A systematic review of cyber security threats in Cloud Computing
Keywords:
Cyber security, Threats, Cloud Computing, and DDoS attacks, PRISMA methodology.Abstract
Cloud computing has become a fundamental technology for delivering scalable and cost-effective services; however, it faces significant challenges related to security and privacy. This study presents a systematic review of existing research on cloud computing threats and mitigation techniques using the PRISMA methodology. A total of 35 relevant articles were collected and analyzed to identify the major challenges affecting cloud environments and the solutions proposed in the literature. The review reveals that security and privacy issues represent the most critical challenges in cloud computing, with various types of cyberattacks targeting cloud infrastructures. Among these threats, Distributed Denial of Service (DDoS) attacks are the most frequently discussed and are considered the most severe due to their impact on service availability and performance. The findings highlight the urgent need for robust security mechanisms and effective countermeasures to mitigate DDoS attacks and enhance the overall security of cloud computing systems.
References
[1] Tohidi, H. (2011). The Role of Risk Management in IT systems of organizations. Procedia Computer Science, 3, 881-887.
[2] Logan, T. M., Aven, T., Guikema, S., & Flage, R. (2021). The role of time in risk and risk analysis: Implications for resilience, sustainability, and management. Risk Analysis, 41(11), 1959-1970.
[3] Logan, T. M., Aven, T., Guikema, S. D., & Flage, R. (2022). Risk science offers an integrated approach to resilience. Nature Sustainability, 5(9), 741-748.
[4] Butler, T., Gozman, D., & Lyytinen, K. (2023). The regulation of and through information technology: Towards a conceptual ontology for IS research. Journal of Information Technology, 38(2), 86-107.
[5] Aven, T. (2023). A risk and safety science perspective on the precautionary principle. Safety Science, 165, 106211.
[6] Wang, L., Feng, X., & Zang, L. (2024). Does risk perception influence individual investors' crowdfunding investment decision-making behavior in the metaverse tourism?. Finance Research Letters, 62, 105168.
[7] Desogus, E., Grosso, D., Bompard, E., & Russo, S. L. (2023). Modelling the geopolitical impact on risk assessment of energy supply system: The case of Italian crude oil supply. Energy, 284, 128578.
[8] Chourasiya, R., Pandey, S., Malviya, R. K., & Pujara, A. A. (2024). Towards sustainable success: a framework for assessing performance of sustainable manufacturing adoption in Indian textile industry. Sustainable Futures, 7, 100216.
[9] Aven, T. (2022). On some foundational issues concerning the relationship between risk and resilience. Risk Analysis, 42(9), 2062-2074.
[10] Glette-Iversen, I., & Flage, R. (2024). On unpredictable events in risk analysis. Safety Science, 180, 106652. [11] AlQarni, T., & Barnawi, A. (2019). A cloud adoption framework: Assessing the factors and determinants of adoption cloud computing technology.
[12] Boakye, J., Murphy, C., Gardoni, P., & Kumar, R. (2022). Which consequences matter in risk analysis and disaster assessment?. International Journal of Disaster Risk Reduction, 71, 102740.
[13] Aven, T., Glette-Iversen, I., & Karatzoudi, K. (2024). A risk science perspective on some fundamental issues in climate change research. Journal of risk research, 27(11), 1311-1323.
[14] Dvorsky, J., Olah, J., Bednarz, J., & Hudakova, M. (2023). Opinions of owners and managers on the business risks of SMEs sustainability: does gender matter?. Journal of Business Economics and Management, 24(4), 732-753.
[15] de Herve, M. D. G. (2024). Near or distant time horizons? The determinants of the integration of long-term perspectives in disaster risk management evaluation. Progress in Disaster Science, 24, 100365.
[16] Anna, K., & Logan, T. M. (2021). Resilience: Lessons to be learned from safety and acceptable risk. Journal of safety science and resilience, 2(4), 253-257.
[17] Tómasson, B. (2023). Using business continuity methodology for improving national disaster risk management. Journal of Contingencies and Crisis Management, 31(1), 134-148.
[18] Glette‐Iversen, I., Aven, T., & Flage, R. (2024). A risk science perspective on vaccines. Risk Analysis, 44(12), 2780-2796.
[19] Che, J., Duan, Y., Zhang, T., & Fan, J. (2011). Study on the security models and strategies of cloud computing. Procedia Engineering, 23, 586-593.
[20] Saripalli, P., & Walters, B. (2010, July). Quirc: A quantitative impact and risk assessment framework for cloud security. In 2010 IEEE 3rd international conference on cloud computing (pp. 280-288). Ieee.
[21] Shaikh, F. B., & Haider, S. (2011, December). Security threats in cloud computing. In 2011 International conference for Internet technology and secured transactions (pp. 214-219). IEEE.
[22] Sangroya, A., Kumar, S., Dhok, J., & Varma, V. (2010, March). Towards analyzing data security risks in cloud computing environments. In International Conference on Information Systems, Technology and Management (pp. 255-265). Berlin, Heidelberg: Springer Berlin Heidelberg.
[23] Khan, A. U., Oriol, M., Kiran, M., Jiang, M., & Djemame, K. (2012, December). Security risks and their management in cloud computing. In 4th IEEE International Conference on Cloud Computing Technology and Science Proceedings (pp. 121-128). Ieee.
[24] Syed, A., Purushotham, K., & Shidaganti, G. (2020, November). Cloud storage security risks, practices and measures: A review. In 2020 IEEE international conference for innovation in technology (INOCON) (pp. 1-4). IEEE.
[25] Albakri, S. H., Shanmugam, B., Samy, G. N., Idris, N. B., & Ahmed, A. (2014). Security risk assessment framework for cloud computing environments. Security and Communication Networks, 7(11), 2114-2124.
[26] August, T., Niculescu, M. F., & Shin, H. (2014). Cloud implications on software network structure and security risks. Information Systems Research, 25(3), 489-510.
[27] Ali, O., Shrestha, A., Chatfield, A., & Murray, P. (2020). Assessing information security risks in the cloud: A case study of Australian local government authorities. Government Information Quarterly, 37(1), 101419.
[28] Kajiyama, T., Jennex, M., & Addo, T. (2017). To cloud or not to cloud: how risks and threats are affecting cloud adoption decisions. Information & Computer Security, 25(5), 634-659.
[29] Kantarcioglu, M., Bensoussan, A., & Hoe, S. R. (2011, September). Impact of security risks on cloud computing adoption. In 2011 49th Annual Allerton Conference on Communication, Control, and Computing (Allerton) (pp. 670-674). IEEE.
[30] Lenkala, S. R., Shetty, S., & Xiong, K. (2013, May). Security risk assessment of cloud carrier. In 2013 13th IEEE/ACM international symposium on cluster, cloud, and grid computing (pp. 442-449). IEEE.
[31] Aleem, A., & Ryan Sprott, C. (2012). Let me in the cloud: analysis of the benefit and risk assessment of cloud platform. Journal of Financial Crime, 20(1), 6-24.
[32] Kandukuri, B. R., & Rakshit, A. (2009, September). Cloud security issues. In 2009 IEEE international conference on services computing (pp. 517-520). IEEE.
[33] Zhang, X., Wuwong, N., Li, H., & Zhang, X. (2010, June). Information security risk management framework for the cloud computing environments. In 2010 10th IEEE international conference on computer and information technology (pp. 1328-1334). IEEE.
[34] Nhlabatsi, A., Hong, J. B., Kim, D. S., Fernandez, R., Hussein, A., Fetais, N., & Khan, K. M. (2018). Threat-specific security risk evaluation in the cloud. IEEE Transactions on Cloud Computing, 9(2), 793-806.
[35] Abdurachman, E., Gaol, F. L., & Soewito, B. (2019). Survey on threats and risks in the cloud computing environment. Procedia Computer Science, 161, 1325-1332.
[36] Coppolino, L., D’Antonio, S., Mazzeo, G., & Romano, L. (2017). Cloud security: Emerging threats and current solutions. Computers & Electrical Engineering, 59, 126-140.
[37] Abioye, T. E., Arogundade, O. T., Misra, S., Adesemowo, K., & Damaševičius, R. (2021). Cloud-based business process security risk management: a systematic review, taxonomy, and future directions. Computers, 10(12), 160.
[38] Weintraub, E., & Cohen, Y. (2016). Security risk assessment of cloud computing services in a networked environment. International Journal of Advanced Computer Science and Applications, 7(11).
[39] Khan, N., & Al-Yasiri, A. (2016). Identifying cloud security threats to strengthen cloud computing adoption framework. Procedia Computer Science, 94, 485-490.
[40] Park, S. T., Park, E. M., Seo, J. H., & Li, G. (2016). Factors affecting the continuous use of cloud service: focused on security risks. Cluster computing, 19(1), 485-495.
[41] Alali, F. A., & Yeh, C. L. (2012). Cloud computing: Overview and risk analysis. Journal of Information Systems, 26(2), 13-33.
[42] Subramanian, N., & Jeyaraj, A. (2018). Recent security challenges in cloud computing. Computers & Electrical Engineering, 71, 28-42.
[43] Nacer, A. A., Godart, C., Rosinosky, G., Tari, A., & Youcef, S. (2019). Business process outsourcing to the cloud: Balancing costs with security risks. Computers in industry, 104, 59-74.
