Developing Economies and Cloud Security: A Study of Africa Mathias Mujinga School of Computing, University of South Africa mujinm@unisa.ac.

Transcription

1 Journal of Emrging Trnds in Computing and Information Scincs CIS Journal. All rights rsrvd. Dvloping Economis and Cloud Scurity: A Study of Africa Mathias Mujinga School of Computing, Univrsity of South Africa mujinm@unisa.ac.za ABSTRACT Cloud computing promiss to bring substantial bnfits to how organizations conduct thir businsss and th way thir srvics rach out to potntial consumrs. Cloud computing is a wlcom initiativ for small businsss that cannot afford to invst in ICT infrastructur but nd to bnfit from th rwards of conducting businss onlin. In dvloping conomis, thr ar challngs that fac cloud srvics providrs and thir consumrs. Broadband ntwo accss was idntifid as th main ssntial srvic for a succssful cloud computing offring. Th objctiv of this papr is to giv background information on th scurity issus in cloud computing, and highlight th potntial of cloud computing and th associatd challngs in utilizing srvics on th cloud for small businsss in dvloping conomis. W discuss scurity concrns spcifically rlatd to th small businsss, such as srvic availability, privacy and SLA trms. Kywords: Cloud computing, iaas, paas, saas, cloud scurity. 1. INTRODUCTION Most small-, micro-and mdium sizd ntrpriss (SMME) businsss in dvloping conomis and South Africa in particular find it difficult to invst in ICT. Givn th advantags that com with participating in -commrc in any businss, this bcoms a handicap that hindrs such small businsss. Consquntly, it put thm at a disadvantag with mor stablishd organizations that hav sinc takn thir businss onlin. Small businsss contribut to th conomic growth of upcoming conomis through mploymnt cration and srvic dlivry. At last two thirds of SMMEs ar found in th informal sctor and thy participat in a varity of sctors from manufacturing, financ, mining, and hospitality [1]. According to Subashini and Kavitha [2] small and mdium businss companis hav startd ralising th bnfits of cloud computing and thy ar boosting thir businsss by tapping th cloud infrastructur to gain fast accss to bst businss applications and infrastructur at ngligibl cost. Cloud computing has th potntial to bring significant bnfits to ths small businsss by rducing th costs of invstmnt in ICT infrastructur. Sinc cloud computing allows usrs to mak us of srvics such as computation, softwar, data accss, and storag to nd-usrs without th nd to know th physical location and configuration of th systm that dlivrs th srvics. Bakshi and Hmachandran [3] idntifid ths bnfits of cloud computing; simplifid cost and consumption modl, fastr provisioning of systms and applications, right-siz to addrss businss changs, as of intgration, highly scur infrastructur, and compliant facilitis and procsss. Dspit th advantags that com with cloud computing, its adoption and implmntation in dvloping conomis is facd by a varity of challngs. Th objctiv of this papr is to shd light on th potntial of cloud computing in Africa and th associatd challngs in utilising srvics on th cloud. This papr bgins by dfining cloud computing, discuss dploymnt and dlivry modls, and discuss bnfits that com with adopting cloud computing. Finally w discuss th potntial and challngs facd by small businsss in dvloping conomis whn adopting cloud computing. a. What is cloud computing? Th trm cloud computing probably coms from (at last partly) th us of a cloud imag to rprsnt th intrnt or som larg ntwod nvironmnt. Cloud computing is incrasingly bing prcivd as th 5th utility (aftr watr, lctricity, gas, and tlphony) that will provid th basic lvl of computing srvic that is considrd ssntial to mt th vryday nds of th gnral community [4]. Thr ar a numbr of compting dfinitions of cloud computing. Unitd Stats National Institut for Standards and Tchnology (NIST) providd guidlins on dfining cloud computing with this all-ncompassing dfinition [5]: Cloud computing is a modl for nabling convnint, on-dmand ntwo accss to a shard pool of configurabl computing rsourcs (.g., ntwos, srvrs, storag, applications, and srvics) that can b rapidly provisiond and rlasd with minimal managmnt ffort or srvic providr intraction. This cloud modl promots availability and is composd of fiv ssntial charactristics, thr srvic modls, and four dploymnt modls. Th abov dfinition is accompanid by ths fiv ssntial charactristics as illustratd in Figur 1: 1166

2 Journal of Emrging Trnds in Computing and Information Scincs CIS Journal. All rights rsrvd. Broad ntwo accss: Capabilitis and control of a cloud computing srvic must b availabl ovr th intrnt or othr ntwos using standard protocols. On-dmand slf-srvic: Customrs can unilatrally provision computing capabilitis, without rquiring human intraction with th srvic providr. Rapid lasticity: Nar-immdiat provisioning of capabilitis, to quickly scal up, or down, according to dmand. 2.1 Dlivry Modls Cloud computing srvics ar gnrally dlivrd through thr main dlivry modls to th nd-usr, namly: Infrastructur-as-a-Srvic (IaaS), Platform-as-a-Srvic (PaaS), and Softwar-as-a-Srvic (SaaS). Cloud computing nabls th dlivry of srvics through th on-dmand srvic provisioning modl to nd-usrs on pay-as-you-go basis ovr th ntwo such as th intrnt. a. Softwar-as-a-Srvic (SaaS) Masurd Srvic: Customrs us of th capabilitis is monitord, controlld, rportd, and chargd; with complt transparncy nabling a pay-as-you-consum mtring arrangmnt. Rsourc pooling: Physical and virtual rsourcs ar dynamically assignd and rassignd according to dmand, rsulting in cost savings to th customr. Furht [6] dfind cloud computing as a nw styl of computing in which dynamically scalabl and oftn virtualizd rsourcs ar providd as a srvics ovr th intrnt on th othr hand, Mll and Granc [7] ss cloud computing as both th applications dlivrd as srvics ovr th intrnt and th hardwar and systms softwar in th data cntrs that provid thos srvics. 2. CLOUD COMPUTING ARCHITECTURE Cloud computing architctur consists of four dploymnt modls and on top of th dploymnt modls sits th thr main srvic dlivry modls as illustratd in Figur 1. Each of ths modls brings about diffrnt scurity and othr challngs that nd to b takn into considration whn planning to mov businss procsss to th cloud. Softwar-as-a-Srvic is a softwar distribution modl in which applications ar hostd by a vndor or srvic providr and mad availabl to customrs ovr a ntwo, typically th intrnt. SaaS is dominant dlivry modl as an undrlying tchnology that supports wb srvics and srvic-orintd architctur (SOA). Th SaaS modl is associatd with th pay-as-you-go subscription licnsing modl. Du to th incras in broad band accssibility and univrsal accss to ntwod information, som companis hav startd incorporating th SaaS modl in thir businsss, notably IBM Lotus Liv and Salsforc.Com. Th dominanc of SaaS has rsultd in othr modls adopting it and thy includ Scurity-as-a-Srvic (ScaaS) and Communicationas-a-Srvic (CaaS). b. Platform-as-a-Srvic (PaaS) PaaS provids th dvlopmnt nvironmnt and it sits on top of Infrastructur-as-a-Srvic (IaaS). PaaS dlivrs oprating systms and associatd srvics ovr th intrnt without th nd to download or installs applications on ndusr computrs. It provids an oprating nvironmnt for dlivring a varity of applications and is ssntially an outgrowth of th SaaS application dlivry modl. Exampls includ th Amazon Wb Srvics, Googl's Engin and Windows Azur Platform. c. Infrastructur-as-a-Srvic (IaaS) IaaS provids th ntir infrastructur stack that dlivrs th computr infrastructur and it lvrags significant tchnology, srvics, and data cntr invstmnts to dlivr IT as a srvic to customrs. IaaS diffrs from SaaS in that, instad of softwar, IaaS dlivrs hardwar such as srvrs, mmory, CPUs, disk spac, and ntwo connctivity. Exampls includ Flxiscal and Cisco Unifid Srvic Dlivry. Othr notabl modls that ar built on th basic foundation of IaaS ar Computing-as-a-Srvic (CaaS) and Hardwar-as-a-Srvic (HaaS). d. Othr Modls Fig 1: NIST Cloud Computing Modl (Adaptd from [8]) Dlivry Modls Apart from ths main srvic dlivry modls a numbr of variations xists, namly Scurity-as-a-Srvic (ScaaS), Monitoring-as-a-Srvic (MaaS), Communication- 1167

3 Journal of Emrging Trnds in Computing and Information Scincs CIS Journal. All rights rsrvd. as-a-srvic (CaaS), Softwar Tsting-as-a-Srvic (STaaS), Businss Procss-as-a-Srvic (BPaaS), IT-as-a-Srvic (ITaaS), Databas-as-a-Srvic (DBaaS), and many mor othr variations bing dfind on a daily basis. Th Cloud Scurity Allianc (CSA) [9] issud its first Scurity-as-a- Srvic (ScaaS) whit papr in Sptmbr 2011 that dfins catgoris of srvic such as; idntity and accss managmnt, data loss prvntion, tc. In futur, variations of dlivry modls ar xpctd to b fully dfind and b stand-alon modls. Th adoption of SaaS modl is alrady high by ntrpriss of all sizs. According to th Yank Survy [10] th two othr aras of cloud computing; PaaS and IaaS ar taking longr to dvlop. IaaS adoption is growing with 24% of larg organizations alrady using IaaS and a furthr 60% considring it in th nxt twnty-four months [10]. But still th numbr on barrir for ntrpriss considring IaaS adoption is virtualization scurity, with thos that hav alrady dployd IaaS ranking rgulatory complianc, data migration, rliability, mploy us and quantitativ bnfits highr. Figur 2 is also in lin with th lvls of abstraction of th SPI modl as dscribd by Winklr [8]. Th SPI modl has layrs of abstraction that diffr from on spcific srvic modl to th othr. PaaS abstracts infrastructur to a gratr xtnt and gnrally prsnts middlwar containrs that ar tailord for diffrnt catgoris of usag. Ths containrs provid tools to simplify application dvlopmnt and limit application intractions with th undrlying systms. SaaS on th othr hand abstracts vn furthr and gnrally xposs narrow-functionality softwar-basd srvics such as customr rlationship managmnt (CRM). In othr words, from IaaS to SaaS undrlying computing functions ar mor and mor abstractd. 2.2 Dploymnt Modls Cloud computing srvics can b dployd through four dploymnts modls namly; privat, community, public, and hybrid (Figur 1). a. Privat Cloud. Cloud Computing Govrnanc Cloud computing govrnanc is anothr challng that facs organizations that want to adopt cloud computing. Traditionally, most IT organizations govrn th fiv tchnology layrs shown in Figur 2. Th two on-prmiss modls indicat that IT has total control and rsponsibility for all fiv tchnology layrs. Howvr, as w mov from IaaS to PaaS to SaaS, th IT organization s lvl of control diminishs as that of CSP incrass. Although control incrass for th CSP, rsponsibility rmains with th IT organization. It is critical for IT organizations to dvlop strong monitoring framwos ovr th SPI (SaaS, PaaS and IaaS) dlivry modl to nsur that thir srvic lvls and contractual obligations ar mt [11]. On Prmis VM Srvr Ntwo On Prmis (host d) VM Srvr Ntwo IaaS PaaS SaaS VM Srvr Ntwo Srvic s Srvr Ntwo Srvic s Srvr Ntwo Organization has Organization shars Vndor has control control with vndor control Fig 2: Cloud computing govrnanc structur of IT organizations [11] In privat cloud (or intrnal cloud), th infrastructur is opratd solly for an organization. It may b managd by th organization or a third party and may xist on prmis or off prmis. b. Public Cloud Th public cloud (or xtrnal cloud) infrastructur is mad availabl to th gnral public or a larg industry group and is ownd by an organization slling cloud srvics. A public cloud is hostd, opratd, and managd by a thirdparty vndor from on or mor data cntrs [11]. c. Community Cloud Community cloud infrastructur is shard by svral organizations and supports a spcific community that has shard concrns such as mission, scurity rquirmnts, policy, and complianc considrations. It may b managd by th organizations or a third party and may xist on prmis or off prmis. d. Hybrid Cloud Th hybrid cloud is a composition of two or mor clouds (privat, community, or public) that rmain uniqu ntitis but ar bound togthr by standardizd or propritary tchnology that nabls data and application portability [5]. 3. CLOUD ISSUES IN AFRICA Th cost-ffctivnss offrd by cloud computing has lad to a growth in cloud intrst, but data scurity rmains th main concrn. Organizations hav adaptd an approach of migrating low risk businss procsss, until such 1168

4 Journal of Emrging Trnds in Computing and Information Scincs CIS Journal. All rights rsrvd. tim th cloud is considrd saf. This is dspit th fact that th cloud is mor scur than most in-hous ntwos. Sinc CSPs put scurity in th forfront bcaus it s th main comptitiv advantag and a barrir to cloud computing growth [12]. Capobianco [13] alludd that by dfinition, mobil dvics that accss th intrnt ar prforming mobil cloud computing, sinc handsts nd to borrow storag and computing powr from th cloud bcaus of thir limitd rsourcs or bcaus it maks mor sns. Accssing data in th cloud from mobil dvics is bcoming a basic nd. Thr ar succssful initiativs that ar using mobil cloud srvics such as M-Psa an M-Banking srvic. M-Psa (Swahili for M-Mony) mony transfr srvic was first a succss in Knya [14] and now has bn launchd in othr countris lik South Africa, Tanzania and Afghanistan. Othr applications ar in M-Halth, M-Agricultur, and M- Education. Thr a numbr of barrirs for cloud computing adoption, Mathr t al. [11] idntifid th following; scurity, privacy, connctivity and opn accss, rliability, introprability, indpndnc from CSPs, conomic valu, IT govrnanc, changs in th IT organization, and political issus du to global boundaris. Blow w discuss dvloping conomis problms whn adopting cloud computing, spcially for small businsss. 3.1 Infrastructur Most rural communitis in dvloping conomis lack basic infrastructur such as roads, tlcommunications, lctricity, and watr [15]. Ths infrastructurs ar th backbon of any dvlopmnt initiativs. This is not hlping in th fight to bridg th digital divid. Th absnc of such infrastructur lads to th unavailability of intrnt infrastructur and scalating costs of such srvics and th cost of dvics to accss intrnt. 3.2 Dvics Most housholds in dvloping countris do not possss a prsonal computr and thy rly on mobil dvics to accss th intrnt. Mobil srvic providrs, in South Africa for instanc, hav rolld mor advancd 3G ntwo covrag in all of thir accss aras, with th mobil ntwos bringing intrnt accss to many aras outsid of th main citis for th first tim [16]. This provids th backbon for launching a widr rang of srvics through mobil dvics,.g. M-Psa. Howvr, for SMMEs to maximiz cloud computing bnfits, srvics should not b limitd to thos only availabl through mobil dvics but xtnd to computrs. This is tru for srvics offrd by IaaS for instanc, wr appropriat dvics might b prsonal computrs not only mobil dvics, hnc th nd to provid ths dvics and connctivity capacity. 3.3 Intrnt Covrag Intrnt courag in dvloping conomis is still a challng du to lack of infrastructur, in this cas tlphon ntwo covrag, for dial-up intrnt, which dos not covr most of th undr dvlopd communitis such as rural aras [17]. Intrnt World Stats [18] stats that, Africa has 15% of th world population but it accounts for 5.7% of intrnt usrs in th world. According to [19] lack of infrastructur in Africa has rsultd in low bandwidth and high costs. On 23 July 2009 th 17,000km SEACOM undrsa fibr-optic cabl wnt liv; it provids broadband connctivity to a numbr of African countris [20]. In th mantim intrnt cafés ar th primary mans of accssing intrnt in ths undr dvlopd communitis and thy ar playing a significant rol in bridging th digital divid. 3.4 Physical Location of Data Major CSPs ar ovrsas companis such as, Googl, Amazon, and Microsoft. Hnc th infrastructur is usually not physically locatd in th prmiss of th consumr, lt alon th sam country, in cas of most dvloping conomis. Hnc thr is a lack of control of an organization s assts. First of all, cloud computing rquirs a highr bandwidth intrnt to b abl to accss Europ or USA srvrs. Scondly, in th South African contxt, thr might also b xchang control implications for -commrc transactions. Thirdly, IT xpnditur may mov from capital xpnditur to oprating xpnditur on th balanc sht, which obviously changs th tax implications. 4. SECURITY IN THE CLOUD Scurity in th cloud has bn a thorny issu sinc th introduction of th concpt, a joint survy by IEEE/Cloud Scurity Allianc (CSA) in 2010 indicatd that th nd for cloud computing scurity standards is important and urgnt and it s hindring growth of cloud computing. Armbrust t al. [7] also idntifid availability of th srvic or businss continuity as th numbr on obstacl to growth of cloud computing. Thy also sightd data confidntiality and audit ability as th third obstacl, this is dspit companis ntrusting snsitiv srvics such as mail and payroll to xtrnal providrs. Th loss of data and brach of privacy in th cloud can caus major disruption in th businss oprations of an organization. This is vn wors in cas of small organizations that could not afford altrnativ masurs such as maintaining lgacy systms in cas of cloud failur. Subashini and Kavitha [2] highlightd scurity issus that aris on ach layr of th cloud computing nvironmnt as illustratd in Figur 3. Dploymnt modls ar mor concrnd with data storag scurity and for dlivry modls data transmission scurity is th main concrn. In addition, scurity nds varis for ach dploymnt or dlivry modl. 1169

5 Journal of Emrging Trnds in Computing and Information Scincs CIS Journal. All rights rsrvd. Cloud computing is facd with a numbr of challngs such as; scur data storag, high-spd accss to th intrnt, and standardization. Privacy is still on ara of scurity that concrns CSPs [21] and mor so for th consumrs and it is a thrat to th succss of cloud computing. Whn considring how to scur public vrsus privat cloud architcturs, th scurity concrns ar mor diffrnt than common. For instanc, if a cloud is privat, intrnal on a customr prmiss, and ownd and managd xclusivly by th organization utilizing it, th principls in scuring it vary gratly from thos of a public cloud hostd xtrnally by a third party. A privat cloud dosn t hav th data confidntiality and lgality concrns that a public cloud might [8]. 4.1 SaaS Scurity In SaaS scurity, th burdn of scurity lis with th cloud providr. This is du to th dgr of abstraction, with th SaaS modl having a high dgr of intgratd functionality with minimal customr control or xtnsibility [8]. Most ntrpriss ar still uncomfortabl with th SaaS modl du to lack of visibility about th way thir data is stord and scurd [2]. Consquntly, th risk of loss of data and brach of privacy is high in SaaS for organizations. Subashini and Kavitha [2] idntifid ky scurity lmnts dirctly rlatd to SaaS, som of thm ar; data scurity, ntwo scurity, data locality, data intgrity, data sgrgation and data accss. 4.2 PaaS Scurity Th PaaS modl offrs gratr xtnsibility and gratr customr control but fwr highr-lvl faturs [8]. Th consumrs ar givn som control to build applications on top of th platform but still any scurity blow th application lvl will still b in th scop of th CSP. Extnsibility mans lss complt built-in capabilitis that xtnds to scurity faturs, but thr is mor flxibility to layr on additional scurity [2]. 4.4 Scurity and Privacy Issus This sction looks at scurity and privacy issus of cloud computing and how thy affct small businsss in dvloping conomis. All scurity issus ar mostly influncd by th fact that th CSPs ar not locally availabl, hnc th lack of spcific guarants and assurancs mak organizations hsitant to adopt th cloud and trust third partis. Scurity fars rang from th loss of srvic availability to privacy brach at data cntrs and how all this affct th final SLA to b signd by both partis. a. Srvic Availability Th cloud srvic can b unavailabl du to a numbr of rasons; ths may includ scurity brachs at th physical location of data cntrs, failur of quipmnt at data cntrs, consumr sit quipmnt failur, connctivity failur this is a major issu in Africa du to distancs btwn th providr s quipmnt and consumr sit. It is mad wors by th lack of rliabl intrnt connctivity in dvloping conomis, sinc cloud computing rlis havily on ntwo connctivity. Th pay-as-you-us modl at last dos not rquir th consumrs to pay whn th srvic way unavailabl. Ultimatly, masurs nd to b in plac to manag not only risk of tmporary srvic unavailability but also thos situations whn a CSP suddnly and unxpctdly stops dlivring srvics. Rputabl sits lik Googl, Amazon, and Microsoft hav bn known to hav bn down and unabl to provid srvics for som tim. Th othr issu to b considrd is that in moving srvics to th cloud, th organization or individual no longr rtains dirct accss and control [21]. In Octobr 2011 Rsarch in Motion s Blackbrry ntwo srvic was unavailabl for days to usrs across th glob, causing a major backlog in thir mssaging srvic [22]. Thrfor, businss must hav altrnativ mans to dal with such failur if it affcts businss procsss. b. Idntity Managmnt 4.3 IaaS Scurity Du to rlativly lowr dgr of abstraction, IaaS offrs gratr customr control ovr scurity than do PaaS or SaaS, as long as thr is no scurity hol in th virtualization managr. This is mainly bcaus th customr has lss control ovr th IT organization as w mov from IaaS to SaaS. IaaS scurity issus ar basd on th cloud dploymnt modl through which it is bing dlivrd. For instanc, public cloud poss th major risk whras privat cloud sms to hav lssr impact. Physical scurity of infrastructur and disastr managmnt if any damag is incurrd to th infrastructur is of utmost importanc in IaaS [2]. Ovr and abov th smooth availability of th srvic, thr is a nd to hav a rliabl idntity managmnt to allow accurat pricing of cloud srvics usag. Idntity thft is on th incras, hnc cloud consumrs nd to b sur that rliabl vrification mchanisms ar in plac to vrify that popl ar who thy say thy ar and avoid th risk of paying for srvic consumption that was don by an intrudr. c. Data and lication Scurity In cloud computing thr is a nd of multipl layrs of scurity to nsur consumr comfort. Scurity nd to applid from th infrastructur layr (hardwar, oprating systm and storag), th ntwo layr for data transmission and packag applications must mak sur all componnts of 1170

6 Journal of Emrging Trnds in Computing and Information Scincs CIS Journal. All rights rsrvd. th final offring to th consumr has no scurity hols. Tsting nd to b don to assur oprability in diffrnt nvironmnts and scnarios, such as, variabl ntwos with low bandwidth. This will ultimatly allow th provision of binding spcific guarants in th SLAs. d. Privacy Th consumr s data nd to b protctd from accss by th providr s othr consumrs, as this might jopardiz consumrs comptitiv advantags ovr th othr. Guarants ar also ndd to mak sur that th providr will not us consumrs data for any unintndd purposs. Whn srvics ar offrd by providrs from a diffrnt country, thr is th risk of an organization s data bing confiscatd by th providr s authoritis whn th rgulations of that country hav bn violatd. Hnc th consumr nds to trust th providr to nsur a woabl trust rlationship. At th cntr of privacy is th issu of control, consumrs would prfr on prmis st up whr th organization has control. Unfortunatly, this cannot b achivd for all consumrs, spcially small businsss, bcaus it would incras th oprational cost for th providrs. Thrfor consumrs nd to trust th providr to kp saf all snsitiv data according to agrd guidlins.. Srvic Lvl Agrmnt Ngotiation Th procss of ngotiating th SLA is also a caus of concrn, sinc it always rsults in a compromis btwn th nds and dmands of both th providr and consumr. Som quality of srvic (QoS) aspcts that ar part of th SLA ar difficult to nforc and monitor [23] and changs may b causd by xtrnal circumstancs. For instanc, mtrics lik rspons tim and throughput might b affctd by ntwo connctivity that is controlld by third partis. Patl t al. [24] highlightd th nd for a clar and formal mthodology to handl th dynamic natur of cloud computing SLAs. Ultimatly, th risk of scurity and privacy brachs plays a rol in SLA ngotiation, so dos th rliability of th ntwo connctivity. 5. CONCLUSION modls ar adoptd, ar th ky risks causing local businss to tak a guardd approachd to cloud. Cloud providrs nd to guarant som aspcts of scurity in th SLAs for organizations to b mor comfortabl in srvic consumption. Srvic availability and businss continuity ar th major concrns of businsss in cas of scurity and privacy brachs. Small businsss in dvloping conomis nd to tak sriously th scurity issus in cloud computing whn planning cloud migration and sufficint provisions must b in plac to continu with businss oprations should thr b a failur in th cloud srvics infrastructur. REFERENCES [1] M. B. Al Brry, R. Cassim, A. Kspr, B. Rajaratnam and D. E. van Svntr, "Th conomics of SMMEs in South Africa," [2] S. Subashini and V. Kavitha, "A survy on scurity issus in srvic dlivry modls of cloud computing," Journal of Ntwo and Computr lications, vol. 34, pp. 1-11, [4] R. Buyya, C. S. Yo, S. Vnugopal, J. Brobrg and I. Brandic, "Cloud computing and mrging IT platforms: Vision, hyp, and rality for dlivring computing as th 5th utility," Futur Gnration Comput. Syst., vol. 25, pp , [5] P. Mll and T. Granc, "Th NIST dfinition of cloud computing(draft)," National Institut of Standards and Tchnology, [6] B. Furht, "Cloud computing fundamntals," in Handbook of Cloud Computing, B. Furht and A. Escalant, Eds. USA: Springr, 2010,. Cloud computing offrs major bnfits, vn if som aras ar caus of concrn but SMMEs and start-ups will ultimatly bnfit from using th cloud. For small organizations to considr adopting th cloud thr is a nd to addrss th infrastructur problm which to a largr xtnt is th rsponsibility of govrnmnt. Considring th contributions mad by small informal businss sctors, dvloping conomis govrnmnts can bnfit significantly through unmploymnt rat rduction and incrasd tax rvnu. Th main inhibitor of cloud computing worldwid is scurity and in Africa this concrn is th numbr on barrir whn all infrastructur concrns ar addrssd. Th loss of control ovr infrastructur, srvics, and data, onc cloud [7] M. Armbrust, A. Fox, R. Griffith, A. D. Josph, R. Katz, A. Konwinski, G. L, D. Pattrson, A. Rabkin and I. Stoica, "A viw of cloud computing," Commun ACM, vol. 53, pp , [8] V. J. R. Winklr, Scuring th Cloud: Cloud Computr Scurity Tchniqus and Tactics. USA: Elsvir Scinc, [3] R. Bakshi and S. Hmachandran, "Transformativ Bnfits Driving Companis to Cloud Computing," Rtrivd 19 July 2012, from [9] CSA. "Cloud Scurity Allianc ScaaS: Dfind catgoris of srvic 2011, Rtrivd 19 July 2012, from

7 Journal of Emrging Trnds in Computing and Information Scincs CIS Journal. All rights rsrvd. [10] Yank Survy, "Th Anywhr Entrpris: 2010 U.S. Cloud Computing FastViw Survy," Rtrivd 11 Novmbr 2011, from s/ html. [11] T. Mathr, S. Kumaraswamy and S. Latif, Cloud Scurity and Privacy: An Entrpris Prspctiv on Risks and Complianc. O'Rilly Mdia, Inc., [12] Dloitt, "Cloud Computing in a South African businss contxt," Rtrivd 19 July 2012, from srlass/ fc8210vgnvcm100000ba42f0 0aRCRD.htm. [13] F. Capobianco, "Fiv Rasons To Car About Mobil Cloud Computing," Intrnational Fr and Opn Sourc Softwar Law Rviw, vol. 1, pp , [17] J. Jnsn and D. Richardson, "Wirlss wavs to lssn th gaps in rural tlcommunication covrag in Africa, Rtrivd 19 July 2012, from [18] IntrntWorldStats, "Intrnt Usag Statistics for Africa," Rtrivd 19 July 2012, from [19] A. Twinomugisha, "Why Ar African Intrnt Accss Prics Still High?" Rtrivd 19 July 2012, from [20] BBC, "East Africa gts high-spd wb," Rtrivd 19 July 2012, from [21] R. Bristow, T. Dodds, R. Northam and L. Plugg, "Cloud Computing and th Powr to Choos," EDUCAUSE Rviw, vol. 45, pp. 14, [14] N. Hughs and S. Loni, "M-PESA: mobil mony for th unbankd turning cllphons into 24-hour tllrs in Knya," Innovations: Tchnology, Govrnanc, Globalization, vol. 2, pp , [15] C. Kauffmann, "Engaging th Privat Sctor in African Infrastructur," [16] P. Lang, "Africa - Intrnt, Broadband and Digital Mdia Statistics," Rtrivd 19 July 2012, from Broadband-and-Digital-Mdia-Statistics-tablsonly.html. [22] Nw Yo Tims, "With Apologis, Officials Say BlackBrry Srvic Is Rstord," Rtrivd 19 July 2012, from [23] A. Kllr and H. Ludwig, "Th WSLA framwo: Spcifying and monitoring srvic lvl agrmnts for wb srvics," Journal of Ntwo and Systms Managmnt, vol. 11, pp , [24] P. Patl, A. Ranabahu and A. Shth, "Srvic lvl agrmnt in cloud computing," in Cloud Woshops at OOPSLA,