International Journal of Engineering Research & Technology (IJERT)

ISSN: 2278-0181
Vol. 3 Issue 4, April - 2014

Security Issues and Challenges in Cloud

Computing
Palvinder Singh Er. Anurag Jain
M-Tech (CSE) Student Assistant Prof.
Geeta Institute of Management & Technology, Dept. of Computer Science & Engg.
Kanipla, Kurukshetra, India Geeta Institute of Management & Technology,
Kanipla, Kurukshetra, India

Abstract— Cloud computing is an emerging computing The thought of trust and security is researched and explicit
paradigm that gives the concept of time shared remote security stipulations are recorded. This paper proposes a
services with attractive technological and financial security result that powers customers from the protection
advantages. The infrastructure uses new technology and load, by basic cognitive process a 3rd Party. The Third
services that haven't been absolutely evaluated with relevancy
Party is tasked with guaranteeing explicit security aspects
security. In this paper, first of all we glance into the impacts
of the distinctive characteristics of cloud computing such as within a circulated knowledge framework, whereas
multi-tenancy, elasticity and third party management, upon understanding a trust work between enclosed components,
the protection necessities. Then, we tend to analyze the cloud structuring leagues of mists. The examination approach
security necessities in terms of the elemental security embraced towards accomplishing this objective relies upon
problems, i.e., confidentiality, integrity, convenience, trust, programming building and knowledge frameworks define
and audit and compliance. approaches. The elemental steps for designing the
framework building style incorporate the gathering of
Keywords— Cloud security; Data Availability; Integrity;
requirements and therefore the dissection of theoretical
RT
Authentication; Side channel attack
utilitarian determinations [1].
I. INTRODUCTION The new thought of Cloud Computing offers dynamically
IJE

ascendable resources provisioned as a service over the net

All around digital computer science history, numerous and thus guarantees lots of economic edges to be
endeavors are created to separate shoppers from machine distributed among its adopters. Betting on the kind of
fittings wants, from time-imparting utilities notional within resources provided by the Cloud, distinct layers may be
the Sixties, system machines of the Nineteen Nineties, to outlined (see Figure 1). The bottom-most layer provides
the business network frameworks of later years. This basic infrastructure parts like CPUs, memory, and storage,
deliberation is unrelentingly turning into associate and is henceforward usually denoted as Infrastructure as a
existence as numerous scholastic and business pioneers Service (IaaS). Amazon’s Elastic figure Cloud (EC2) may
during this field of science are spiral towards distributed be a distinguished example for associate IaaS supply.
computing. Distributed computing is an ingenious data
system (IS) construction modeling, pictured as what is also
what is to come back for calculation, a main impetus
requesting from its gathering of individuals to canvass their
understanding of operating frameworks, client–server
architectures, and programs. Distributed computing has
leveraged shoppers from instrumentality stipulations,
whereas decreasing general client aspect requirements and
many-sided quality. As distributed computing is attaining
enlarged infamy, issues are perpetually voiced concerning
the protection problems conferred through the choice of
this new model. The adequacy and effectiveness of Figure 1. Cloud Layers and Access Technologies [2].
universal security systems are endlessly rethought, because
the attributes of this inventive organization model, vary On prime of IaaS, a lot of platform-oriented services permit
typically from them of accepted architectures. During this the usage of hosting environments tailored to a selected
paper we have a tendency to endeavor to clear up the novel would like. Google App Engine is associate example for an
security tests conferred during a cloud setting and clear up internet platform as a service (PaaS) that permits to deploy
problems from a security viewpoint. and dynamically scale Python and Java primarily based net
applications. Finally, the highest layer provides it users

IJERTV3IS041142 www.ijert.org 967

 International Journal of Engineering Research & Technology (IJERT)
ISSN: 2278-0181
Vol. 3 Issue 4, April - 2014

with able to use applications additionally called code as-a- have evil intents however you ne'er grasp. However, the
Service (SaaS). To access these Cloud services, two main amount of resource sharing and accessible protection
technologies may be presently known. Net Services are mechanisms will create a giant distinction.
normally wont to give access to IaaS services and net
browsers are wont to access SaaS applications. In PaaS Cloud computing is predicated on a business model within
environments each approach may be found. which resources square measure shared (i.e., multiple users
use identical resource) at different level (network level,
All of those layers associate with the promise to scale back host level, and application level). In multi abidance, many
1st of all capital expenditures (CapEx). This includes aspects of the data system square measure shared together
reduced hardware prices within the IaaS layer and reduced with, memory, programs, networks and information.
license prices altogether layers. particularly within the IaaS Though user’s square measure isolated at a virtual level,
layer it's not needed any longer to engineer the own hardware isn't separated. With a multi-tenant design, a
knowledge center for peak performance cases, that occur package application is meant to nearly partition its
generally terribly rarely and that typically lead to a poor information and configuration in order that every client
utilization of the obtainable resources. In addition, organization works with a custom virtual application
reductions of the operational expenditures (OpEx) in terms instance.
of reduced hardware, license and patch management are Providers should account for problems like access policies,
securing still [2]. application preparation, and information access and
protection to produce a secure, multi-tenant setting.
II. SECURITY CHARACTERISTICS OF CLOUD
B. Elasticity-
Cloud has following security characteristics:
In cloud computing, customers ought to use resources as
A. Multi-Tenancy- way required whereas having the ability to extend or
decrease resources consumption supported actual demands.
Multi-tenancy, because the term implies, refers to having To fulfill such desires, cloud services got to be ascendible,
over one tenants of the cloud living and sharing different i.e., the desired resources of storage and computing power
tenants the provider’s infrastructures, together with process may be magnified or belittled supported customers' desires.
resources, storage, services, and applications. By multi
RT

abidance, clouds offer synchronic, secure hosting of Elasticity implies having the ability to proportion or down
services for varied customers utilizing identical cloud resources allotted to services supported this demand.
infrastructure resources. Multi-tenancy may be a feature Scaling up and down of a tenant’s resources offers the
IJE

distinctive to resource sharing in clouds, particularly chance to different tenants to use the tenant’s antecedently
publicly clouds. Primarily, it permits cloud suppliers to allotted resources. This might cause confidentiality
manage resource utilization a lot of expeditiously by problems. As an example, once Tenant A scaled down
partitioning a virtualized, shared infrastructure among therefore it releases resources, these resources square
varied customers. High degrees of multi-tenancy over giant measure currently allotted to Tenant B United Nations
numbers of platforms square measure required for cloud agency successively uses it to deduce the previous contents
computing to attain the visualized flexibility of on-demand of Tenant A. Moreover, physical property contains a
provisioning of reliable services and therefore the price service placement engine that maintains a listing of the
advantages and efficiencies because of economies of scale. accessible resources from the provider’s offered resources
To succeed in the high scales of consumption desired, pool. This list is employed to assign resources to services.
service suppliers got to guarantee dynamic versatile Such placement engines ought to incorporate cloud
delivery of service and isolation of user resources. Multi customers’ security and legal needs like competitors
abidance in cloud computing is completed generally by services ought to be avoided being placed on identical
multiplexing the execution of VMs for doubtless totally server; information location ought to be among the tenants’
different users on identical physical server. Virtualization country boundaries. Placement engines might embrace a
and multi-tenancy square measure the large problems on migration strategy wherever services square measure
victimization cloud computing. because the cloud may be a migrated from one physical host to a different or from
shared resources setting, organization need to confirm that cloud to a different so as to fulfill demands and economical
every one tenant domains square measure properly isolated utilization of the resources. This migration strategy ought
from one another that no risk exists for information or to take into consideration identical security constraints.
transactions to leak from one tenant domain into ensuing. Moreover, security needs outlined by customers ought to
Shoppers want the flexibility to tack trustworthy virtual be migrated with the service and initiate a method to
domains or policy-based security zones. From a customer’s enforce security needs on the new setting, as outlined by
perspective, the notion of employing a shared infrastructure cloud customers, and updates this cloud security model.
might be an enormous concern. This undoubtedly raises a
hair attributable to inadequate segregation among cloud C. Multiple Stakeholders-
customers. What happens once a security vulnerability
causes one client to look at (and within the worst case to In a cloud computing model there are totally different
change) another client’s data? The opposite customer won't stakeholders involved: cloud supplier (an entity that

IJERTV3IS041142 www.ijert.org 968

 International Journal of Engineering Research & Technology (IJERT)
ISSN: 2278-0181
Vol. 3 Issue 4, April - 2014

delivers infrastructures to the cloud customers), service security controls deployed that require to be updated. This
supplier (an entity that uses the cloud infrastructure to any complicates the cloud providers’ security
deliver applications to finish users), and client (an entity administrators’ tasks. A key issue for cloud computing is
that uses services hosted on the cloud infrastructure). Every that aspects of ancient infrastructure security move on the
neutral has their own security management systems and far side associate degree organization’s management and
their own expectations (requirements) and capabilities into the cloud. This may cause basic changes within the
(delivered) from different stakeholders. This ends up in the range and roles of security stakeholders as enterprises flip
subsequent problems. over management of security infrastructure and processes
to outside contractors. Trust relationships between varied
(i) Every neutral has their own security management cloud stakeholders (users, companies, networks, service
processes accustomed outline their assets, expected risks suppliers, etc.) want careful thought as public cloud
and their impacts, and the way to mitigate such risks; computing evolves to manage sensitive enterprise
information [3].
(ii) Suppliers and customers got to talk terms and agree
upon the applied security properties. However, no normal III. GENERAL REQUIREMENTS ON CLOUD
security specification notations are accessible which will be SECURITY
utilized by the cloud stakeholders to represent and reason
regarding their required security properties; Security is in general related to the important aspects of
confidentiality, integrity, authentication, Trust and
(iii) With respect to the multi-tenant atmosphere, the availability.
protection necessities for every tenant would possibly
dissent, which may create a multi-tenant cloud one purpose i. Cloud Availability
of compromise. A group of security necessities outlined on
Availability is crucial since the core perform of cloud
a service by totally different tenants that will conflict with
computing is to produce on-demand service of various
one another. thus security configurations of every service
levels. If an explicit service isn't any longer accessible or
ought to be maintained and implemented on the service
the standard of service cannot meet the Service Level
instances level and at runtime taking under consideration
Agreement (SLA), customers could lose religion within the
the chance of fixing necessities supported current
RT
cloud system. During this section, we've studied 2 sorts of
customers’ has to mitigate new risks;
threats that impair cloud handiness.
(iv) Additionally, every tenant may have totally different
Threats to Cloud Availability:
IJE

trust relations with the provider and some tenants may truly
be malicious attackers themselves— therefore generating a) Flooding Attack via information measure
advanced trust problems. Starvation:
In a flooding attack, which might cause Deny of Service
D. Third-Party Control-
(DoS), a large quantity of nonsensical requests square
The major security challenge is that the third-party issue, measure sent to a specific service to hinder it from
that is, the owner of the information has no management on operating properly. In cloud computing, there square
their processing. the most important amendment for info measure 2 basic forms of flooding attacks:
Technology (IT) department of the organization Direct DOS – the assaultive target is decided, and also the
victimization cloud computing are going to be reduced handiness of the targeting cloud service is totally lost.
management as they're being tasked in-tuned raised Indirect DOS – which means is twofold:
responsibility for the confidentiality and compliance of
1) All services hosted within the same physical machine
computing practices within the organization. A connected
with the target victim are affected;
concern is correct governance of cloud connected activity.
Even as in ancient IT outsourcing, victimization cloud 2) The attack is initiated while not a particular target.
services needs the client to convey up management over his
IT infrastructure. To create customers take this step easier, b) Fraudulent Resource Consumption (FRC) attack:
cloud suppliers ought to create the management and A representative Economic Denial of property (EDoS)
maintenance of cloud services additional clear and attack is FRC that could be a delicate attack which will be
auditable by the purchasers. This could embrace recording dispensed over a protracted amount (usually lasts for
logs and complete body sessions moving the part of the weeks) so as to require result. In cloud computing, the goal
cloud infrastructure utilized by the client - and if requested of a FRC attack is to deprive the victim (i.e., regular cloud
by the client creating these accessible. customers) of their semi permanent economic handiness of
hosting net contents that square measure in public
On the opposite facet, cloud suppliers aren't able to deliver accessible. In different words, attackers, UN agency act as
economical and effective security controls as a result of legal cloud service purchasers, endlessly send requests to
they're not conscious of the hosted services’ architectures. web site hosting in cloud servers to consume information
Moreover, cloud suppliers are two-faced with plenty of measure that bills to the cloud client owning site; appears
changes to security necessities whereas having a spread of

IJERTV3IS041142 www.ijert.org 969

 International Journal of Engineering Research & Technology (IJERT)
ISSN: 2278-0181
Vol. 3 Issue 4, April - 2014

to the web server, those traffic doesn't reach the amount of If any weakness is perceived in these take a look at results
service denial, and it's tough to differentiate FRC traffic in access of sensitive knowledge by an unauthorized person
from different legitimate traffic. A FRC attack succeeds [6].
once it causes money burden on the victim [4].

ii. Privacy and Integrity of Cloud Data

iv. Trust
Resource exposure over the web by the Cloud computing is
employed for the valid users and malicious attackers. Net Under the cloud computing paradigm, a corporation
browsers and remote connections, SOAP, REST, Virtual relinquishes direct management over several aspects of
Private Network, Extensible Markup Language and security and, in doing therefore, confers an unprecedented
Remote Procedure Connection Protocols, APIs area unit level of trust onto the service supplier.
accustomed access the resources of the tenants.
Organizations or Business should have trust with the cloud a. Business Executive Access-
supplier once it ports its info within the cloud. Poor cloud
infrastructure results in the planning or security design Knowledge processed or holds on outside the scope of a
flaws in a very shell and area unit varied problems that corporation, its firewall, and alternative security controls
comes with the integrity and confidentiality of the resident bring with it an inherent level of risk. The business
info within the environments of cloud supplier. A number executive security threat could be a well-known issue for
of the authentication and privacy problems area unit many organizations and, despite the name, applies also to
Absence of authentication, accounting protocols and outsourced cloud services. Business executive threats
authorization. transcend those expose by current or former staff to
incorporate structure affiliates, contractors, and alternative
• Key for coding and decoding isn't managed. parties that have received access to an organization’s
networks, systems, and knowledge to hold out or facilitate
Specific problems like mutual trust between the patron and operations. Incidents might involve numerous kinds of
supplier of the cloud isn't convenient. Authentication ought fraud, sabotage of data resources, and felony of data.
to be done properly, providing Cloud Services by the Incidents can also be caused accidentally. Moving
RT
supplier to the patron with accounting details, specified any knowledge and applications to an external cloud computing
try of knowledge access is finished by structure checking atmosphere expands the business executive security risk
and ensures solely the tenants UN agency area unit not solely to the service provider’s employees, however
approved will have the rights for accessing the data. The additionally doubtless among alternative customers
IJE

data access ought to be individual by the credentials, access victimization the service. for instance, an inside denial of
secured mechanism that ranges from RSA certificate to service attack against the Amazon Elastic calculate Cloud
secure shell (SSH) tunnel based mostly. A key (EC2) was incontestable that concerned a service user
management augments have secure access to the making AN initial twenty accounts and launching virtual
information, and is aware of regarding the key accessibility machine instances for every, then victimization those
either with the shopper or supplier for the aim of coding accounts to form an extra twenty accounts and machine
and decoding sympathy between the cloud supplier and instances in an unvaried fashion to grow and consume
organization is finished for porting the information [5]. resources exponentially.

iii. Data Security b. Composite Services-

The sensitive knowledge of an enterprise exist among the Cloud services themselves may be composed through
enterprise state boundary, however within the SaaS model nesting and layering with alternative cloud services. For
the enterprise knowledge is hold on at the SaaS service example, a SaaS supplier may build its services upon those
supplier finish. That the further security checks should be of a PaaS or IaaS cloud. Cloud service suppliers that
enforced by the SaaS service supplier to make sure the subcontract some services to third-party service suppliers
information security. This might embrace the strong ought to raise issues, together with the scope of
encoding and authorization systems to manage the management over the third party, the responsibilities
unauthorized access to the information. Some assessments concerned, and therefore the remedies and recourse
to manifest the safety of the enterprise knowledge at the obtainable ought to issues occur. Trust is usually not
SaaS service supplier finish are: transitive, requiring that third-party arrangements be
disclosed beforehand of reaching AN agreement with the
• Cross-site Scripting (XSS) service supplier, which the terms of those arrangements
• Access management weaknesses square measure maintained throughout the agreement or till
• OS and SQL injection flaws comfortable notification may be given of any anticipated
• Cookies manipulation changes. Liability and performance guarantees will become
• Hidden filed manipulation a significant issue with composite cloud services. The
Linkup, an internet storage service that closed down when
losing access to a big quantity of knowledge from its

IJERTV3IS041142 www.ijert.org 970

 International Journal of Engineering Research & Technology (IJERT)
ISSN: 2278-0181
Vol. 3 Issue 4, April - 2014

20,000 customers, illustrates such a state of affairs. As a and coverage. Auditing is that the method of reviewing and
result of another company, Nirvanix, hosted the info for the examining the authorization and authentication records so
fixing, and yet one more, Savvis, hosted its application and as to see whether or not compliances with predefined
info, direct responsibility for the explanation for the failure security standards and policies are assured. Also, it'll aid in
was unclear. police investigation any system breaches. For the cloud
systems utilized by the client, the client ought to be able to
c. Visibility- authorize and probably monitor access to the system. Such
observance might be as straightforward as following the
Migration to cloud services relinquishes management to logs on a web interface, or as subtle as looking at a period
the service supplier for securing the systems on that the of time audit path of the administrator’s actions on the
organization’s knowledge and applications operate. To system - be it on a particular virtual machine, or the
avoid making gaps in security, management, procedural, hypervisor of the complete system. Reliable, secure and
and technical controls should be applied commensurately tamper-proof log assortment and log storage is additionally
with those used for internal structure systems. The task is necessary. Looking on the sort of access to cloud system,
formidable, since metrics for examination the protection of solutions that may record the actions of the user’s
two laptop systems square measure AN in progress space particularly privileged users like directors - are
of analysis. extraordinarily useful not just for knowledge abuse
hindrance, however additionally for forensics and
Moreover, network and system level observance by the compliance reasons. Audit problem is additionally the
user is mostly outside the scope of most service result of the dearth of management within the cloud. Is
arrangements, limiting visibility and therefore the means there decent transparency within the operations of the
that to audit operations directly. To confirm that policy and cloud supplier for auditing purposes? Presently, this
procedures square measure being enforced throughout the transparency is provided by documentation and manual
system lifecycle, service arrangements ought to contain audits.
some means that for gaining visibility into the protection
controls and processes utilized the service supplier, also as A cloud supplier should have practices and powerful
their performance over time [7]. policies that address regulative and legal problems, and
also the client has to examine cloud supplier policies and
RT
v. Side Channel Attack practices to make sure their adequacy. Cloud customers are
ultimately answerable for the safety and integrity of their
Infrastructure as a Service (IaaS) model in cloud own knowledge even once it's command by a service
IJE

computing provides infrastructures sort of a assortment of supplier. The shoppers got to be able to prove compliance
multiple computers, virtual machines(VMs) and different with security standards no matter the situation of their
resources to its users to store their application, file, wind, systems. It is necessary to make sure that cloud computing
documents so on. mistreatment the Amazon EC2 service as suppliers are duty-bound to endure external audits and
a case study, it's doable to map the interior cloud security certifications within the same manner that ancient
infrastructure and establish wherever a specific target VM service suppliers do [9].
is probably going to reside, and so instantiate new VMs till
vii. Distributed Denial of Service Attack (DDoS)
one is placed co-resident with the target VM. once the with
success placement of instantiate VM to targeted VM then There are 2 kinds of threats i.e. Extortionists-Using DDoS
extract the wind from the targeted VM known as a Side attack to exhaust server resources and Competitors-Using
channel attack. famous vulnerabilities to interrupt services. Once the flood
of messages attacks all nodes by totally different nodes
Side channel attack needs two main steps: Placement and system at same time it's called Distributed Denial of
Extraction. Service (DDoS). complicated and easy kinds of DDoS
attack tools we've got, Agobot, Mstream and Trinoo area
 Placement refers to the antagonist or assaulter unit in complicated classes and X-Dos (XML primarily
composition to position their malicious VM on an based} Denial of service) yet as H-Dos (HTTP based
equivalent physical machine. Denial of service) area unit in easy classes. (Extensible
 Extraction: once with success placement of the Markup Language)-based Denial of Service (X-DoS) and
malicious VM to the targeted VM extract the (Hypertext Transfer Protocol) primarily based} Denial of
wind, file and documents on the targeted VM [8]. Service (H-DoS) area unit employed by most assaulter as
they inclined to use easier internet based attack tools owing
vi. Audit and Compliance to their easy implementation and in need of real defences
against them. X-DoS with DX-DoS(distributed XML based
For compliance and audit the access are going to be
mostly Denial of Service), it distributed version happens
monitored and tracked to make sure that there'll be no
once message of XML varieties is shipped to an online
security breaches within the system. It additionally can
server with or while not wicked content by victimization
facilitate auditors to verify the fulfillment to completely
their all resources. Powerful Parsing attack is associate
different access management policies, periodic auditing
degree example of associate degree X-Dos attack during

IJERTV3IS041142 www.ijert.org 971

 International Journal of Engineering Research & Technology (IJERT)
ISSN: 2278-0181
Vol. 3 Issue 4, April - 2014

this internet Service request is manipulated once content is REFERENCES

parsed by SOAP (Simple Object Access Protocol) to
remodel it into accessible type to the applying. An eternal 1. Dimitrios Zissis, Dimitrios Lekkas ―Addressing cloud computing
security issues‖ in Proceeding of Future Generation Computer
series of open tags area unit use by powerful Parsing attack
Systems, pp. 583–592, 22 December 2010.
to create central processor usage exhausted on associate 2. Meiko Jensen, J¨org Schwenk, Nils Gruschka, and Luigi Lo Iacono,
degree Axis2 internet server. Some 1500 threads area unit ―On Technical Security Issues in Cloud Computing,‖ in Proceeding
starts up by communications protocol Flooder to create of 2009 IEEE International Conference on Cloud Computing, pp.
109-116, 21-25 Sept. 2009.
communications protocol randomized requests to victim
3. Huaglory Tianfield ―Security Issues In Cloud Computing‖ in
internet server to create communication channels exhaust Proceeding of 2012 IEEE International Conference on Systems,
within the H-Dos attack. That the purpose is created that Man, and Cybernetics (SMC’12), Seoul, Korea, pp. 1082-1089, 14-
there's no thanks to filter such traffic and to differentiate 17 October 2012.
4. Abhishek Goel, Shikha Goel ―Security Issues in Cloud Computing‖
between communications protocol request that area unit
in Proceeding of International Journal of Application or Innovation
legitimate and illegitimate [10]. in Engineering & Management (IJAIEM), Volume 1, Issue 4,
December 2012.
IV. CONCLUSION 5. Dr. A. Askarunisa; N.Ganesh; A.Athiraja; Venkatesh; ―Security
Issues in Cloud Computing‖ in Proceeding of International Journal
Every new technology has its execs and cons, similar is of Latest Trends in Engineering and Technology (IJLTET), Vol. 3
Issue 1 September 2013.
that the case with cloud computing. Though cloud 6. Prashant Kumar, Lokesh Kumar, Kapil Kumar, Sachin Kumar,
computing provides straightforward knowledge storage and Sohan Lal ― Security Threats to Cloud Computing‖ in Proceeding of
access. However there are many problems associated with International Journal of IT, Engineering and Applied Sciences
storing and managing knowledge that's not controlled by Research (IJIEASR) Volume 2, No. 1, December 2013.
7. Wayne A. Jansen; ―Cloud Hooks: Security and Privacy Issues in
owner of the information. This paper mentioned security Cloud Computing‖, in Proceedings of the 44th Hawaii International
problems for cloud. These problems embrace cloud Conference on System Sciences – 2011.
integrity, cloud confidentiality, cloud handiness, cloud 8. Bhrugu Sevak ― Security against Side Channel Attack in Cloud
privacy. There are many threats to cloud confidentiality as Computing‖, in Proceeding of International Journal of Engineering
and Advanced Technology (IJEAT) Volume-2, Issue-2, December
well as cross-VM attack and malicious sysadmin. On the 2012.
opposite hand integrity of cloud is compromised because of 9. Huaglory Tianfield ―Security Issues In Cloud Computing‖ in
knowledge loss and dishonest computation in remote Proceeding of 2012 IEEE International Conference on Systems,
RT
servers. DoS (Denial of Service attack is that the Man, and Cybernetics (SMC’12), Seoul, Korea, pp. 1082-1089, 14-
17 October 2012.
commonest attack that is additionally doable in cloud 10. Aman Sagar, Bineet Kumar Joshiyand Nishant Mathurz ―A Study of
computing network. This attack tries to forestall the Distributed Denial of Service Attack in Cloud Computing (DDoS)‖
information offered to its supposed users. The last issue is in Proceeding of HCTL Open Science and Technology Letters
IJE

cloud privacy and it's just like cloud confidentiality. If (HCTL Open STL), August 2013.
cloud confidentiality is in danger, cloud privacy also will
be in danger.

IJERTV3IS041142 www.ijert.org 972