Several new technologies such as the smart cities, the Internet of Things (IoT), and 5G Internet need services offered by cloud computing for processing and storing more information. Hence, the heterogeneity of the new companies that used the above-mentioned technologies will add many vulnerabilities and security concerns for the cloud paradigm. Presently, cloud computing involves every component such as end-user, networks, access management, and infrastructures. Without a lucid vision of the cloud infrastructure, security communities struggle with problems ranging from duplicating data to failing to identify security threats in a timely way, with loss of control about protection and data access to face regulatory compliance. With cloud computing becoming part of our everyday life and our digital computer environment, we look forward to rapid new development in the computational needs provided by cloud computing paradigms. In this paper, we first provide an architecture tutorial on cloud computing technology, including their essential characteristics, services models, deployment models, and cloud data center virtualization. Second, we provide the cloud computing security issues and frameworks, and through a comprehensive survey, we characterize and summarize the efforts made in the literature to find solutions to these security issues. Third, we categorize the various attacks in the cloud and privacy challenges. Fourth, we summarize the efforts made in the literature to the defense mechanisms and mitigation solution for security assessment. Finally, we discuss open issues in cloud security and propose some future directions.

智慧城市，物联网（IoT）和5G互联网等几种新技术需要云计算提供的服务来处理和存储更多信息。因此，使用上述技术的新公司的异质性将增加云范式的许多漏洞和安全隐患。当前，云计算涉及每个组件，例如最终用户，网络，访问管理和基础架构。如果没有对云基础架构的清晰了解，安全社区将面临许多问题，从复制数据到无法及时识别安全威胁，都失去了对保护和数据访问的控制权，无法面对法规遵从性。随着云计算成为我们日常生活和数字计算机环境的一部分，我们期待着云计算范例所提供的计算需求的快速发展。在本文中，我们首先提供有关云计算技术的体系结构教程，包括其基本特征，服务模型，部署模型和云数据中心虚拟化。其次，我们提供了云计算安全性问题和框架，并通过全面的调查来表征和总结文献中为找到这些安全性问题的解决方案而做出的努力。第三，我们对云中的各种攻击和隐私挑战进行了分类。第四，我们总结了文献中针对安全评估的防御机制和缓解解决方案所做的努力。最后，我们讨论了云安全中的开放性问题，并提出了一些未来的方向。