Cloud Computing Security

John Vacca is an information technology consultant and internationally-known author of more than 600 articles in the areas of advancedstorage, computer security and aerospace technology. John was alsoa conguration management specialist, computer specialist, and thecomputer security ofcial (CSO) for NASA's space station program(Freedom) and the International Space Station Program, from 1988until his retirement from NASA in 1995.

• Section I IntroductionChapter 1 ▪ Cloud Computing Essentials 3Anna Squicciarini, Daniela Oliveira, and Dan LinChapter 2 ▪ An Overview of Cloud Computing 13William StallingsChapter 3 ▪ Cloud Security Baselines 31Daniela Oliveira, Anna Squicciarini, and Dan LinChapter 4 ▪ Cloud Security, Privacy and Trust Baselines 45Nikolaos Pitropakis, Sokratis Katsikas, and Costas LambrinoudakisChapter 5 ▪ Infrastructure as a Service (IaaS) 65Mario SantanaSection II Risk Analysis and Division of ResponsibilityChapter 6 ▪ Risk and Trust As ess ment: Schemes for Cloud Services 73Erdal CayirciChapter 7 ▪ Managing Risk in the Cloud 85Michaela Iorga and Anil KarmelChapter 8 ▪ Cloud Security Risk Management 95Marco CremoniniChapter 9 ▪ Secure Cloud Risk Management: Risk Mitigation Methods 115Jim Harmening and Randall DeVittoSection III Securing the Cloud InfrastructureChapter 10 ▪ Specification and Enforcement of Access Policies in Emerging Scenarios 129Sabrina De Capitani di Vimercati, Sara Foresti, and Pierangela SamaratiChapter 11 ▪ Cryptographic Key Management for Data Protection 151Sarbari GuptaChapter 12 ▪ Cloud Security Access Control: Distributed Access Control 157Jim Harmening and Randall DeVittoChapter 13 ▪ Cloud Security Key Management: Cloud User Controls 167Weiyu Jiang, Jingqiang Lin, Zhan Wang, Bo Chen, and Kun SunChapter 14 ▪ Cloud Computing Security Ess entials and Architecture 195Michaela Iorga and Anil KarmelChapter 15 ▪ Cloud Computing Architecture and Security Concepts 213Pramod Pandya and Riad RahmoChapter 16 ▪ Secure Cloud Architecture 225Pramod PandyaSection IV Operating System and Network SecurityChapter 17 ▪ Locking Down Cloud Servers 237Thorsten HerreChapter 18 ▪ Third-Party Providers Integrity Assurance for Data Outsourcing 255Jiawei Yuan and Shucheng YuSection V Meeting Compliance RequirementsChapter 19 ▪ Negotiating Cloud Security Requirements with Vendors 271Daniel S. SoperChapter 20 ▪ Managing Legal Compliance in the Cloud: Understanding Contractual andPersonal Data Protection Requirements 283Paolo BalboniChapter 21 ▪ Integrity Assurance for Data Outsourcing 299Reza Curtmola and Bo ChenChapter 22 ▪ Secure Computation Outsourcing 311Shams Zawoad and Ragib HasanChapter 23 ▪ Computation Over Encrypted Data 329Feng-Hao LiuChapter 24 ▪ Trusted Computing Technology 347Felipe E. MedinaChapter 25 ▪ Technology for Trusted Cloud Security: Survey and Open Issues 357Roberto Di Pietro, Flavio Lombardi, and Matteo SignoriniChapter 26 ▪ Trusted Computing Technology and Proposals for Resolving Cloud ComputingSecurity Problems 373Ignazio Pedone, Daniele Canavese, and Antonio LioyChapter 27 ▪ Assuring Compliance with Government Certification and Accreditation Regulations 387Sarbari GuptaChapter 28 ▪ Government Certification, Accreditation, Regulations, and Compliance Risks 395Thorsten HerreSection VI Preparing for Disaster RecoveryChapter 29 ▪ Simplifying Secure Cloud Computing Environments with Cloud Data Centers 411Thorsten HerreChapter 30 ▪ Availability, Recovery, and Auditing across Data Centers 425Reza Curtmola and Bo ChenSection VII Advanced Cloud Computing SecurityChapter 31 ▪ Advanced Security Architecture for Cloud Computing 443Albert CaballeroChapter 32 ▪ Side-Channel Attacks and Defenses on Cloud Traffic 463Wen Ming Liu and Lingyu WangChapter 33 ▪ Clouds Are Evil 477John StrandChapter 34 ▪ Future Directions in Cloud Computing Security: Risks and Challenges 489Mohammad Kamrul Islam and Rasib Khan