Privacy and Security for Cloud Computing

1. Front Matter

   Pages i-xvi

   PDF

2. Introduction to the Issues

   1. Front Matter

      Pages 1-1

      PDF

   2. Privacy, Security and Trust in Cloud Computing

      • Siani Pearson

      Pages 3-42

3. Law Enforcement and Audits

   1. Front Matter

      Pages 43-43

      PDF

   2. Accessing Data in the Cloud: The Long Arm of the Law Enforcement Agent

      • Ian Walden

      Pages 45-71

   3. A Privacy Impact Assessment Tool for Cloud Computing

      • David Tancock, Siani Pearson, Andrew Charlesworth

      Pages 73-123

   4. Understanding Cloud Audits

      • Frank Doelitzscher, Christoph Reich, Martin Knahl, Nathan Clarke

      Pages 125-163

4. Security and Integrity

   1. Front Matter

      Pages 165-165

      PDF

   2. Security Infrastructure for Dynamically Provisioned Cloud Infrastructure Services

      • Yuri Demchenko, Canh Ngo, Cees de Laat, Diego R. Lopez, Antonio Morales, Joan A. García-Espín

      Pages 167-210

   3. Modeling the Runtime Integrity of Cloud Servers: A Scoped Invariant Perspective

      • Jinpeng Wei, Calton Pu, Carlos V. Rozas, Anand Rajan, Feng Zhu

      Pages 211-232

5. Risk Considerations

   1. Front Matter

      Pages 233-233

      PDF

   2. Inadequacies of Current Risk Controls for the Cloud

      • Sadie Creese, Michael Goldsmith, Paul Hopkins

      Pages 235-255

   3. Enterprise Information Risk Management: Dealing with Cloud Computing

      • Adrian Baldwin, David Pym, Simon Shiu

      Pages 257-291

6. Back Matter

   Pages 293-306

   PDF

This book analyzes the latest advances in privacy, security and risk technologies within cloud environments. With contributions from leading experts, the text presents both a solid overview of the field and novel, cutting-edge research. A Glossary is also included at the end of the book. Topics and features: considers the various forensic challenges for legal access to data in a cloud computing environment; discusses privacy impact assessments for the cloud, and examines the use of cloud audits to attenuate cloud security problems; reviews conceptual issues, basic requirements and practical suggestions for provisioning dynamically configured access control services in the cloud; proposes scoped invariants as a primitive for analyzing a cloud server for its integrity properties; investigates the applicability of existing controls for mitigating information security risks to cloud computing environments; describes risk management for cloud computing from an enterprise perspective.

• Cloud
• Privacy
• Risk
• Security
• Trust

From the reviews:

“The volume consists of eight chapters across four headings, covering different aspects of privacy and security issues in cloud computing. … this informative volume … provides not only a comprehensive overview but also proposed practical solutions on how to increase privacy and security in cloud computing. The book will be beneficial to business professionals and researchers working in this area.” (Monika Zalnieriute, Privacy Laws & Business, International Report, Issue 124, August, 2013)

"This book offers insight into some of the issues in cloud computing that need immediate attention. The contributors and editors have done a good job in producing this book when it is most needed; it should stimulate research into privacy and security in cloud computing." (S. V. Nagaraj, ACM Computing Reviews, May 17 2013, Review #: CR141225)

• Cloud and Security Laboratory HP Labs, Filton, Bristol, UK

  Siani Pearson

• Department of Systems and Computer Engineering, Carleton University, Ottawa, Canada

  George Yee

Dr. Siani Pearson is a senior researcher in the Cloud and Security Research Lab of HP Labs, Bristol, UK.

Dr. George Yee is a consultant with his own company, and an Adjunct Research Professor in the Department of Systems and Computer Engineering at Carleton University, Ottawa, ON, Canada.

Policies and ethics