# Cyberattacks and Security of Cloud Computing: A Complete Guideline
## 3 Service Models of Cloud Computing
### Migration and Pivoting  
For load balancing or disaster recovery, virtual machines can be transferred among different hosts. Copying the VM image over the network is used to carry out this migration. If the connection is not encrypted, a hacker might be able to eavesdrop on data and execute a man-in-the-middle attack. Different services hosted by a VM usually allow users to log in. Once the user gains access, the intruder has the option to damage the physical system and exit the virtual machine. The authors of [31] examined inter-VM communication based on Xen for both local and remote environments to create scenario-based hypotheses to identify different communication sequences. The authors' findings suggest that trigger scenarios can be used to extract VM communication sequences. The performance aspect of virtual machines (VMs) shows more consideration than the potential security risks associated with VM connectivity. In addition, the authors of [32] present a unique method for examining how quickly malware spreads in virtualized cloud systems. To quantify the effects of antimalware software on malware propagation in virtualized environments, the paper proposed theSusceptible-Protected-Infected (SPI) cloud malware attack model. The suggested model was also analyzed. In order to assess control measures for malware propagation, the authors also analyze the proposed model using the stability theory of differential equations and epidemic modeling. Furthermore, [PERSON] et al. [33]. provide a novel architecture called Alamut for reshaping any normal network intrusion detection system (NIDS) to perform in a virtual execution environment based on Xen. The proposed design places basic security implementations for common NIDS security issues, including signature matching; however, security policies and administration modules are preserved in that domain's user space. By separating methods from policies, it is possible to verify network packets directly at the kernel level more effectively without having to use time-consuming contexts. One of the main issues is that any system can tolerate fault and run properly without any fault leading to system failure. The virtualization and fault tolerance (VFT) technique is proposed, which helps reduce the service time and increase the system's overall availability. Decision-maker and cloud manager modules manage the virtualization process, which caters to load balancing and handling faults. Redundancy and checkpointing are also used to achieve fault tolerance. The proposed scheme differs from the previous one because this fault handler is included in the virtualization module, which can detect and remove temporary software faults and stop unrecoverable faults. The approach in [34] extends the lives of IoT-restricted devices, including new protocols making the development and configuration of IoT innovative applications. An open-source software platform is developed to achieve the goal of utilizing the OpenStack API and leverages a web interface that provides all the functionality typically available in a home gateway through the OpenWRT Linux distribution. Results show that this approach reduces the amount of data transmitted, with benefits in reduced workload, power consumption, and extended device lifetime. Cloud migration is the process of migrating digital business operations to the cloud. Cloud migration is similar to physical movement. Applications and IT processes are moved from one data center to another, rather than packing and moving physical goods [35; 36]. A data security solution and analysis provided for a privacy protection framework during data migration. A secure socket layer (SSL) is installed, and the migration ticket is offered with minimal privileges [37; 38]. Prediction-Based Encryption (PBE) is also used for data encryption. The system is used for healthcare and e-commerce systems that can store data on credit card details.