Cloud Computing Synopsis and Recommendations Recommendations of the National Institute of Standards and Technology Lee Badger Tim Grance Robert Patt -Corner Jeff Voas Special Publication 800 -146 NIST Special Public ation 800 -146 Cloud Computing Synopsis and Recommendations Recommendations of the National Institute of Standards and Tec hnology Lee Badger Tim Grance Robert Patt -Corner Jeff Voas C O M P U T E R S E C U R I T Y Computer Security Divis ion Information Technology Laboratory National Institute of Standards and Technology Gaithersburg, MD 20899- 8930 May 2012 U.S. Department of Commerce John Bryson, Secretary National Institute of Standards and Technology Patrick D. Gallagher , Unde r Secretary of Commerce for Standards and Technology and Director CLOUD COMPUTING SYNOPSIS AND RECOMMENDATIONS ii Reports on Computer Systems Technology The Information Technology Laborator y (ITL) at the National Institute of Standards and Technology (NIST) promotes the U.S. economy and public welfare by providing tec hnical leadership for the nation’s measurement and standards infrastructure. ITL d evelops tests, test methods, reference data, proof of concept implementations, and technical analysis to advance the devel opment and productive use of information technology. ITL’s responsibilities include the development of management, a dministrative, technical, and physical standards and guideline s for the cost -effective security and privacy of other than national security -related information in Federal information sy stems. This Special Publication 800- series reports on ITL’s research, guidance, and outreach e fforts in computer security and its col laborative activities with industry, government, and ac ademic organizations. Certain commercial entities, equipment, or materials may be identified in this document in order to describe an experimental procedure or concept adequately. Such identification is not intended to imply recomme ndation or endorsement by the National Institute of Sta ndards and Technology, nor is it intended to imply that the entities, materials, or equipment are necessarily the best available for the pu rpose. National Institute of Standards and Technology Special Publication 800 -146 Natl. Inst. Stand. Technol. Spec. Publ. 800 -146, 81 pages (May 2012 ) CLOUD COMPUTING SYNOPSIS AND RECOMMENDATIONS iii Acknowledgments The authors, Lee Badger of the National Institute of Standards and Technology (NIST), Tim Grance, of the National Institute of St andards and Technology (NIST), Robert Patt -Corner of Global Tech, Inc., and Jeff Voas of the National Institute of Standards and Technology (NIST), wish to thank their colleagues who reviewed drafts of this document and contributed to its technical content . The authors gratefully acknowledge and appreciate the contributions from individuals and organizations whose comments improved the ov erall quality of this publication. Trademark Information All names are trademarks or registered trademarks of their resp ective owners. CLOUD COMPUTING SYNOPSIS AND RECOMMENDATIONS iv Table of Contents Executive Summary ................................................................................................................. 1 1. Introduction .................................................................................................................... 1-1 1.1 Authority .................................................................................................................1 -1 1.2 Purpose and Scope ................................................................................................1 -1 1.3 Audience ................................................................................................................1 -1 1.4 Document