Establishing trust despite attacks in cloud computing: A survey

Cloud computing has become an integral part of our lives as it provides on-demand, rapid provisioning of services with ease of implementation, accessibility and flexibility. The pay-as-you-use aspect is very attractive for customers who usually pay fixed price for resources whose usage does not tally with the cost of purchase. In this paper, we present a survey on security in cloud computing despite various attacks. It presents the various security aspects in the services provided by the cloud such as IaaS, PaaS and SaaS. Since virtualization is used vastly in cloud, we take a look at the various attacks virtual machines are subjected to. Trusted computing was introduced for the customers to be assured that the resources they use over cloud is reliable. Further, we also observe how remote attestation plays a role to assure trustworthiness and how the Trusted Platform Module is used in the attestation mechanism. The paper thus provides an overall view of existing techniques to secure and trust cloud and its components.