A Survey on Insider Attacks in IAAS-Based Cloud

Insider Attack In Cloud Computing

According to the cert definition of insider threat “a malicious insider threat to an organization is a current or former employee, contractor, or other business partner who has or had authorized access to an organization's network, system, or data and intentionally exceeded or misused that access in a manner that negatively affected the confidentiality, integrity, or availability of the organization's information or information systems.” (Kandias, M., et.al., 2011). an insider attack can be defined as an intentional misuse of computer system which has potential data about an organization. According to this definition attacker can be employee, contractor and/or third party business partners. The damages of insider threat are: it sabotages theft of confidential information, trade secrets and intellectual property (IP). 85% of reported fraud is committed by people within the organization (Kandias, M., et.al., 2011). A typical organization loses approximately 5% of its annual revenue to insider fraud and 330 cases of insider fraud identified during 2010.such that every organization needs secure management of sensitive data and intellectual property. in cloud environment, most of insider threat can be done by cloud insiders such that they should provide robust security algorithm on client data (Theoharidou, M., et.al., 2005).