About PaaS security
Donghoon Kim, Henry E. Schaffer, Mladen Alan Vouk · International Journal of Cloud Computing · 2017
Platform as a service (PaaS) provides middleware resources to cloud customers. As demand for PaaS services increases, so do concerns about the security of PaaS. This paper discusses principal PaaS security and integrity requirements, and vulnerabilities and the corresponding countermeasures. We consider three core cloud elements - multi-tenancy, isolation, and virtualisation and how they relate to PaaS services and security trends and concerns such as user and resource isolation, side-channel vulnerabilities in multi-tenant environments, and protection of sensitive data and recommend a number of effective procedures which can help in providing security.