Enhancing Cloud Security and Privacy: The Power and the Weakness of the Audit Trail

Robert Anderson Keith Duncan; Mark Whittington

Enhancing Cloud Security and Privacy: The Power and the Weakness of the Audit Trail

Robert Anderson Keith Duncan, Mark Whittington

Research output: Chapter in Book/Report/Conference proceeding › Published conference contribution

19 Downloads (Pure)

Abstract

Information security in the cloud presents a serious challenge. We have identified fundamental weaknesses when undertaking cloud audit, namely the misconceptions surrounding the purpose of audit, what comprises a proper audit trail, what should be included, and how it should be achieved and maintained. A properly specified audit trail can provide a powerful tool in the armoury against cyber-crime, yet it is all too easy to throw away the benefits offered by this simple tool through lack of understanding, incompetence, mis-configuration or sheer laziness. Of course, merely having an effective audit trail is not enough — we actually have to examine it regularly to realise the potential benefits it offers.

Original language	English
Title of host publication	CLOUD COMPUTING 2016
Subtitle of host publication	The Seventh International Conference on Cloud Computing, GRIDs, and Virtualization
Editors	Carlos Becker Westphall, Yong Woo Lee, Stefan Rass
Publisher	IARIA
Pages	137-142
Number of pages	6
ISBN (Print)	978-1-61208-460-2
Publication status	Published - 24 Mar 2016
Event	The Seventh International Conference on Cloud Computing, GRIDs, and Virtualization - H10 ROMA CITTA Via Pietro Blaserna, 101 (Quartiere Marconi) Roma 00146, Rome, Italy Duration: 20 Mar 2016 → 24 Mar 2016 http://www.iaria.org/conferences2016/CLOUDCOMPUTING16.html

Conference

Conference	The Seventh International Conference on Cloud Computing, GRIDs, and Virtualization
Abbreviated title	CloudComp 2016
Country/Territory	Italy
City	Rome
Period	20/03/16 → 24/03/16
Internet address	http://www.iaria.org/conferences2016/CLOUDCOMPUTING16.html

Keywords

security
privacy
audit
audit trail

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Access to Document

cloud_computing_2016_6_20_20063
IARIA grants royalty-free permission to any individuals or institutions to make the article available electronically, online, or in print.
Final published version, 97.9 KBLicence: Unspecified

Cite this

Enhancing Cloud Security and Privacy: The Power and the Weakness of the Audit Trail. / Duncan, Robert Anderson Keith; Whittington, Mark.

CLOUD COMPUTING 2016 : The Seventh International Conference on Cloud Computing, GRIDs, and Virtualization. ed. / Carlos Becker Westphall; Yong Woo Lee; Stefan Rass. IARIA, 2016. p. 137-142.

Research output: Chapter in Book/Report/Conference proceeding › Published conference contribution

Duncan, RAK & Whittington, M 2016, Enhancing Cloud Security and Privacy: The Power and the Weakness of the Audit Trail. in CB Westphall, YW Lee & S Rass (eds), CLOUD COMPUTING 2016 : The Seventh International Conference on Cloud Computing, GRIDs, and Virtualization. IARIA, pp. 137-142, The Seventh International Conference on Cloud Computing, GRIDs, and Virtualization, Rome, Italy, 20/03/16.

@inproceedings{471e2b96caa94b43bc93140e02f1be1e,

title = "Enhancing Cloud Security and Privacy: The Power and the Weakness of the Audit Trail",

abstract = "Information security in the cloud presents a serious challenge. We have identified fundamental weaknesses when undertaking cloud audit, namely the misconceptions surrounding the purpose of audit, what comprises a proper audit trail, what should be included, and how it should be achieved and maintained. A properly specified audit trail can provide a powerful tool in the armoury against cyber-crime, yet it is all too easy to throw away the benefits offered by this simple tool through lack of understanding, incompetence, mis-configuration or sheer laziness. Of course, merely having an effective audit trail is not enough — we actually have to examine it regularly to realise the potential benefits it offers.",

keywords = "security, privacy, audit, audit trail",

author = "Duncan, {Robert Anderson Keith} and Mark Whittington",

note = "Winner of best paper award.; The Seventh International Conference on Cloud Computing, GRIDs, and Virtualization, CloudComp 2016 ; Conference date: 20-03-2016 Through 24-03-2016",

year = "2016",

month = mar,

day = "24",

language = "English",

isbn = "978-1-61208-460-2",

pages = "137--142",

editor = "Westphall, {Carlos Becker } and Lee, {Yong Woo} and Stefan Rass",

booktitle = "CLOUD COMPUTING 2016",

publisher = "IARIA",

url = "http://www.iaria.org/conferences2016/CLOUDCOMPUTING16.html",

}

TY - GEN

T1 - Enhancing Cloud Security and Privacy: The Power and the Weakness of the Audit Trail

AU - Duncan, Robert Anderson Keith

AU - Whittington, Mark

N1 - Winner of best paper award.

PY - 2016/3/24

Y1 - 2016/3/24

N2 - Information security in the cloud presents a serious challenge. We have identified fundamental weaknesses when undertaking cloud audit, namely the misconceptions surrounding the purpose of audit, what comprises a proper audit trail, what should be included, and how it should be achieved and maintained. A properly specified audit trail can provide a powerful tool in the armoury against cyber-crime, yet it is all too easy to throw away the benefits offered by this simple tool through lack of understanding, incompetence, mis-configuration or sheer laziness. Of course, merely having an effective audit trail is not enough — we actually have to examine it regularly to realise the potential benefits it offers.

AB - Information security in the cloud presents a serious challenge. We have identified fundamental weaknesses when undertaking cloud audit, namely the misconceptions surrounding the purpose of audit, what comprises a proper audit trail, what should be included, and how it should be achieved and maintained. A properly specified audit trail can provide a powerful tool in the armoury against cyber-crime, yet it is all too easy to throw away the benefits offered by this simple tool through lack of understanding, incompetence, mis-configuration or sheer laziness. Of course, merely having an effective audit trail is not enough — we actually have to examine it regularly to realise the potential benefits it offers.

KW - security

KW - privacy

KW - audit

KW - audit trail

M3 - Published conference contribution

SN - 978-1-61208-460-2

SP - 137

EP - 142

BT - CLOUD COMPUTING 2016

A2 - Westphall, Carlos Becker

A2 - Lee, Yong Woo

A2 - Rass, Stefan

PB - IARIA

T2 - The Seventh International Conference on Cloud Computing, GRIDs, and Virtualization

Y2 - 20 March 2016 through 24 March 2016

ER -

Enhancing Cloud Security and Privacy: The Power and the Weakness of the Audit Trail

Abstract

Conference

Keywords

UN SDGs

Access to Document

Fingerprint

Cite this