Ensuring Proper Access Control in the Cloud?

The article, “Ontology-based access control model for security policy reasoning in cloud computing” written by Chang Choi, Junho Choi, and Pankoo Kim was published in the journal of supercomputing in the year 2014. The article focuses on defining the types of issues that cloud computing is currently facing and what are the solutions that are being provided to overcome these issues. It focuses on the types of services cloud computing provides and how these services are differentiated. The article explains that these services are differentiated by security policies. The comparative study and survey are done in this article to prove that old access control methods are not effective as they seem and the new access control technique is introduced to counter the security threats present in cloud computing. The old models RBAC and C-RBAC doesn't fulfill the limitations of the cloud computing and the article introduces a new model called ONTO-ACM (Ontology-based Access Control Model) which could allow the access on the basis of semantic analysis and ontology reasoning.

The articles really help in the study of ensuring the access controls in cloud computing. It provides us with new ideas and models that could be more effective in providing security to the accessibility of private data. The article helps us to identify the problems with the older models of access control methods and why these models are not effective. So after the analysis of traditional models of access control the writer gives us the improved and new version of access control models which would work according to the ontology reasoning. This means that it could overcome the gaps that were present in older models of access controls. This new model could be used to help cloud computing overcome all security threat making it a fully functional and efficient system.

Hashizume, K., Rosado, D. G., Fernández-Medina, E., & Fernandez, E. B. (2013). An analysis of security issues for cloud computing. Journal of internet services and applications, 4(1), 5.

The article, “An Analysis of Security Issues for Cloud computing” written by Keiko Hashizume in December 2013 and was published in Journal of Internet services and applications and it basically helps to find out and identify the types of problems that cloud computing is facing. After in-depth study and qualitative analysis done by the author, he comes up with the possible threats that cloud computing. The study identifies the biggest security concerns that cloud computing is facing which are storage, network, and visualizations. After the identification of the types of security threats, the author gives the solutions to overcome these threats that cloud computing is facing. Once the types of threat are identified then the models of access control systems are introduced to prove how these models could help counter the threats. Types of vulnerabilities are identified in this article so that their contribution to security threat could be measured. This way better access control methods are suggested to counter the vulnerabilities as well.

The study helps by identifying the root causes of the security issues that cloud computing faces. This type of study is important because it could provide a solution to counter the security risks from the start. It is helping in finding the relationship between vulnerabilities and security threats so that more effective access control models could be introduced to counter the threats in the system. The study is important because it also helps to identify that new techniques are required in order to counter the security threats that cloud computing facing because the old traditional methods are not effective anymore. This means that the study is focusing on the new methods and giving out the solution according to new threats. It is focusing on introducing access controls in cloud computing because the old methods are outdated.

Younis, Y. A., Kifayat, K., & Merabti, M. (2014). An access control model for cloud computing. Journal of Information Security and Applications, 19(1), 45-60.

The article, “An access control model for cloud computing” was written by Younis A Younis, Kashif Kafiyat and Madjid Merabti in February 2014 and was published in the journal it is defining the importance of cloud computing in the field on information and technology. the article helps us to know the use of cloud computing in the field of IT and how both these programs could help each other out. As IT is a complex field so there are many security risks also present in this field. Could computing is an essential yet vulnerable area with constant security threats. The study was done by the author basically identifies the gaps that are present in the conventional methods of access control methods and how these methods could be improved so that cloud computing could have better security. Qualities analysis is done to find the gaps that are present in the old methods of access controls and after finding these gaps alternative solutions are given to overcome this gap.

This study is important because it is identifying the weak points of access control in cloud computing. This study is helping in finding out the problems so that new methods could be introduced to overcome those problems. This means that it is giving a proposal of creating and having more compatible and perfect access control model which could fulfill requirements of cloud's access control. The paper is giving the new model of access control which is believed to have more secure sharing of data which would help reduce the online theft or security risk. The study is helpful because it is providing new methods with the evidence to back up its claims. This would assure that old access models are replaced with the new and more effective one in cloud computing.