A Multi-Level Security Framework for Cloud Computing?

Cloud computing is a model of information computing, storage, delivery of services and sharing infrastructure resources provided to clients on their demand. Instead of purchasing actual physical devices servers, storage, or any networking equipment, customer used these resources from a cloud provider as an outsourced service. It defined as ―a model of management of information, resources and applications as services over Internet as per requirement of clients‖. Cloud computing is a approach to convenient and on demand network access to a shared group of computing resources that can be provided by service provider in the form of multiple services. It introduces a new Internet-based environment for on-demand access, dynamic provision for computing resources by using various type services on cloud. These models are referred as Software as a Service, Platform as a Service and Infrastructure as a Service. Just because of that it is tough to manage the security and privacy problems in cloud caused by its sensitive data, outsourcing of infrastructure, multi-tenancy nature, and critical applications. This paper proposing a framework that identifies and summarize the security and privacy challenges in cloud services. It highlights cloud-specific attacks and risks and clearly illustrates their mitigations and countermeasures. This is also highlight a multilevel security framework for cloud computing that helps to satisfy security and privacy requirements in the clouds and protect them against intruder attacks. The purpose of this work is to demonstrate and introduced a security and privacy aspect that will take into considerations while developing and using the cloud environment either by individuals or organizations.