Moving Legacy Software and FOSS to the Cloud, Securely

As more organizations consider the benefits of cloud adoption and use of legacy or freeand open source software (FOSS) to lower the cost of software engineering andinformation technology projects, the security implications of this model take center stage.Cloud is not a one-size-fits-all solution and any effort to adopt distributed data servicesmust integrate information assurance early in the project. Correspondingly, transitioninglegacy software or FOSS into a cloud environment has the added disadvantage ofpotentially injecting serious security challenges incurred when the code was originallydeveloped. This paper investigates existing methods, and proposes a practical approach,for mitigating risks associated with transition of legacy software and FOSS to the cloud.