Publication Peer Review

Since 2010, the Cloud Security Alliance (CSA) Top Threats to Cloud Computing survey-driven report has filled a significant gap, providing valuable industry insight into the latest cloud threats, risks, and vulnerabilities. However, security professionals recognize that the top cloud concerns in the report only paint a part of the bigger picture. The collective concerns and reflections of cloud experts, survey respondents, and industry participants miss the real-world impacts and losses. Announced at the Black Hat USA conference in 2019, the Top Threats working group launched the bi-annual cloud breach “Deep Dive” case studies as a companion to the cloud risks survey.

The Deep Dives attempt to articulate cloud computing’s most significant and pressing issues. This work complements the continuous Top Threats research by reflecting on real-world attacks and breaches. The Top Threats Working Group describes more technical details dealing with architecture, compliance, risk, etc. We hope this data and analysis of recent cloud security incidents will help cloud defenders, vendors, authorities, and users take meaningful action against the top cloud risks. The Deep Dive should direct greater confidence and appreciation of key considerations in making cloud systems and services safer in real-world scenarios.