Privacy and security in cloud computing- A review of various attacks and mitigation strategies

Abstract

Cloud computing has transformed the process and storage of data in terms of scalability, flexibility, and affordability. Nonetheless, its shared and distributed character brings up serious questions of privacy and security. The current review considers the recent events during 2020-25, the largest cloud-based attacks, their effect, and the mitigation techniques. It discusses the development of privacy-enhancing methods, such as homomorphic encryption, federated learning, and blockchain authentication, and security models, such as Zero Trust Architecture and ISO/IEC standards. Such issues as multi-cloud complexity, regulatory compliance, and performance trade-offs are also assessed during the study. Through the integration of the developments and the research gaps, the paper points to the future research directions that address the concept of AI-based threat detection, confidential computing, and post-quantum cryptography. Altogether, the review highlights the significance of combining privacy and security processes to obtain resilient, adaptive and trustworthy cloud infrastructures.