• Title/Summary/Keyword: cloud model

Search Result 1,244, Processing Time 0.026 seconds

Cloud Security and Privacy: SAAS, PAAS, and IAAS

  • Bokhari Nabil;Jose Javier Martinez Herraiz
    • International Journal of Computer Science & Network Security
    • /
    • v.24 no.3
    • /
    • pp.23-28
    • /
    • 2024
  • The multi-tenancy and high scalability of the cloud have inspired businesses and organizations across various sectors to adopt and deploy cloud computing. Cloud computing provides cost-effective, reliable, and convenient access to pooled resources, including storage, servers, and networking. Cloud service models, SaaS, PaaS, and IaaS, enable organizations, developers, and end users to access resources, develop and deploy applications, and provide access to pooled computing infrastructure. Despite the benefits, cloud service models are vulnerable to multiple security and privacy attacks and threats. The SaaS layer is on top of the PaaS, and the IaaS is the bottom layer of the model. The software is hosted by a platform offered as a service through an infrastructure provided by a cloud computing provider. The Hypertext Transfer Protocol (HTTP) delivers cloud-based apps through a web browser. The stateless nature of HTTP facilitates session hijacking and related attacks. The Open Web Applications Security Project identifies web apps' most critical security risks as SQL injections, cross-site scripting, sensitive data leakage, lack of functional access control, and broken authentication. The systematic literature review reveals that data security, application-level security, and authentication are the primary security threats in the SaaS model. The recommended solutions to enhance security in SaaS include Elliptic-curve cryptography and Identity-based encryption. Integration and security challenges in PaaS and IaaS can be effectively addressed using well-defined APIs, implementing Service Level Agreements (SLAs), and standard syntax for cloud provisioning.

Analysis of Research Trends in Cloud Security Using Topic Modeling and Time-Series Analysis: Focusing on NTIS Projects (토픽모델링과 시계열 분석을 활용한 클라우드 보안 분야 연구 동향 분석 : NTIS 과제를 중심으로)

  • Sun Young Yun;Nam Wook Cho
    • Convergence Security Journal
    • /
    • v.24 no.2
    • /
    • pp.31-38
    • /
    • 2024
  • Recent expansion in cloud service usage has heightened the importance of cloud security. The purpose of this study is to analyze current research trends in the field of cloud security and to derive implications. To this end, R&D project data provided by the National Science and Technology Knowledge Information Service (NTIS) from 2010 to 2023 was utilized to analyze trends in cloud security research. Fifteen core topics in cloud security research were identified using LDA topic modeling and ARIMA time series analysis. Key areas identified in the research include AI-powered security technologies, privacy and data security, and solving security issues in IoT environments. This highlights the need for research to address security threats that may arise due to the proliferation of cloud technologies and the digital transformation of infrastructure. Based on the derived topics, the field of cloud security was divided into four categories to define a technology reference model, which was improved through expert interviews. This study is expected to guide the future direction of cloud security development and provide important guidelines for future research and investment in academia and industry.

A Methodology for Determining Cloud Deployment Model in Financial Companies (금융회사 클라우드 운영 모델 결정 방법론)

  • Yongho Kim;Chanhee Kwak;Heeseok Lee
    • Information Systems Review
    • /
    • v.21 no.4
    • /
    • pp.47-68
    • /
    • 2019
  • As cloud services and deployment models become diverse, there are a growing number of cloud computing selection options. Therefore, financial companies need a methodology to select the appropriated cloud for each financial computing system. This study adopted the Balanced Scorecard (BSC) framework to classify factors for the introduction of cloud computing in financial companies. Using Analytic Hierarchy Process (AHP), the evaluation items are layered into the performance perspective and the cloud consideration factor and a comprehensive decision model is proposed. To verify the proposed research model, a system of financial company is divided into three: account, information, and channel system, and the result of decision making by both financial business experts and technology experts from two financial companies were collected. The result shows that some common factors are important in all systems, but most of the factors considered are very different from system to system. We expect that our methodology contributes to the spread of cloud computing adoption.

An Anti-Overload Model for OpenStack Based on an Effective Dynamic Migration

  • Ammar, Al-moalmi;Luo, Juan;Tang, Zhuo
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.10 no.9
    • /
    • pp.4165-4187
    • /
    • 2016
  • As an emerging technology, cloud computing is a revolution in information technology that attracts significant attention from both public and private sectors. In this paper, we proposed a dynamic approach for live migration to obviate overloaded machines. This approach is applied on OpenStack, which rapidly grows in an open source cloud computing platform. We conducted a cost-aware dynamic live migration for virtual machines (VMs) at an appropriate time to obviate the violation of service level agreement (SLA) before it happens. We conducted a preemptive migration to offload physical machine (PM) before the overload situation depending on the predictive method. We have carried out a distributed model, a predictive method, and a dynamic threshold policy, which are efficient for the scalable environment as cloud computing. Experimental results have indicated that our model succeeded in avoiding the overload at a suitable time. The simulation results from our solution remarked the very efficient reduction of VM migrations and SLA violation, which could help cloud providers to deliver a good quality of service (QoS).

A Study on the Construction and Site Selection of the Cloud Data Center considering Disaster Information (재해정보를 고려한 클라우드 데이터센터 입지선정에 관한 연구)

  • Kim, Ki-Uk;Kim, Chang-Soo
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.16 no.12
    • /
    • pp.2575-2580
    • /
    • 2012
  • The aim of this paper is to analyze factors for site selection of the cloud data center and to develop spatial data model considering disasters information based on the GIS. In this paper, historical areas of the natural and human disaster are considered to analyze location of the cloud center. The model is developed using ArcGIS S/W tool. The model is applied on Busan city using disaster data from storm and flood, and small administrative district located Kang-Seo-Gu is selected as site selection of the cloud data center of Busan.

Information Sharing Model based on Adaptive Group Communication for Cloud-Enabled Robots (클라우드 로봇을 위한 적응형 그룹통신 기반 정보공유 모델)

  • Mateo, Romeo Mark;Lee, Jaewan
    • Journal of Internet Computing and Services
    • /
    • v.14 no.4
    • /
    • pp.53-62
    • /
    • 2013
  • In cloud robotics, the model to share information efficiently is still a research challenge. This paper presents an information sharing model for cloud-enabled robots to collaborate and share intelligence. To provide the efficient message dissemination, an adaptive group communication based on multi-agent is proposed. The proposed algorithm uses a weight function for the link nodes to determine the significant links. The performance evaluation showed that the proposed algorithm produced minimal message overhead and was faster to answer queries because of the significant links compared to traditional group communication methods.

A Model-Based Interface to Cloud Services for Intelligent Service Robots (지능형 서비스 로봇을 위한 모델 기반 클라우드 서비스 인터페이스)

  • Choi, Byunggi;Lee, Jonguk;Park, Sunggi;Lee, Jaeho
    • KIPS Transactions on Software and Data Engineering
    • /
    • v.9 no.1
    • /
    • pp.1-10
    • /
    • 2020
  • Service robots providing services according to user's needs in dynamically changing environments should be able to utilize external services such as cloud services. Cloud services are, however, changing and expanding continuously and thus the interface to the services must be general and flexible to adapt to the changes of the functionality and data of the services. In order to facilitate the adaptation of the interface to the changes, a model-based general interface to various cloud services is proposed. In this approach, a general and extensible interface is realized by defining standard service profiles that can be easily extended to adapt to the changed services. Experiments with intelligent service robots show satisfying results exhibiting flexible adaptations to new or changed external services.

Simulation of the Vortex Shedding from a Circular Cylinder by Means of the Vortex Cloud Model (Vortex Cloud Model에 의한 추상체 주위의 Vortex 유출 Simulation)

  • D.K. Lee
    • Journal of the Society of Naval Architects of Korea
    • /
    • v.30 no.3
    • /
    • pp.62-74
    • /
    • 1993
  • The vortex shedding from a circular cylinder placed in a steady uniform stream is simulated by the vortex cloud model of the discrete vortex method. The vorticity created at the cylinder surface is discretely represented by a number of nascent vortices at each time step and the motion of these cumulative vortices is monitored to produce the evolution of the vortex distribution pattern. Convection of vortices was traced by the vortex-in-cell technique and the force coefficients were calculated by both Sarpkaya's formulae and Lee's formulae for comparison. Discussions concerning the interrelation between the computational parameters and some principles for choosing the suitable values are included.

  • PDF

The Method of Consequence Analysis of the Unconfined Vapor Cloud Explosion Accident by the Continuous Release of Gas-Liquid Flow for the Small and Medium Size Enterprises(SMS) (기-액흐름 연속누출에 의한 개방공간 증기운 폭발사고를 중심으로 중.소규모 사업장을 위한 사고 영향평가 방법)

  • 장서일;이헌창;조지훈;김태옥
    • Journal of the Korean Society of Safety
    • /
    • v.18 no.1
    • /
    • pp.64-70
    • /
    • 2003
  • For the unconfined vapor cloud explosion(UVCE) accident by the continuous release of gas-liquid flow of various saturated liquids in a vessel at ground level, overpressures were estimated by TNT equivalency model with two estimation methods, such as UVCE I model based on a constant release time and UVCEII model based on a real travel time of vapor by dispersion and analyzed with various release conditions. As a simulation result the simple, easy, and correct method of evaluation of consequences of the UVCE accident was proposed by using consequences of UVCE I model and correlation equations for differences of overpressures between UVCE models, so that this evaluation method could be used easily in the small and medium size enterprises without using the dispersion model.

Temporal and Spatial Distributions of the Surface Solar Radiation by Spatial Resolutions on Korea Peninsula (한반도에서 해상도 변화에 따른 지표면 일사량의 시공간 분포)

  • Lee, Kyu-Tae;Zo, Il-Sung;Jee, Joon-Bum;Choi, Young-Jean
    • New & Renewable Energy
    • /
    • v.7 no.1
    • /
    • pp.22-28
    • /
    • 2011
  • The surface solar radiations were calculated and analyzed with spatial resolutions (4 km and 1 km) using by GWNU (Gangneung-Wonju National University) solar radiation model. The GWNU solar radiation model is used various data such as aerosol optical thickness, ozone amount, total precipitable water and cloud factor are retrieved from Moderate Resolution Imaging Spectrometer (MODIS), Ozone Monitoring Instrument (OMI), MTSAT-1R satellite data and output of the Regional Data Assimilation Prediction System(RDAPS) model by Korea Meteorological Administration (KMA), respectively. The differences of spatial resolutions were analyzed with input data (especially, cloud factor from MTSAT-1R satellite). And the Maximum solar radiation by GWNU model were found in Andong, Daegu and Jinju regions and these results were corresponded with the MTSAT-1R cloud factor.