% Cloud Security

Nowadays all the companies realized that Security issues have a big role and they improved their infrastructures with a lot security devices, not only for the IT department, but also for general security.
Cloud Computing is not exempted from all this, so \textit{Cloud Security} was born.

Cloud Service Provider (CSP) must take into account how its infrastructure works and ensure security for it, not just taking in consideration all the virtual threads correlated to computing, but also CSP has to be protected by physical access. 

The customer is not excluded from Cloud Security and it must sign a document, called \textit{Service Level Agreement} (SLA), signed also by the CPS, where there are all the security matters that both parties must take care and who is responsible for. 
In this terms, the customer has a role in the cloud security, because it needs to ensure security for its application and data, but also make sure that CSP did all the possible security measure to provide and to protect the services.

Virtualization and Cloud systems have been changed the way ``to do computing'', creating a new environment that it is a field where new cloud threads could came out. They are all the events that can cause some problem, that demotes \textit{CIA} principles, which can alter sensitive data or delete some files.
Possible list of threads are:

\begin{itemize}
	\item 
	Abuse and nefarious use of cloud computing
	\item
	Insecure interface and APIs
	\item
	Malicious insiders
	\item
	Data loss and leakage
	\item
	Service hijacking
	\item
	Account hijacking
	\item
	Risk profiling
	\item
	Identity theft
\end{itemize}

Cloud Service Provider must know the new threads to make reliable and secure its services and new vulnerabilities must be addressed by it to avoid weakness in the security architecture that may leads to loss the control of the network and the resource infrastructure.
For instance, virtual layer must be protected to prevent any internal attack as \textit{VM-to-VM} or \textit{VM-to-VIM}, where who is attacking can gain the control of the resources or the entire cloud environment.
\textit{Sanitization} and \textit{Anonymization} must be performed by CPS to ensure the complete destruction of user's information and to avoid any data leakage.
