# Secure Cloud Infrastructure: A Survey on Issues, Current Solutions, and Open Challenges
## 4 Security Issues in Cloud Computing Infrastructure
### Host-Level Issues
#### 4.4.2 Data Storage Security Issue
\begin{table}
\begin{tabular}{c c c c c c} \hline \hline
**Security Issue** & **Threats** & **Level Effected** & **Feature Affected by** & **Impact on Security** & **Reference** \\ \hline \multirow{4}{*}{Virtualization} & Hypervisor vulnerabilities & Host level & Multi-tenancy and & Can cause damage to & [46] \\  & vulnerabilities & Host level/Network & Elasticity & the entire system & [48] \\  & VM theft & Host level/Network & Flexibility & Effect the network & [48] \\  & VM theft & Host level & Flexibility & Cause a & \\  & VM escape & Host level & & vulnerability to OS & [46] \\ \hline \multirow{4}{*}{Virtualization} & Hyperacking & Host level & - & Take control over OS & [46] \\  & Hyper-call & Host level & Elasticity & \begin{tabular}{c} Shift the \\ functionality of \\ VMM and host crash \\ \end{tabular} & [48] \\  & Guest-hopping attack & Host level & Multi-tenancy & Lead to access VM & [43] \\  & Hypervisor Single point of failure & Host level & Multi-tenancy & Can cause damage to \\  & Cross VM & Host level & Multi-tenancy & \begin{tabular}{c} the entire system \\ in the valuable \\ information \\ \end{tabular} & [48] \\  & Side-channel attack & Application level/Host level/Network level/Data level & Elasticity & Data loss and cause damage to the data & [22] \\ \hline \multirow{4}{*}{Insecure API’s} & \multirow{4}{*}{Insecure API’s} & \multirow{4}{*}{Application level} & Flexibility, & \begin{tabular}{c} Violate access \\ control and \\ authentication but \\ also loss of data \\ integrity, availability \\ and confidentiality \\ \end{tabular} & [41] \\  & & & & \\ \hline Resources & EDoS & Application level & On-demand services (Pay-as-you use) & \
\begin{tabular}{c} Effected the costs of \\ the resources \\ \end{tabular} & [42] \\ \hline \multirow{4}{*}{Abuse of Cloud Computing} & \multirow{4}{*}{User’s abuse} & \multirow{4}{*}{Application level} & \multirow{4}{*}{Multi-tenancy} & It can cause & \\  & & & & malicious data & \\  & & & & hosting, password & \\  & & & & cracking, key & \\  & & & & cracking, the & \\  & & & & building of rainbow & \\  & & & & tables, launching of & \\  & & & & dynamic attack & \\  & & & points & \\ \hline Malicious Insiders & Insider users & Application level & Multi-tenancy & Data Breaches & [35] \\ \hline \multirow{4}{*}{End users’ attacks} & \multirow{4}{*}{Enabling Fraud} & \multirow{4}{*}{Application level} & \multirow{4}{*}{Multi-tenancy} & \multirow{4}{*}{Steal user’s identity} & [42] \\  & & & & & \\ \cline{1-1}  & & & & & \\ \cline{1-1}  & & & & & \\ \cline{1-1}  & & & & & \\ \cline{1-1}  & & & & & \\ \hline \multirow{4}{*}{Data Segregation} & \multirow{4}{*}{
\begin{tabular}{c} injecting a client \\ code or using any \\ application \\ \end{tabular} } & \multirow{4}{*}{Application level/Host level/Network level/Data level} & \multirow{4}{*}{Multi-tenancy} & loss of data integrity, & \\  & & & & availability and & \\ \cline{1-1}  & & & & confidentiality & \\ \hline \hline \end{tabular}
\end{table} 
Table 3: _Cont._environment and/or resources. In addition, attackers could carry out utilizing the interface used by customers to interact with the service provider. In addition, it can be noticed that most security issues affect the application level and data level rather than the network level, but the most serious issues threaten the host level. This fact should be taken seriously, as damage to the host can damage the entire system, including the shared spaces. The following subsections present the proposed solutions in the literature for the issues discussed in this section. The solutions will be discussed based on the levels as well as the issues discussed in the same manner.