Information Security of Cloud Computing for Enterprises

Abstract

Cloud computing has become one of the most significant information security issues in recent years. That is due to the dramatically emerging applications and required services of cloud computing. However, in order to safely utilize and enjoy the benefit of cloud computing through wired/wireless networking, sufficient assurance of information security such as confidentiality, authentication, nonrepudiation, and integrity is the most critical factor for adoption. In order to well understand the security of cloud computing, experimental platform based on kernel-based virtual machine has established. Besides, a dynamic intrusion detection system for strengthening the security application of cloud computing is implemented. In the proposed mechanism, numbers of intrusion detectors are dispatched on the whole topology of the networking system through multi-layers and multi-stages deployment. Those information security issues related with the application and service of cloud computing will be experimented and discussed. The experiments include the equipment security of the client side termination, the threats of web site and webpage, the detection and diagnosis and surveillance of intrusion, the access and security of database in the cloud side, the detection of system leakage and the monitor of real-time repairing process, the management of server system, the management of mobile e-commerce processing, and the integrated analysis of associated security information and issues. The goal of the proposed mechanism is not only focused on find out some solutions, but also focused on develop some feasible information security techniques or products for the application and service of cloud computing.