Data and infrastructure security auditing in cloud computing environments
作者:
Highlights:
• Auditing is the ability for cloud customers to verify the presence and functioning of their provider's security measures.
• Important security measures are divided into those needed to support data and infrastructure security.
• What specific auditing concerns must be addressed to ensure broader adoption of cloud computing technologies?
• What is the current state of service offerings in providing auditing capability for user security concerns.
• How many of the lingering audit issues could be resolved using existing approaches and how many demand new solutions.
摘要
•Auditing is the ability for cloud customers to verify the presence and functioning of their provider's security measures.•Important security measures are divided into those needed to support data and infrastructure security.•What specific auditing concerns must be addressed to ensure broader adoption of cloud computing technologies?•What is the current state of service offerings in providing auditing capability for user security concerns.•How many of the lingering audit issues could be resolved using existing approaches and how many demand new solutions.
论文关键词:Cloud computing,Security audit,Data integrity,Standards compliance
论文评审过程:Available online 3 December 2013.
论文官网地址:https://doi.org/10.1016/j.ijinfomgt.2013.11.002