IaaS Platforms: How Secure are They?

In this paper, we examine how cloud computing providers enforce the security mechanisms of their IaaS platforms and how they enable their users to securely utilize the platforms. In particular, we evaluate four popular IaaS platforms against the following criteria: network security, authentication and API security, security attack protection and high availability, logging and monitoring, access right control, and physical and environmental security. This evaluation is based on both the information provided by cloud computing providers and our own experience with the IaaS platforms.