Makevnin, A. O. (2020). Research of cloud technologies as services. Cybersecurity: education, science, technology, 3(7), 43–62. https://doi.org/10.28925/2663-4023.2020.7.4362
Published
How to Cite
Issue
Section
License
Copyright (c) 2024 Тетяна Смірнова, Оксана Конопліцька-Слободенюк , Костянтин Буравченко, Сергій Смірнов, Оксана Кравчук , Наталія Козірова, Олексій Смірнов
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
