Security and Privacy Challenges in Cloud Computing: A Study on Workflow Management in Multi-Cloud Environments

Abstract

Cloud computing has revolutionized IT infrastructure by offering scalable, on-demand and cost-effective resources, but it also introduces significant security and privacy challenges. The open and shared nature of cloud platforms makes them vulnerable to threats such as data leakage, unauthorized access, cloning and service disruption. These issues become even more complex in multi-cloud environments, where data and workflows span across multiple service providers. This study investigates the main security challenges in multi-cloud computing, evaluates current workflow security solutions and identifies research gaps in monitoring, analysis and adaptation phases of Workflow Management Systems (WfMSs). A hybrid methodology combining Systematic Literature Review (SLR) and Systematic Mapping Review (SMR) is employed to assess the state of research between 2010 and 2021. Findings reveal that while approaches such as data obfuscation, multi-level encryption, diversification and workflow logic obfuscation provide partial protection, gaps remain in ensuring holistic workflow security, especially in adaptation and predictive monitoring. The paper proposes recommendations for developing security-aware workflow models, adaptive monitoring frameworks and improved service selection mechanisms that balance confidentiality, integrity, availability, cost and performance.