Security checklist for IaaS cloud deployments

TL;DR

This paper presents a comprehensive security checklist for IaaS cloud deployments, derived from literature review on threats and security best practices, aiming to aid practitioners in securing cloud infrastructure.

Contribution

It introduces a structured, practical security checklist for IaaS deployments based on an extensive survey of threat models and security recommendations.

Findings

Developed a manageable, practical security checklist.

Aligned checklist elements with existing threat models.

Enhanced security awareness for IaaS cloud users.

Abstract

In this article, we provide a cloud-security checklist for IaaS cloud deployments. The elements of the checklist are established by surveying the related literature on cloud-threat models and various security recommendations. We define the elements of the list on a level of abstraction that helps keep the size of the list manageable while preserving the list's practical applicability.