CCW 2013 - Cloud Computing Workshop

In recent months, the interest in Cloud Computing has increased. While Cloud Computing has a number of benefits, there are also issues that one should be aware of before enlisting its use. Cloud Computing presents a number of security concerns due to the nature of the Cloud, including the following: data protection, identity management, authentication and authorization standards, policy management, and virtualization process implementation. Infrastructures for the Cloud may be built on servers using different types of technologies, including different methods of virtualization that have risks associated with their use.
Tradeoffs between cost, functionality, and security also need to be considered. Are the cost savings on hardware and easier management of Cloud systems worth the changes to the overall level of security? Are the current defenses such as firewalls and security applications ready for Cloud Computing? Are there any issues with our current security tools when applied to Cloud Computing? What about the concerns of malicious software and the effects it can have within the Cloud? What about the contractual agreements between users of the Cloud and the Cloud provider. Is one's data protected to the same degree as it was without placing it on a Cloud? What guarantees does the user have about how their data is protected? How is liability for a data breach handled in a Cloud scenario? Are typical outsourcing agreements sufficient to address the issue?
This workshop will focus on Cloud Computing security, how users of Cloud systems can be educated to maintain the security posture of their systems, and how to improve the state of the art of Cloud Computing. The workshop will also look at the need to facilitate research and development of the next generation of Cloud Computing security standards and tools to assist in the creation of better, more secure systems.
Participants in previous workshops agree that the workshops have provided a useful and exciting forum to exchange ideas, opinions, and concerns. Due to community interest in Cloud Computing security and the rapidly evolving technologies, this year's workshop should generate much discussion.