Presenting a new taxonomy of database outsourcing threats with the passive defense approach

Observing the "principle of dispersion" is one of the principles of passive defense. This principle can also be applied to IT services. Database outsourcing in an organization can contribute to "the principle of dispersion" in data storage for that organization. Presenting a suitable classification of the challenges of outsourcing will contribute to the identification of appropriate strategies to mitigate vulnerability against hostile threats and actions. In this paper, through investigating the architecture of database outsourcing, a new category of security challenges facing data outsourcing is presented that will eliminate shortcomings of previous category. This new classification can be helpful in better directing the future research.