{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T18:29:06Z","timestamp":1778005746435,"version":"3.51.4"},"reference-count":44,"publisher":"MDPI AG","issue":"2","license":[{"start":{"date-parts":[[2012,5,8]],"date-time":"2012-05-08T00:00:00Z","timestamp":1336435200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/3.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>Cloud computing is a new paradigm that combines several computing concepts and technologies of the Internet creating a platform for more agile and cost-effective business applications and IT infrastructure. The adoption of Cloud computing has been increasing for some time and the maturity of the market is steadily growing. Security is the question most consistently raised as consumers look to move their data and applications to the cloud. We justify the importance and motivation of security in the migration of legacy systems and we carry out an analysis of different approaches related to security in migration processes to cloud with the aim of finding the needs, concerns, requirements, aspects, opportunities and benefits of security in the migration process of legacy systems.<\/jats:p>","DOI":"10.3390\/fi4020469","type":"journal-article","created":{"date-parts":[[2012,5,8]],"date-time":"2012-05-08T11:13:15Z","timestamp":1336475595000},"page":"469-487","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":46,"title":["Security Analysis in the Migration to Cloud Environments"],"prefix":"10.3390","volume":"4","author":[{"given":"David G.","family":"Rosado","sequence":"first","affiliation":[{"name":"GSyA Research Group, Department of Information Systems and Technologies, University of Castilla-La Mancha, Ciudad Real, 13170, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rafael","family":"G\u00f3mez","sequence":"additional","affiliation":[{"name":"Spanish Tax Agency, Madrid, 28046, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daniel","family":"Mellado","sequence":"additional","affiliation":[{"name":"Spanish Tax Agency, Madrid, 28046, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Eduardo","family":"Fern\u00e1ndez-Medina","sequence":"additional","affiliation":[{"name":"GSyA Research Group, Department of Information Systems and Technologies, University of Castilla-La Mancha, Ciudad Real, 13170, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2012,5,8]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Zhao, G., Liu, J., Tang, Y., Sun, W., Zhang, F., Ye, X., and Tang, N. (2009, January 1\u20134). Cloud Computing: A Statistics Aspect of Users. Proceedings of 1st International Conference on Cloud Computing (CloudCom), Beijing, China.","DOI":"10.1007\/978-3-642-10665-1_32"},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Zhang, S., Zhang, S., Chen, X., and Huo, X. (2010, January 22\u201324). Cloud Computing Research and Development Trend. Proceedings of Second International Conference on Future Networks, Sanya, Hainan, China.","DOI":"10.1109\/ICFN.2010.58"},{"key":"ref_3","unstructured":"(2009). Security Guidance for Critical Areas of Focus in Cloud Computing, Cloud Security Alliance. [Version 2.1]."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Marinos, A., and Briscoe, G. (2009, January 1\u20134). Community Cloud Computing. Proceedings of 1st International Conference on Cloud Computing (CloudCom), Beijing, China.","DOI":"10.1007\/978-3-642-10665-1_43"},{"key":"ref_5","unstructured":"Centre for the Protection of National Infrastructure Information Security Briefing 01\/2010. Available online:http:\/\/www.cpni.gov.uk\/Documents\/Publications\/2010\/2010007-ISB_cloud_computing.pdf."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Khalid, A. (2010, January 9\u201310). Cloud Computing: Applying Issues in Small Business. Proceedings of International Conference on Signal Acquisition and Processing, Bangalore, India.","DOI":"10.1109\/ICSAP.2010.78"},{"key":"ref_7","unstructured":"Rittinghouse, J.W., and Ransome, J.F. (2010). Cloud Computing Implementation, Management, and Security, CRC Press."},{"key":"ref_8","unstructured":"Gartner Home Page. Available online:http:\/\/www.gartner.com\/it\/page.jsp?id=1454221."},{"key":"ref_9","unstructured":"The NIST Definition of Cloud Computing. Available online:http:\/\/csrc.nist.gov\/publications\/nistpubs\/800-145\/SP800-145.pdf."},{"key":"ref_10","unstructured":"From Hype to Future. KPMG\u2019s 2010 Cloud Computing Survey. Available online:http:\/\/www.kpmg.com\/NL\/nl\/IssuesAndInsights\/ArticlesPublications\/Documents\/PDF\/IT%20Performance\/From_Hype_to_Future.pdf."},{"key":"ref_11","unstructured":"Cloud Computing: Benefits, Risks and recommendations for Information security. Available online:http:\/\/www.coe.int\/t\/dghl\/cooperation\/economiccrime\/cybercrime\/cy-activity-interface-2010\/presentations\/Outlook\/Udo%20Helmbrecht_ENISA_Cloud%20Computing_Outlook.pdf."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1016\/j.istr.2011.08.002","article-title":"Positive perspectives on cloud security","volume":"16","author":"Wilson","year":"2011","journal-title":"Inf. Secur. Tech.Rep."},{"key":"ref_13","unstructured":"Legacy Information System Migration: A Brief Review of Problems, Solutions and Research Issues. Available online:http:\/\/technologycostbestpractices.com\/index.php?view=article&id=1957&tmpl=component&print=1&page=&option=com_content."},{"key":"ref_14","unstructured":"A Survey of Research into Legacy System Migration. Available online:https:\/\/www.scss.tcd.ie\/publications\/tech-reports\/reports.97\/TCD-CS-1997-01.pdf."},{"key":"ref_15","unstructured":"Wu, B., Lawless, D., Bisbal, J., Grimson, J., Wade, V., O\u2019Sullivan, D., and Richardson, R. (1997, January 12\u201314). Legacy System Migration: A Legacy Data Migration Engine. Proceedings of 17th International Database Conference (DATASEM\u201997), Brno, Czech Republic."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Ward, C., Aravamudan, N., Bhattacharya, K., Cheng, K., Filepp, R., Kearney, R., Peterson, B., Shwartz, L., and Young, C.C. (2010, January 5\u201310). Workload Migration into Clouds\u2014Challenges, Experiences, Opportunities. Proceedings of IEEE 3rd International Conference on Cloud Computing, Miami, Florida.","DOI":"10.1109\/CLOUD.2010.84"},{"key":"ref_17","unstructured":"Ahronovitz, M., Amrhein, D., Anderson, P., de Andrade, A., Armstrong, J., Arasan, B.E., Bartlett, J., Bruklis, R., Cameron, K., and Carlson, M. Available online:http:\/\/socializedsoftware.com\/2010\/02\/17\/cloud-computing-use-cases\/."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.jnca.2010.07.006","article-title":"A survey on security issues in service delivery models of cloud computing","volume":"34","author":"Subashini","year":"2011","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_19","unstructured":"Velte, A.T., Toby, J., Velte, P.D., and Elsenpeter, R. (2010). Cloud Computing: A Practical Approach, McGraw-Hill."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Jansen, W., and Grance, T. (2011). Guidelines on Security and Privacy in Public Cloud Computing, National Institute of Standards and Technology.","DOI":"10.6028\/NIST.SP.800-144"},{"key":"ref_21","unstructured":"Public clouds, private clouds and your security. Available online:http:\/\/www.ibm.com\/ibm\/files\/Z702257B23536P19\/15PPCLOUDCOMPUTING_116KB.pdf."},{"key":"ref_22","unstructured":"Mather, T., Kumaraswamy, S., and Latif, S. (2009). Cloud Security and Privacy, O\u2019Reilly Media."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Yan, L., Rong, C., and Zhao, G. (2009, January 1\u20134). Strengthen Cloud Computing Security with Federal Identity Management Using Hierarchical Identity-Based Cryptography. Proceedings of 1st International Conference on Cloud Computing\u2014CloudCom\u201909, Beijing, China.","DOI":"10.1007\/978-3-642-10665-1_15"},{"key":"ref_24","unstructured":"Holland, R. (2011). Ten Steps to Successful Cloud Migration, Eagle Genomics Ltd."},{"key":"ref_25","unstructured":"Craig, R., Frazier, J., Jacknis, N., Murphy, S., Purcell, C., Spencer, P., and Stanley, J. (2009). Cloud Computing in the Public Sector: Public Manager\u2019s Guide to Evaluating and Adopting Cloud Computing, CISCO Systems, Inc."},{"key":"ref_26","unstructured":"Viswanathan, B. Understanding The Cloud Migration Process. Available online:http:\/\/www.cloudtweaks.com\/2012\/03\/understanding-the-cloud-migration-process\/."},{"key":"ref_27","unstructured":"Varia, J. Migrating your Existing Applications to the AWS Cloud. Available online:http:\/\/media.amazonwebservices.com\/CloudMigration-main.pdf."},{"key":"ref_28","unstructured":"Watson, R. Five Options for Migrating Applications to the Cloud. Available online:http:\/\/www.gartner.com\/it\/content\/1448700\/1448713\/november_17_5_options_cloud_migration_rwatson.pdf."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Smith, D. (2007, January 20\u201326). Migration of Legacy Assets to Service-Oriented Architecture Environment. Proceedings of International Conference on Software Engineering (ICSE), Minneapolis, MN, USA.","DOI":"10.1109\/ICSECOMPANION.2007.48"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Zhang, B., Bao, L., Zhou, R., Hu, S., and Chen, P. (2008, January 18\u201319). A Black-Box Strategy to Migrate GUI-Based Legacy Systems to Web Services. Proceedings of 4th IEEE International Symposium on Service-Oriented System Engineering, Jhongli, Taiwan.","DOI":"10.1109\/SOSE.2008.8"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Canfora, G., Fasolino, A.R., Frattolillo, G., and Tramontana, P. (2006, January 22\u201324). Migrating Interactive Legacy Systems to Web Services. Proceedings of 10th European Conference on Software Maintenance and Reeingineering, Bari, Italy.","DOI":"10.1109\/CSMR.2006.34"},{"key":"ref_32","unstructured":"Zhang, Z., and Yang, H. (December, January 30). Incubating Services in Legacy Systems for Architectural Migration. Proceedings of 11th Asia-Pacific Software Engineering Conference, Busan, Korea."},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Sarna, D.E.Y. (2011). Implementing and Developing Cloud Computing Applications, CRC Press.","DOI":"10.1201\/b10343"},{"key":"ref_34","unstructured":"Frey, S., and Hasselbring, W. (2010, January 3\u20135). Model-Based Migration of Legacy Software Systems into the Cloud: The CloudMIG Approach. Proceedings of 12th Workshop on Software-Reengineering of the GI-SRE, Bad Honnef, Germany."},{"key":"ref_35","unstructured":"Zhang, W., Berre, A.J., Roman, D., and Huru, H.A. (2009, January 25\u201329). Migrating legacy applications to the service Cloud. Orlando, Florida, USA."},{"key":"ref_36","unstructured":"Parastoo, M., J\u00f8rgen, B.A., Sadovykh, A., Barbier, F., and Benguria, G. (2010, January 15). Reuse and Migration of Legacy Systems to Interoperable Cloud Services-The REMICS Project. Proceedings of 4th Workshop on Modeling, Design, and Analysis for the Service Cloud (MDA4ServiceCloud2010), Paris, France."},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Hu, J., and Klein, A. (2009, January 12\u201314). A Benchmark of Transparent Data Encryption for Migration of Web Applications in the Cloud. Proceedings of 2009 Eighth IEEE International Conference on DependableAutonomic and Secure Computing, Chengdu, China.","DOI":"10.1109\/DASC.2009.85"},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Khajeh-Hosseini, A., Greenwood, D., and Sommerville, I. (2010, January 3\u201310). Cloud Migration: A Case Study of Migrating an Enterprise IT System to IaaS. Proceedings of 2010 IEEE 3rd International Conference on Cloud Computing, Miami, FL, USA.","DOI":"10.1109\/CLOUD.2010.37"},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Khajeh-Hosseini, A., Sommerville, I., Bogaerts, J., and Teregowda, P. (2011, January 4\u20139). Decision Support Tools for Cloud Migration in the Enterprise. Proceedings of 2011 IEEE 4th International Conference on Cloud Computing, Washinton, DC, USA.","DOI":"10.1109\/CLOUD.2011.59"},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Kaisler, S., and Money, W.H. (2011, January 4\u20137). Service Migration in a Cloud Architecture. Proceedings of 44th Hawaii International Conference on Systems Science (HICSS-44 2011), Kauai, HI, USA.","DOI":"10.1109\/HICSS.2011.371"},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Hao, W., Yen, I.-L., and Thuraisingham, B. (2009, January 20\u201324). Dynamic Service and Data Migration in the Clouds. Proceedings of the 33rd Annual IEEE International Computer Software and Applications Conference, Seattle, WA, USA.","DOI":"10.1109\/COMPSAC.2009.127"},{"key":"ref_42","unstructured":"Digital States at Risk!\u2014Modernizing Legacy Systems. Available online:http:\/\/www.nascio.org\/publications\/documents\/NASCIO-DigitalStatesAtRisk.pdf."},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1147\/JRD.2009.5429060","article-title":"Security for the cloud infrastructure: Trusted virtual data center implementation","volume":"53","author":"Berger","year":"2009","journal-title":"IBM J. Res. Dev."},{"key":"ref_44","unstructured":"Ertaul, L., and Singhal, S. (2010, January 12\u201315). Security Challenges in Cloud Computing. Proceedings of the 2010 International Conference on Security & Management, Las Vegas, NV, USA."}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/4\/2\/469\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T21:50:10Z","timestamp":1760219410000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/4\/2\/469"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,5,8]]},"references-count":44,"journal-issue":{"issue":"2","published-online":{"date-parts":[[2012,6]]}},"alternative-id":["fi4020469"],"URL":"https:\/\/doi.org\/10.3390\/fi4020469","relation":{},"ISSN":["1999-5903"],"issn-type":[{"value":"1999-5903","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,5,8]]}}}