Abstract:The division of data ownership and data management is regarded as the key characteristics of cloud computing. Customers outsource their data to the cloud and need to use cloud computing platform for data management, as a result losing direct control over the data. The introduction of cloud computing model has brought some new security issues and challenges, such as malicious cloud administrator, security vulnerabilities and improper access interface. So insider threats become more crucial, especially with the cloud administrators gaining more control on customers' virtual machines and data in reality. How to defend against malicious insiders, especially who have priorities to access or steal customers' data and computation resources, has become a challenging problem as well as a common focus of attention in both academia and industry in recent years. For further study of the insider threats in cloud computing model, making systematic summary from ways and means to deal with, and promoting domestic research in this direction, this paper firstly summarizes the major types of internal threats in the cloud environment, and takes an experimental approach to demonstrate typical insider vulnerabilities and possible actionable attacks. This paper summarizes and proposes three approaches to deal with insider threats in the cloud, as: user & entity behavior analysis and evaluation, cloud administration priority division and run-time access control, and customer controlled data encryption. For each approach, this paper thoroughly analyzes its technical principles, key technologies, state of the art, as well as practical possibilities in the real world. At last, this paper points out the future research directions and key technologies against insider threats in the cloud. © 2017, Science Press. All right reserved.

Survey on Protection Mechanisms for Untrusted Hypervisor in Cloud

Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

Cloudvisor: Retrofitting Protection Of Virtual Machines In Multi-Tenant Cloud With Nested Virtualization

Research On Security Of Virtual Cloud

Virtualization Security: the Good, the Bad and the Ugly

Multilateral Security Architecture for Virtualization Platform in Multi-Tenancy Cloud Environment

Isolate Secure Executing Environment for a Safe Cloud.

On Data and Virtualization Security Risks and Solutions of Cloud Computing.

A Survey on Security Challenges of Virtualization Technology in Cloud Computing

VIRTUALIZATION SECURITY: A GATEWAY TO SECURE CLOUD COMPUTING

Co-residence Based Data Vulnerability Vs. Security in Cloud Computing System with Random Server Assignment

Ensuring Security and Privacy Preservation for Cloud Data Services

Survey on Access Control Technologies for Cloud Computing

Security of Separated Data in Cloud Systems with Competing Attack Detection and Data Theft Processes

TrustOSV: Building Trustworthy Executing Environment with Commodity Hardware for a Safe Cloud.

A Survey for Cloud Application Programming Interface Security: Threats and Protection br

Survey on Insider Threats to Cloud Computing

On the effectiveness of virtualization-based security

Data Security Risk and Preventive Measures of Virtual Cloud Server Based on Cloud Computing

An In-VM Measuring Framework for Increasing Virtual Machine Security in Clouds

Balancing Theft and Corruption Threats by Data Partition in Cloud System with Independent Server Protection