A.Kernel privilege breaking

B.File uploading vulnerability

C.SQL Injection

D.XSS exploit

A.for users who is using IAAS service, they should be responsible for their business system which is on top of cloud infrastructure

B.the damage caused by attacks leveraging security vulnerability in customers' application server should be charged to cloud service provider

C.cloud user should also take care of some of the hardware maintenance and operation work

D.cloud service provider should guarantee the security of all physical infrastructure