SECURITY REQUIREMENTS IN CLOUD SYSTEM

Abstract

Cloud computing offers immediate availability and massive scalability with low cost as major benefits, but it introduces new risks and vulnerabilities too. In practice security considerations are usually incorporated in the later stages of development, resulting in rise of vulnerabilities. To help address these issues in Cloud computing, this study presents an approach to elicitate true Security Requirements early in the development process by considering functional requirements of actors and possible threats. We also conduct an in depth analysis of some available cloud storage services to prove the need of this approach for a secure Cloud environment. The results of this thesis could potentially encourage the Security Requirement engineers to follow a structured elicitation approach and to consider various viewpoints, which help’s to develop secure Cloud applications, thus, contributing to secure Cloud environment. It also enables the organizations to gain a better understanding on how the security could be implemented to best effect.