Cloud security: Can the cloud be secured?

Techniques used for attacking the legacy web applications are still valid on the cloud, but the legacy security methods are no longer valid. Welcome to the new world! Cloud computing is ubiquitous with ease of use, zero hardware issues, pay as you grow and other trendy terminologies. It is also perceived as being more secure on cloud. Does that mean there is no need for any penetration testing for cloud-based applications? If needed, what should be those set of tests, and which tools are best suited to perform these? How different is cloud security testing from the legacy three-tier architecture testing? It is a known fact that companies invest less when it comes to security. So what alternatives are we left with? These, among other questions are answered during the course of this white paper.