Cloud security.

Traditional system security mostly means keeping attackers out.

The attacker needs to either compromise the authentication/access control system, or impersonate existing users.

But cloud allows co-tenancy: Multiple independent users share the same physical infrastructure.

–An attacker can legitimately be in the same physical machine as the target.

-Customer’s lack of control over his own data and application.

Cloud computing provides infrastructure as a service, software as a service, platform as a service. But for these we are relying on a third-party service provider. So our applications, data are with third party. So, security becomes an issue regarding where the data is stored, whether it is intercepted especially when it is mission critical operation or data like banking data, financial data or academic data.

Clouds are still subject to traditional data confidentiality, integrity, availability, and privacy issues, plus some additional attacks.