{"id":"https://openalex.org/W7204053293","doi":"https://doi.org/10.64059/eiu.v3i1.227","title":"Security Challenges and Solutions in Cloud Computing Environments: A Comprehensive Review","display_name":"Security Challenges and Solutions in Cloud Computing Environments: A Comprehensive Review","publication_year":2026,"publication_date":"2026-07-31","ids":{"openalex":"https://openalex.org/W7204053293","doi":"https://doi.org/10.64059/eiu.v3i1.227"},"language":"en","primary_location":{"id":"doi:10.64059/eiu.v3i1.227","doi":"https://doi.org/10.64059/eiu.v3i1.227","is_oa":true,"landing_page_url":"https://doi.org/10.64059/eiu.v3i1.227","pdf_url":"https://journals.eiu.edu.ye/index.php/eiu/article/download/227/144","source":{"id":"https://openalex.org/S5407055327","display_name":"Emirates International University Journal","issn_l":"3104-6142","issn":["3104-6142","3104-6150"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405260303","host_organization_name":"Emirates International University","host_organization_lineage":["https://openalex.org/I4405260303"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Emirates International University Journal","raw_type":"journal-article"},"parent_works":[],"lineage":["https://openalex.org/W7204053293"],"child_works_count":0,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://journals.eiu.edu.ye/index.php/eiu/article/download/227/144","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5147899853","display_name":"Amat AL-latif H. Abo-Torkhoma","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I170535673","display_name":"Sana'a University","ror":"https://ror.org/04hcvaf32","country_code":"YE","type":"education","lineage":["https://openalex.org/I170535673"]}],"countries":["YE"],"is_corresponding":false,"raw_author_name":"Amat AL-latif H. Abo-Torkhoma","raw_affiliation_strings":["Sana'a University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sana'a University","institution_ids":["https://openalex.org/I170535673"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5147900901","display_name":"Abd Al-latif Hezam Abo-torkhoma","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I170535673","display_name":"Sana'a University","ror":"https://ror.org/04hcvaf32","country_code":"YE","type":"education","lineage":["https://openalex.org/I170535673"]}],"countries":["YE"],"is_corresponding":false,"raw_author_name":"Abd Al-latif Hezam Abo-torkhoma","raw_affiliation_strings":["Sana'a University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sana'a University","institution_ids":["https://openalex.org/I170535673"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022741741","display_name":"Gameil Saad Hamzh Ali","orcid":"https://orcid.org/0000-0002-1836-1088","observed_orcids":["https://orcid.org/0000-0002-1836-1088"]},"institutions":[{"id":"https://openalex.org/I4387156351","display_name":"21 September University for Medical and Applied Sciences","ror":"https://ror.org/05b8hjk91","country_code":"YE","type":"education","lineage":["https://openalex.org/I4387156351"]}],"countries":["YE"],"is_corresponding":false,"raw_author_name":"Gameil S. H. Ali","raw_affiliation_strings":["21 September University for Medical and Applied Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"21 September University for Medical and Applied Sciences","institution_ids":["https://openalex.org/I4387156351"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"3","issue":"1","first_page":"15","last_page":"15"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.0007999999797903001,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13983","display_name":"Cybersecurity and Information Systems","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-security","display_name":"cloud security","score":0.8539999723434448},{"id":"https://openalex.org/keywords/security-threats","display_name":"security threats","score":0.777999997138977},{"id":"https://openalex.org/keywords/data-breaches","display_name":"data breaches","score":0.9919999837875366},{"id":"https://openalex.org/keywords/account-hijacking","display_name":"account hacking","score":0.9610000252723694},{"id":"https://openalex.org/keywords/insider-threats","display_name":"insider threats","score":1.0},{"id":"https://openalex.org/keywords/insecure-apis","display_name":"insecure APIs","score":0.8619999885559082},{"id":"https://openalex.org/keywords/cloud-misconfiguration","display_name":"cloud misconfiguration","score":0.9459999799728394},{"id":"https://openalex.org/keywords/ddos-attacks","display_name":"DDoS attacks","score":0.996999979019165},{"id":"https://openalex.org/keywords/multi-tenancy","display_name":"multi-tenancy","score":0.9179999828338623},{"id":"https://openalex.org/keywords/regulatory-compliance","display_name":"regulatory compliance","score":0.9700000286102295},{"id":"https://openalex.org/keywords/cloud-service-models","display_name":"cloud service models","score":0.7509999871253967},{"id":"https://openalex.org/keywords/encryption","display_name":"encryption","score":0.7279999852180481},{"id":"https://openalex.org/keywords/identity-and-access-management","display_name":"identity and access management","score":0.9950000047683716},{"id":"https://openalex.org/keywords/multi-factor-authentication","display_name":"multi-factor authentication","score":1.0},{"id":"https://openalex.org/keywords/zero-trust-architecture","display_name":"zero-trust architecture","score":0.9829999804496765},{"id":"https://openalex.org/keywords/cloud-security-posture-management","display_name":"cloud security posture management","score":0.9819999933242798},{"id":"https://openalex.org/keywords/ai-based-security","display_name":"AI-based security","score":0.9380000233650208},{"id":"https://openalex.org/keywords/devsecops","display_name":"DevSecOps","score":1.0},{"id":"https://openalex.org/keywords/confidential-computing","display_name":"confidential computing","score":0.9990000128746033}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.8442999720573425},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.7558000087738037},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6955999732017517},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6347000002861023},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.4366999864578247},{"id":"https://openalex.org/C555379026","wikidata":"https://www.wikidata.org/wiki/Q977772","display_name":"Identity management","level":3,"score":0.4072999954223633},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.39469999074935913},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.36149999499320984},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.34130001068115234},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.3366999924182892},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.3310000002384186},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3278000056743622},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.3174999952316284},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.3149000108242035},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.31139999628067017},{"id":"https://openalex.org/C85106507","wikidata":"https://www.wikidata.org/wiki/Q1188445","display_name":"Utility computing","level":4,"score":0.3018999993801117},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.3001999855041504},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.2944999933242798},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.28839999437332153},{"id":"https://openalex.org/C1668388","wikidata":"https://www.wikidata.org/wiki/Q1149776","display_name":"Data management","level":2,"score":0.27959999442100525},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2768000066280365},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.2750000059604645},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.2671000063419342},{"id":"https://openalex.org/C120115606","wikidata":"https://www.wikidata.org/wiki/Q5135723","display_name":"Cloud testing","level":4,"score":0.26499998569488525},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.2639999985694885},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2590000033378601},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.25679999589920044},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.25519999861717224}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.64059/eiu.v3i1.227","doi":"https://doi.org/10.64059/eiu.v3i1.227","is_oa":true,"landing_page_url":"https://doi.org/10.64059/eiu.v3i1.227","pdf_url":"https://journals.eiu.edu.ye/index.php/eiu/article/download/227/144","source":{"id":"https://openalex.org/S5407055327","display_name":"Emirates International University Journal","issn_l":"3104-6142","issn":["3104-6142","3104-6150"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405260303","host_organization_name":"Emirates International University","host_organization_lineage":["https://openalex.org/I4405260303"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Emirates International University Journal","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.64059/eiu.v3i1.227","doi":"https://doi.org/10.64059/eiu.v3i1.227","is_oa":true,"landing_page_url":"https://doi.org/10.64059/eiu.v3i1.227","pdf_url":"https://journals.eiu.edu.ye/index.php/eiu/article/download/227/144","source":{"id":"https://openalex.org/S5407055327","display_name":"Emirates International University Journal","issn_l":"3104-6142","issn":["3104-6142","3104-6150"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405260303","host_organization_name":"Emirates International University","host_organization_lineage":["https://openalex.org/I4405260303"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Emirates International University Journal","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204053293.pdf","grobid_xml":"https://content.openalex.org/works/W7204053293.grobid-xml"},"referenced_works_count":28,"referenced_works":["https://openalex.org/W3155559132","https://openalex.org/W3167061296","https://openalex.org/W4378473059","https://openalex.org/W4380608119","https://openalex.org/W4387231141","https://openalex.org/W4388202809","https://openalex.org/W4391941625","https://openalex.org/W4393205793","https://openalex.org/W4395078210","https://openalex.org/W4396578638","https://openalex.org/W4402873778","https://openalex.org/W4403759069","https://openalex.org/W4404579260","https://openalex.org/W4405691884","https://openalex.org/W4406304251","https://openalex.org/W4407204461","https://openalex.org/W4408612287","https://openalex.org/W4408664422","https://openalex.org/W4409263901","https://openalex.org/W4410967486","https://openalex.org/W4411237135","https://openalex.org/W4411639835","https://openalex.org/W4412473411","https://openalex.org/W4414777313","https://openalex.org/W4415688216","https://openalex.org/W4416237116","https://openalex.org/W4416764585","https://openalex.org/W7082142129"],"related_works":["https://openalex.org/W7135419359","https://openalex.org/W4378374542","https://openalex.org/W7216847701","https://openalex.org/W4400609647","https://openalex.org/W7159869810","https://openalex.org/W7155644932","https://openalex.org/W7217957000","https://openalex.org/W4411326969","https://openalex.org/W4395453723","https://openalex.org/W4396530373"],"abstract_inverted_index":{"Cloud":[0,129],"computing":[1,13,64,194],"has":[2,24],"become":[3],"a":[4,181],"fundamental":[5],"paradigm":[6],"for":[7,190],"delivering":[8],"scalable,":[9],"flexible,":[10],"and":[11,30,49,53,86,102,111,118,140,147,160,178,187],"cost-effective":[12],"resources":[14],"through":[15],"Internet-based":[16],"platforms.":[17],"Its":[18],"rapid":[19],"adoption":[20],"across":[21],"various":[22],"sectors":[23],"enhanced":[25],"operational":[26],"efficiency,":[27],"resource":[28],"utilization,":[29],"service":[31],"delivery.":[32],"Despite":[33],"these":[34],"advantages,":[35],"cloud":[36,63,78,100,171,193],"environments":[37],"continue":[38],"to":[39],"face":[40],"significant":[41],"security":[42,60,95,109,136],"challenges":[43,186],"that":[44],"threaten":[45],"the":[46,58,94,145],"confidentiality,":[47],"integrity,":[48],"availability":[50],"of":[51,149,184],"data":[52,67],"services.":[54],"This":[55],"review":[56,174],"examines":[57],"major":[59],"threats":[61],"affecting":[62],"environments,":[65],"including":[66,114],"breaches,":[68],"account":[69],"hijacking,":[70],"insider":[71],"threats,":[72],"insecure":[73],"application":[74],"programming":[75],"interfaces":[76],"(APIs),":[77],"misconfigurations,":[79],"distributed":[80],"denial-of-service":[81],"(DDoS)":[82],"attacks,":[83],"multi-tenancy":[84],"risks,":[85],"regulatory":[87],"compliance":[88],"issues.":[89],"The":[90],"study":[91],"also":[92],"analyzes":[93],"implications":[96],"associated":[97],"with":[98,180],"different":[99],"services":[101],"deployment":[103],"models.":[104],"Furthermore,":[105],"it":[106],"reviews":[107],"contemporary":[108],"mechanisms":[110],"mitigation":[112],"strategies,":[113],"encryption":[115],"techniques,":[116],"Identity":[117],"Access":[119],"Management":[120,132],"(IAM),":[121],"Multi-Factor":[122],"Authentication":[123],"(MFA),":[124],"Zero":[125],"Trust":[126],"Architecture":[127],"(ZTA),":[128],"Security":[130],"Posture":[131],"(CSPM),":[133],"Artificial":[134],"Intelligence-based":[135],"systems,":[137],"DevSecOps":[138],"practices,":[139],"Confidential":[141],"Computing.":[142],"In":[143],"addition,":[144],"strengths":[146],"limitations":[148],"existing":[150],"approaches":[151],"are":[152,164],"critically":[153],"discussed,":[154],"while":[155],"emerging":[156],"trends,":[157],"research":[158,162],"gaps,":[159],"future":[161],"directions":[163],"highlighted.":[165],"By":[166],"synthesizing":[167],"recent":[168],"developments":[169],"in":[170],"security,":[172],"this":[173],"provides":[175],"researchers,":[176],"practitioners,":[177],"decision-makers":[179],"comprehensive":[182],"understanding":[183],"current":[185],"promising":[188],"solutions":[189],"securing":[191],"modern":[192],"environments.":[195]},"counts_by_year":[],"updated_date":"2026-11-13T13:42:25.865203","created_date":"2026-08-24T00:00:00"}