Title
A Multi-layer and MultiTenant Cloud Assurance Evaluation Methodology
Abstract
Data with high security requirements is being processed and stored with increasing frequency in the Cloud. To guarantee that the data is being dealt in a secure manner we investigate the applicability of Assurance methodologies. In a typical Cloud environment the setup of multiple layers and different stakeholders determines security properties of individual components that are used to compose Cloud applications. We present a methodology adapted from Common Criteria for aggregating information reflecting the security properties of individual constituent components of Cloud applications. This aggregated information is used to categorise overall application security in terms of Assurance Levels and to provide a continuous assurance level evaluation. It gives the service owner an overview of the security of his service, without requiring detailed manual analyses of log files.
Year
DOI
Venue
2014
10.1109/CloudCom.2014.85
CloudCom
Keywords
Field
DocType
mathematical model,cloud computing,security,vectors
Application security,Computer science,Software security assurance,Security service,Cloud computing security,Common Criteria,Cloud testing,Computer security model,Cloud computing,Distributed computing
Conference
ISSN
Citations 
PageRank 
2330-2194
5
0.58
References 
Authors
3
7
Name
Order
Citations
PageRank
Aleksandar Hudic1436.03
Markus Tauber22111.07
Thomas Lorünser3151.22
Maria Krotsiani4132.83
George Spanoudakis51057108.40
Andreas Mauthe6102.27
Edgar Weippl7856105.02