After decades of engineering development, Internet connectivity has become a commodity product in many countries. The rapid adoption of Web 2.0 technologies such as blogging, online media sharing, social networking, and web-based collaboration has moved enormous quantities of data onto Internet servers. Along with this migration to web services has come a push for companies to adopt utility computing. Much like traditional infrastructure utilities, such as gas and electricity, utility or cloud computing seeks to abstract the supply of computing services from concerns of everyday users. Today, security and privacy concerns may represent the biggest hazards to moving services to external clouds. With cloud computing, data is stored and delivered over the Internet. The owner of the data does not control, and typically does not even know, the location of the data. There is a real chance that the owner's data could rest on the same resources as a competitor's application and data. In this paper I focus on how to secure cloud computing in terms of security and privacy