Data Security and Governance in Multi-Cloud Computing Environment

Lists

Yeboah-Ofori, Abel ORCID: https://orcid.org/0000-0001-8055-9274, Jafar, Alameen, Toluwaloju, Toluwaloju, Hilton, Ian, Oseni, Waheed and Musa, Ahmad (2024) Data Security and Governance in Multi-Cloud Computing Environment. In: IEEE The 11th International Conference on Future Internet of Things and Cloud (FiCloud 2024), 1--21 Aug 2024, Vienna, Austria.

[thumbnail of Data Security and Governance in Multi-Cloud Computing Environment - Rep.pdf]

Preview

PDF
Data Security and Governance in Multi-Cloud Computing Environment - Rep.pdf - Accepted Version
Download (1MB) | Preview

Abstract

The adoption and integration of a multi-cloud computing environment for data transmission and storage is a crucial step for organizations, offering optimization, redundancy, and increased accessibility. However, this transition has also brought about significant security challenges, vulnerabilities, and attack vectors. These include inefficient resource management across diverse cloud providers, interoperability issues, identity and access management concerns, unauthorized access, data governance, and operational optimization. These challenges have led to various types of attacks, such as supply chain attacks, data breaches, DoS, APTs, and cross-cloud attacks. This paper delves into the growing complexities of securing multi-cloud environments, specifically focusing on governance and security implications. It also evaluates the effectiveness of multi-cloud management tools, such as Azure Arc and Google Anthos, in addressing these challenges. The contribution of this paper is threefold. First, we thoroughly investigate the various multi-cloud data storage mechanisms, vulnerabilities, and attacks. Secondly, we compare three prominent multi-cloud management tools, Azure Arc, Google Anthos, and AWS Elastic Kubernetes Service (EKS), regarding their ability to secure resources across diverse cloud providers. Finally, we conducted an attack on the multi-cloud platform to detect vulnerabilities and operational inefficiencies and propose security mechanisms to enhance security. Our results demonstrate how data security and governance can be effectively implemented to secure multi-cloud operation environments and how inefficiencies can be detected and addressed to ensure data security.

Item Type:	Conference or Workshop Item (Paper)
Depositing User:	Dr Abel Yeboah-Ofori
Date Deposited:	22 Aug 2024 07:06
Last Modified:	15 Oct 2024 10:30
URI:	https://repository.uwl.ac.uk/id/eprint/12332