arrow
返回

Saudi cloud infrastructure: a security analysis

delete2017-04-01
delete7
PRE
AI
W
Wahid Rajeh
金
金海 (Hai Jin) *
D
Deqing Zou
DOI:10.1007/s11432-016-0322-7delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
The growing demand and dependence upon cloud services have garnered an increasing level of threat to user data and security. Some of such critical web and cloud platforms have become constant targets for persistent malicious attacks that attempt to breach security protocol and access user data and information in an unauthorized manner. While some of such security compromises may result from insider data and access leaks, a substantial proportion continues to remain attributed to security flaws that may exist within the core web technologies with which such critical infrastructure and services are developed. This paper explores the direct impact and significance of security in the Software Development Life Cycle (SDLC) through a case study that covers some 70 public domain web and cloud platforms within Saudi Arabia. Additionally, the major sources of security vulnerabilities within the target platforms as well as the major factors that drive and influence them are presented and discussed through experimental evaluation. The paper reports some of the core sources of security flaws within such critical infrastructure by implementation with automated security auditing and manual static code analysis. The work also proposes some effective approaches, both automated and manual, through which security can be ensured through-out the SDLC and safeguard user data integrity within the cloud.
Keyword:
cloud security
vulnerability detection
web security
Saudi infrastructure
cloud service
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

Science China Information Sciences 封面图
Science China Information Sciences
IF:
7.6
论文数:
4.9K
被引数:
8.9K

机构

暂无机构信息
引用论文

引用论文

Associations of overall sitting time and sitting time in different contexts with depression, anxiety, and stress symptoms
err2014-06-01
err0
PREAI
errAmanda L. Rebar; Corneel Vandelanotte; Jannique van Uffelen; Camille Short; Mitch J. Duncan
err分享
err收藏
Using network-based text analysis to analyze trends in Microsoft's security innovations
err2013-07-01
err6
PREAI
errJames, Tabitha L.; Khansa, Lara; Cook, Deborah F.; Bruyaka, Olga; Keeling, Kellie B.
err分享
err收藏
err分享
err收藏
History in Motion Pictures
err1941-12-01
err0
PREAI
errCharles W. Jefferys
err分享
err收藏
Cinematic Urban Archaeology: The Battersea Case
err2017-05-28
err0
PREAI
errFrançois Penz; Aileen Reid; Maureen Thomas
err分享
err收藏
A View of Cloud Computing云计算的观点
err2010-04-01
err6.0K
errOAAI
errArmbrust, Michael; Fox, Armando; Griffith, Rean; Joseph, Anthony D.; Katz, Randy; Konwinski, Andy; Lee, Gunho; Patterson, David; Rabkin, Ariel; Stoica, Ion; Zaharia, Matei
err分享
err收藏
Ontology for attack detection: An intelligent approach to web application security
err2014-09-01
err43
PREAI
errRazzaq, Abdul; Anwar, Zahid; Ahmad, H. Farooq; Latif, Khalid; Munir, Faisal
err分享
err收藏
学者 查看更多内容