Abstract:The division of data ownership and data management is regarded as the key characteristics of cloud computing. Customers outsource their data to the cloud and need to use cloud computing platform for data management, as a result losing direct control over the data. The introduction of cloud computing model has brought some new security issues and challenges, such as malicious cloud administrator, security vulnerabilities and improper access interface. So insider threats become more crucial, especially with the cloud administrators gaining more control on customers' virtual machines and data in reality. How to defend against malicious insiders, especially who have priorities to access or steal customers' data and computation resources, has become a challenging problem as well as a common focus of attention in both academia and industry in recent years. For further study of the insider threats in cloud computing model, making systematic summary from ways and means to deal with, and promoting domestic research in this direction, this paper firstly summarizes the major types of internal threats in the cloud environment, and takes an experimental approach to demonstrate typical insider vulnerabilities and possible actionable attacks. This paper summarizes and proposes three approaches to deal with insider threats in the cloud, as: user & entity behavior analysis and evaluation, cloud administration priority division and run-time access control, and customer controlled data encryption. For each approach, this paper thoroughly analyzes its technical principles, key technologies, state of the art, as well as practical possibilities in the real world. At last, this paper points out the future research directions and key technologies against insider threats in the cloud. © 2017, Science Press. All right reserved.

Security Risks and Its Countermeasure in the Cloud Environment

Analysis of Key Technologies on Cloud Computing Security

Analysis on the Risk of Personal Cloud Computing Based on the Cloud Industry Chain

Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

Study on the Security Models and Strategies of Cloud Computing

Research on the Problems and Countermeasures of Computer Security under Cloud Computing Background

Recent Advances in Cloud Security.

Research on cloud computing security problem and strategy

Analyze the Security Model and Policy of Cloud Computing

Survey on Insider Threats to Cloud Computing

Security Challenges for the Public Cloud

Cloud Host Security

Security Models and Management in Cloud Computing

Information Security Risk Management Framework for the Cloud Computing Environments

The research and design of cloud computing security framework

Computer Network Security under the Cloud Computing Technology Environment

Data Security Risk and Preventive Measures of Virtual Cloud Server Based on Cloud Computing

NETWORK/SECURITY THREATS AND COUNTERMEASURES FOR CLOUD COMPUTING

Security risks and their management in cloud computing

Study on Differentiated Security Service Based on Cloud Computing

Comparative analysis of security models in cloud platforms