Modeling Cloud Computing security scenarios through attack trees

Cloud environments have positioned themselves as one of the most relevant IT management options in today's industry. However, this paradigm is no stranger to the security problems that become more critical as the portfolio of services offered in the cloud is expanded, which means that security incidents in these environments are increasingly critical. This paper presents a proposal for the application of the attack tree methodology for modeling security scenarios in Cloud Computing. For this, a review of risks and countermeasures of the services and infrastructure in the cloud is carried out, to define the elements that make up a Cloud Computing security scenario. As a result, a proposal is presented of the elements from which different attack trees can be modeled that respond to the characteristic risks of the cloud environment. For the scope of this work, the proposal presented was delimited under technical risks, but as a future development, it can be extended to include other types of risks.