This book analyzes the latest advances in privacy, security and risk technologies within cloud environments. With contributions from leading experts, the text presents both a solid overview of the field and novel, cutting-edge research. A Glossary is also included at the end of the book. Topics and features: considers the various forensic challenges for legal access to data in a cloud computing environment; discusses privacy impact assessments for the cloud, and examines the use of cloud audits to attenuate cloud security problems; reviews conceptual issues, basic requirements and practical suggestions for provisioning dynamically configured access control services in the cloud; proposes scoped invariants as a primitive for analyzing a cloud server for its integrity properties; investigates the applicability of existing controls for mitigating information security risks to cloud computing environments; describes risk management for cloud computing from an enterprise perspective.
Tabella dei contenuti
Part I: Introduction to the Issues.- Privacy, Security and Trust in Cloud Computing.- Part II: Law Enforcement and Audits.- Accessing Data in the Cloud: The Long Arm of the Law Enforcement Agent.- A Privacy Impact Assessment Tool for Cloud Computing.- Understanding Cloud Audits.- Part III: Security and Integrity.- Security Infrastructure for Dynamically Provisioned Cloud Infrastructure Services.- Modeling the Runtime Integrity of Cloud Servers: a Scoped Invariant Perspective.- Part IV: Risk Considerations.- Inadequacies of Current Risk Controls for the Cloud.- Enterprise Information Risk Management: Dealing with Cloud Computing.
Circa l’autore
Dr. Siani Pearson is a senior researcher in the Cloud and Security Research Lab of HP Labs, Bristol, UK.
Dr. George Yee is a consultant with his own company, and an Adjunct Research Professor in the Department of Systems and Computer Engineering at Carleton University, Ottawa, ON, Canada.