-on-contain-big-flaws.html 
 
 
RISK ANALYSIS 
CIANA: Authenticity, Integrity, 
Confidentiality 
STRIDE: Tampering with Data, 
Repudiation, Information Disclosure, 
Elevation of Privilege 
IS THREAT STILL RELEVANT? 
 
TOP THREAT RANKING
 
 
SERVICE MODEL 
 
IaaS 
PaaS 
SaaS 
RISK MATRIX 
 
 
 
 
 
 
Perceived Risk 
Actual Risk 
 
© 2013, Cloud Security Alliance.  All rights reserved. 
13 
 
 
CLOUD SECURITY ALLIANCE The Notorious Nine: Cloud Computing Top Threats in 2013 
 
 
 
 
 
 
CSA REFERENCE 
Domain 5