Cloud computing is predicted to be the technology of the future. This paradigm is believed to offer infinite resources and complete security, thanks to the application of modern techniques and highly qualified personnel employed. Despite the highly skilled manpower taking care of the cloud; cybercriminals have managed to attack the cloud. This work undertakes the study of threats that exist in cloud computing, the type of industries targeted by cybercriminals. Furthermore, we have carried out a detailed study on the targeted sectors and the method used by cybercriminals to target these sectors. This work will be extremely useful for researchers and businesses to learn about the type of cyber attack that occurs in this newly evolved paradigm and to develop new methods to counter them.KeywordsCyber security, cloud attack, cybercrime, asset protection1 IntroductionBusinesses and individuals users are outsourcing their services to the web, instead of maintaining their own resources. Outsourcing technical resources allows the organization to focus on business needs rather than the technical aspect, which is handled by the IT expert. To facilitate such users, a web-based paradigm known as cloud computing has emerged that offers services according to a utility model [p3]. The main objective of Cloud computing is to reduce operational costs, increase productivity, increase reliability and availability [p10]. To cater to the wide variety of users, the cloud offers three types of services. These services include Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) (Mell & Grance, 2011). In IaaS users are offered computing capabilities as pr...... middle of paper ......0]B. Hayes, Cloud computing, Communications of the ACM 51 (7) (2008).[p11] Andrzej Goscinski, Michael Brock. Towards dynamic, attribute-based serving, discovery, and selection for cloud computing. Future Generation Computer Systems 26 (2010) 947-970[p12] Vaquero LM, Rodero-Merino L, Caceres J., Lindner M. A break in the clouds: towards a definition of cloud. In: ACMSIGCOMM, editor. Computer Communication Review 2009. New York: ACM Press; 2009, pages 50–5. (for grid virtualization)[p13] Boss G, Malladi P, Quan D, Legregni L, Hall H. Cloud computing, 2009. http://www.ibm.com/developerswork/websphere/zones/hipods/library. html. (for service types)Mell, P. & Grance, T. (2011), "The NIST Definition of Cloud Computing", Special Publication 800-145, National Institute of Standards and Technology, available at http:// csrc.nist. gov/publications/PubsSPs.html#800-145.
tags