Lucy in the Sky Without Diamonds: Stealing Confidential Data in the Cloud
Cloud computing is a recent paradigm that is creating high expectations about benefits such as the pay-per-use model and elasticity of resources. However, with this optimism come also concerns about security. In a public cloud, the user's data storage and processing is no longer done inside its premises, but in data centers owned and administrated by the cloud provider. This may be a concern for organizations that deal with critical data, such as medical records. The authors show that a malicious insider can steal confidential data of the cloud user, so the user is mostly left with trusting the cloud provider.