_treat/  
RISK ANALYSIS 
CIANA: Authenticity, Integrity, 
Confidentiality, Non-repudiation, 
Availability 
STRIDE: Tampering with Data, 
Repudiation, Information Disclosure, 
Elevation of Privilege, Spoofing 
Identity 
IS THREAT STILL RELEVANT? 
 
TOP THREAT RANKING
 
 
SERVICE MODEL 
 
IaaS 
PaaS 
SaaS 
RISK MATRIX 
 
 
 
 
 
 
Perceived Risk 
Actual Risk 
 
© 2013, Cloud Security Alliance.  All rights reserved. 
11 
 
 
CLOUD SECURITY ALLIANCE The Notorious Nine: Cloud Computing Top Threats in 2013 
2.   