Guide to Security Assurance for Cloud Computing

This practical and didactic text/reference discusses the leading edge of secure cloud computing, exploring the essential concepts and principles, tools, techniques and deployment models in this field. Enlightening perspectives are presented by an international collection of pre-eminent authorities in cloud security assurance from both academia and industry.

Topics and features:

• Describes the important general concepts and principles of security assurance in cloud-based environments
• Presents applications and approaches to cloud security that illustrate the current state of the art
• Reviews pertinent issues in relation to challenges that prevent organizations moving to cloud architectures
• Provides relevant theoretical frameworks and the latest empirical research findings
• Discusses real-world vulnerabilities of cloud-based software in order to address the challenges of securing distributed software
• Highlights the practicalities of cloud security, and how applications can assure and comply with legislation
• Includes review questions at the end of each chapter

This Guide to Security Assurance for Cloud Computing will be of great benefit to a broad audience covering enterprise architects, business analysts and leaders, IT infrastructure managers, cloud security engineers and consultants, and application developers involved in system design and implementation. The work is also suitable as a textbook for university instructors, with the outline for a possible course structure suggested in the preface.

The editors are all members of the Computing and Mathematics Department at the University of Derby, UK, where Dr. Shao Ying Zhu serves as a Senior Lecturer in Computing, Dr. Richard Hill as a Professor and Head of the Computing and Mathematics Department, and Dr. Marcello Trovati as a Senior Lecturer in Mathematics. The other publications of the editors include the Springer titles Big-Data Analytics and Cloud Computing, Guide to Cloud Computing and Cloud Computing for Enterprise Architectures.

Table of Contents

Part I Key Concepts
Chapter 1 Privacy, Compliance and the Cloud
Chapter 2 Cryptographic Tools for Cloud Environments
Chapter 3 Migrating to Public Clouds – From a Security Perspective
Chapter 4 Virtualization Security in Cloud Computing
Chapter 5 Security of Cloud-Based Storage
Chapter 6 Cloud Computing Governance, Risk, and Compliance – The Quintessential Globalization Challenge
Chapter 7 Cloud Computing and Security in the Future

Part II Application and Approaches
Chapter 8 Security Certification for the Cloud: The CUMULUS Approach
Chapter 9 Improving Cloud Assurance and Transparency Through Accountability Mechanisms
Chapter 10 DDoS Protection and Security Assurance in Cloud
Chapter 11 Cloud Data Auditing Using Proofs of Retrievability
Chapter 12 Vehicular Cloud Networks: Architecture and Security