A Survey of the State of Cloud Security <s> Related Work <s> Cloud computing is expected to become a common solution for deploying applications thanks to its capacity to leverage developers from infrastructure management tasks, thus reducing the overall costs and services’ time to market. Several concerns prevent players’ entry in the cloud; security is arguably the most relevant one. Many factors have an impact on cloud security, but it is its multitenant nature that brings the newest and more challenging problems to cloud settings. Here, we analyze the security risks that multitenancy induces to the most established clouds, Infrastructure as a service clouds, and review the literature available to present the most relevant threats, state of the art of solutions that address some of the associated risks. A major conclusion of our analysis is that most reported systems employ access control and encryption techniques to secure the different elements present in a virtualized (multitenant) datacenter. Also, we analyze which are the open issues and challenges to be addressed by cloud systems in the security field. <s> BIB001 </s> A Survey of the State of Cloud Security <s> Related Work <s> Cloud computing is a way to increase the capacity or add capabilities dynamically without investing in new infrastructure, training new personnel, or licensing new software. It extends Information Technology's (IT) existing capabilities. In the last few years, cloud computing has grown from being a promising business concept to one of the fast growing segments of the IT industry. But as more and more information on individuals and companies are placed in the cloud, concerns are beginning to grow about just how safe an environment it is. Despite of all the hype surrounding the cloud, enterprise customers are still reluctant to deploy their business in the cloud. Security is one of the major issues which reduces the growth of cloud computing and complications with data privacy and data protection continue to plague the market. The advent of an advanced model should not negotiate with the required functionalities and capabilities present in the current model. A new model targeting at improving features of an existing model must not risk or threaten other important features of the current model. The architecture of cloud poses such a threat to the security of the existing technologies when deployed in a cloud environment. Cloud service users need to be vigilant in understanding the risks of data breaches in this new environment. In this paper, a survey of the different security risks that pose a threat to the cloud is presented. This paper is a survey more specific to the different security issues that has emanated due to the nature of the service delivery models of a cloud computing system. <s> BIB002 </s> A Survey of the State of Cloud Security <s> Related Work <s> Virtualization is essential to cloud computing, yet its security vulnerabilities in the cloud environment haven't been sufficiently studied. This analysis of cloud security focuses on how virtualization attacks affect different cloud service models. <s> BIB003
Security threats and risks associated with the cloud have been the focal point of many studies. Vaquero et al in BIB001 ) present some common cloud threats and associate these with different levels in the IaaS cloud architecture: network virtualization domain, machine virtualization domain, and physical domain. S. BIB002 present a survey on the security issues in different service models of the cloud: SaaS, PaaS and IaaS. They identify data security, data integrity, data availability and network security as some of the security concerns in the SaaS model. Attacks on visible code such as code running in user context are identified as an example of security issues faced in the PaaS model. Security holes in the virtualization manager are examples of issues in the IaaS model.  present issues that accompany multi location of data. Many large cloud providers like Amazon and Google mirror data across geographical regions around the world in order to increase availability. This makes an already bad situation even worse because the privacy laws that apply on customers data now depend on the location of the data. The authors also review some of the privacy protection acts that came into being to protect consumers privacy but hold no ground when applied to the cloud environment. BIB003 discuss security threats from the perspective of virtualization technologies since virtualization is one of the foundations of cloud computing. The authors discuss the implications of virtualization on the different service models (SaaS, PaaS and IaaS).  discuss security issues associated with storing highly sensitive medical data in the cloud. Contractual obligations committed by a service provider do not suffice when it comes to medical data management. The paper stresses on employing Computer Forensics Tools to help uncover issues with cloud.