Zeichen Journal ISSN No: 0932-4747 Cloud Security Issues and Counter Measures – A Survey Mercy Joseph1 and Dr.Gobi Mohan2 1 Research Scholar , Department of Computer Science, Chikkanna Government Arts College, Tirupur, Coimbatore(Tamilnadu), India 2 Asst. Professor, Department of Computer Science, Chikkanna Government Arts College, Tirupur, Coimbatore(Tamilnadu), India (Corresponding Author: Mercy Joseph) ABSTRACT:Cloud computing has proven to be a powerful, rapidly developing, effective set of new generation technologies which can provide significant benefits to users. Companies and organizations use Public, private and hybrid cloud for their data storage and is an essential factor for users of all ranges. Cost efficiency, High speed access and availability, wide range of resources and services attract cloud users. Even though cloud computing is a promising technology, there are some negative aspects also which need to be discussed in order to make the best usage of it. In this survey we discuss about the features of cloud computing, various classes of current security issues addressed by the cloud users, and their possible counter measures and are presented in a tabular form. This survey discusses new security issues such as Spectre and meltdown which exploits the critical vulnerabilities in modern processors. Keywords: Cloud Security, Cloud service models, cloud security Issues, Cloud service provider I. INTRODUCTION Amazon, Google and Microsoft. Each of these companies have one or more of the following One of the vital issues that organizations face cloud delivery models. nowadays is to storage and management of large amount of data and the acquisition of hardware A. Cloud Service models and software required for it. All such challenges Cloud computing model have been evolved over can be solved by providing such resources online time. The Major cloud service models are SaaS, and sharing it through cloud computing. The PaaS and Iaas (Fig.1). resources include applications, storage solutions, , business processes, computational units, development and deployment platforms networking etc. Cloud computing is a fundamental model of computing, manipulating and configuring and accessing the applications online. It enhances the distribution of services for the internet users from its resource pools to offer faster innovation, flexible resources and economies of scale. It is a Pay-for-Use model which lower your operating costs. II. BASICS OF CLOUD COMPUTING There are many top companies which provide cloud services. The major cloud providers are Fig.1. Cloud Service models Volume 6, Issue 7, 2020 Page No:108 Zeichen Journal ISSN No: 0932-4747 Software as Service (SaaS ) Public Cloud: The Software as Service users can run When a cloud network is rendered over a applications provided by the service providers. For network and available for public use, it is called example Gmail is an application provided by public cloud. It is meant for all users who want to Google. The SaaS users does not have to manage utilize computing resources. With public cloud, networks, operating systems or servers. Another all resources such as software components and name for SaaS is ‘ Web based software’. These infrastructure are deployed and managed by the softwares are centrally hosted and licensed on a cloud provider[4]. subscription basis. Services offered include enterprises services as well as web applications such as blogs, metadata management, social networking etc. SaaS is not good for applications which need real time responses[1]. Platform as Service(PaaS) PaaS Provide the facility to develop and deploy applications using different programing languages and tools. The user need not control the underlying infrastructure. The user can control and configure Fig.2. Cloud Deployment models the application and hosting environment. Example services include device integration ,session Private Cloud management , sandboxes , knowledge Private cloud is solely used and managed by a management, content management etc. private organization. Private cloud are costly due Infrastructure as Service(IaaS) to the expenditure in deploying and maintaining It provides virtualized computing resources so that the infrastructure. But the company can easily consumer can deploy and run software of any customize resources based on its requirements. kind, including operating systems , programing Physical location can be around the premises or languages ,network software etc. The consumer can be hosted by a third party. It is more secure has control over operating system, storage and since resources are not shared with others. other deployed applications[9] Community Cloud Database as Service(DBaaS) When more than one similar organizations In DbaaS , the database is stored in cloud shairing the computing resources it is called infrastructure and access to the database is Community cloud. Examples are joined business provided as service. The advantages are high organizations, financial organizations etc. availability , scalability , performance and Hybrid Cloud partition tolerance. It is less costly because of the In this model we use interconnected public and pay-for-use model. [3] private cloud. Hybrid model supports extending resources when needed. In hybrid cloud model B. Cloud Deployment models: data can move between public and private clouds. NIST defines mainly four cloud deployment So private cloud can be used for more critical models models based on the nature and purpose applications public clo(ud can be used applications of cloud. All organizations select the cloud which are less secure. category based on their requirements. The major Inter-Clouds types of cloud deployment models are shown in The Inter-cloud is a global interconnected “cloud ( Fig.2) : of clouds” and an extension of “Network of Volume 6, Issue 7, 2020 Page No:109 Zeichen Journal ISSN No: 0932-4747 Networks” on which it is based. Inter-Cloud Cloud systems are automatic to great extent that it computing is inter-connecting multiple cloud assist the cloud providers as well as users by providers infrastructures. The main focus is on executing intelligent algorithms which generate direct interoperability between public cloud reports on cloud usage. Thus cloud systems are service providers. To provide this service , transparent to cloud providers and users so that portability and interoperability are necessary they can monitor and control the cloud usage and features. report it III.CHARACTERISTICS OF CLOUD Cost-Effective COMPUTING Cloud is highly economic that it provide a lot of facilities to users to match their needs. Users can Collaborative Resource Shairing easily optimize their cloud usage by resizing the Here the cloud provider has all the resources for resources. There is only very less expense computing and to provide service to multiple compared to the advantages we get by using cloud customers, a multitenant model is used. The computing. We need to pay only for the resources physical and virtual resources are assigned as per we utilized. the requirement of the customers. Here the Reliability implementation is such that the customer can only Cloud makes data secure by using different specify the location to store the data in an abstract techniques such as sharding and replication. level. Replication is storing more than one copy of same On-Demand Self Service data so that the data does not get lost even when The user are provided with a view to monitor one copy is lost. Storing data in different continuously the status of network storage, server geographical areas also makes the data secure. uptime and other capabilities provided by CSP. Besides this kind of techniques we know that High Scope Network Access cloud is secure because it utilizes all the security Cloud can be accessed from anywhere in the world layers implemented over internet. with a device having internet access like mobile , Pay-per-use model laptop etc. This capabilities make cloud user In cloud computing, unlimited resources are friendly. available for user. The user need to pay only for the resources and services he made use of. This Accessibility model is highly economic and user friendly Cloud servers are having very less downtime as it is distributed architecture. The cloud capabilities Optimized Resource Usage can be upgraded as per the user needs. Cloud Cloud providers records the users utilization of analyzes the resource usage and provide status records and the user is given all the privilege to report to customer in real time mode. It allows the optimize the resources he need. Even though the user to have extra storage whenever needed. user have access to unlimited resources, he only Easy Conservation has to pay for the resources he used. The cloud Cloud services are always being updated and user can resize the resources according to his need. becoming better day by day. Even when the IV. GENERAL ISSUES IN CLOUD updates are done there is very less down time in COMPUTING cloud computing and it makes the total processing more faster. That is the servers are easily The CSP must make sure that users do not face maintained by the cloud providers. any problems like data loss or security at the time of data access since there are many hackers at the Self-operating Volume 6, Issue 7, 2020 Page No:110 Zeichen Journal ISSN No: 0932-4747 cloud server. Some of the issues of cloud from the cloud server. Therefore, it creates a computing are listed below. critical data issue for DOs. In cloud computing the data stored in CSPs site A. DATA STORAGE ISSUES can be managed by CSP or can be managed by a third party. The user can access the services Confidentiality provided by a CSP via an application programing Confidentiality in cloud environment refers to the Interface over internet [10]. The CSP providing prevention of unauthorized access of data and to data security by using the method of distributed make sure that only those who have access storage. The data is partitioned in to shards and permission can only access the data. There are each shard is stored in separate machine.