Cloud Service Analysis from the Security Principles Perspective

As a popular and ubiquitous solution for accommodating the demand for the storage and processing of large volume of data, cloud service providers are utilized intensively. The extensive use of such services presents an inherent vulnerability as gaining access to others' private data is very attractive to adversaries. To accomplish the goal of accessing cloud data, the attackers exploit several security attacks including masquerading, eavesdropping, modification, deletion, etc. To ensure such attacks are prevented, we analyze cloud service providers security with respect to select security design principles. We focus on the verification of the least privilege, separation of privileges, and complete mediation principles on a stereotypical cloud service Amazon Web Services (AWS).