Top Threats Cloud Security Alliance（云安全联盟的威胁）.pdfVIP

Top Threats to Cloud Computing V1.0 Prepared by the Cloud Security Alliance March 2010 Top Threats to Cloud Computing V1.0 Introduction The permanent and official location for the Cloud Security Alliance Top Threats research is: /topthreats © 2010 Cloud Security Alliance. All rights reserved. You may download, store, display on your computer, view, print, and link to the Cloud Security Alliance “Top Threats to Cloud Computing” at /topthreats/csathreats.v1.0.pdf subject to the following: (a) the Guidance may be used solely for your personal, informational, non-commercial use; (b) the Guidance may not be modified or altered in any way; (c) the Guidance may not be redistributed; and (d) the trademark, copyright or other notices may not be removed. You may quote portions of the Guidance as permitted by the Fair Use provisions of the United States Copyright Act, provided that you attribute the portions to the Cloud Security Alliance “Top Threats to Cloud Computing” Version 1.0 (2010). Copyright © 2010 Cloud Security Alliance 2 Top Threats to Cloud Computing V1.0 Table of Contents Introduction 2 Foreword 4 Executive Summary 6 Threat #1: Abuse and Nefarious Use of Cloud Computing 8 Threat #2: Insecure Interfaces and APIs 9 Threat #3: Malicious Insiders 10 Threat #4: Shared Technology Issues 11 Threat #5: Data Loss or Leakage 12 Threat #6: Account or Service Hijacking 13 Threat #7: Unknown Risk Profile 14 Copyright © 2010 Cloud Security Alliance 3 Top Threats to Cloud Computing V1.0 Foreword Welcome to the Cloud Security Alliance’s “Top Threats to Clo