On-demand dynamic security for risk-based secure collaboration in clouds

Proceedings - 2010 IEEE 3rd International Conference on Cloud Computing, CLOUD 2010

Volumn , Issue , 2010, Pages 518-525

  Bertram, S ^a   Boniface, M ^b   Surridge, M ^b   Briscombe, N ^a   Hall May, M ^b  

^a UNIVERSITY OF SOUTHAMPTON   (United Kingdom)

^b QINETIQ   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

CLOUD COMPUTING; COLLABORATIVE BUSINESS PROCESS; COLLABORATIVE ENGINEERING; DYNAMIC SECURITY; IMPACT ASSESSMENTS; INDUSTRIAL ADOPTION; INTER-ENTERPRISE; MANAGEMENT TOOL; MODEL SECURITY; MULTI TENANTS; OPERATIONAL SECURITY; PROOF OF CONCEPT; RISK-BASED; SECURITY COMPLIANCE; SECURITY COUNTERMEASURES; SECURITY SERVICES; SECURITY STANDARDS; SECURITY THREATS; SEMANTIC SECURITY; SERVICE INFRASTRUCTURE; SERVICE ORIENTED; SERVICE POLICY;

CLOUDS; GRID COMPUTING; REGULATORY COMPLIANCE; RISK ANALYSIS; RISK MANAGEMENT; SEMANTIC WEB; WEB SERVICES;

SECURITY OF DATA;

EID: 77957948646     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CLOUD.2010.83     Document Type: Conference Paper

References (21)

1. Centre for Fluid Mechanical Simulation Core Programme (CFMS), [Online]. Available: http://www.cfms.org.uk [Accessed: Feb. 11, 2010].
2. M. Hall-May and M. Surridge, "Resilient Critical Infrastructure Management Using Service Oriented Architecture", CISIS 2010, The Fourth International Conference on Complex, Intelligent and Software Intensive Systems.
3. EuroControl, "Airport Collaborative Decision Making Implementation Manual, ", December 2008. [Online]. Available: http://www.eurocontrol.int. [Accessed: Jan. 10, 2010].
4. D. Nasaw, "Upcoming X-Men movie leaked online ahead of release" The Guardian, April 2, 2009. [Online]. Available: http://www.guardian.co.uk. [Accessed Jan. 10, 2010].
5. M.C. Lee, T. Chang," Linking knowledge management and innovation management in e-business" International Journal of Innovation and Learning, vol 4, no 2, pp. 145-159, 2007.
6. The American Institute of Certified Public Accountants," Service Organizations: Applying SAS No. 70, as Amended - AICPA Audit Guide ".
7. International Organisation for Standardization, "ISO/IEC 27001:2005, Information technology - Security techniques - Information security management systems - Requirements".
8. Health Insurance Portability and Accountability Act, "45 CFR Parts 160, 162, and 164 Health Insurance Reform: Security Standards; Final Rule", [Online]. Available: http://www.hhs.gov. [Accessed: Jan. 10, 2010].
9. Amazon, "Creating HIPAA-Compliant Medical Data Applications with Amazon Web Services", April 2009, [Online]. Available: http://www. amazonaws.com. [Accessed: Dec. 09, 2009].
10. Cloud Security Alliance, "Security Guidance for Critical Areas of Focus in Cloud Computing V2.1", December 2009, [Online]. Available: http://www.cloudsecurityalliance.org.[Accessed: Feb. 10, 2009].
11. OASIS, "eXtensible Access Control Markup Language (XACML)" V2.0, Feb 1 2005.
12. D. W. Chadwick and A. Otenko, "The PERMIS X.509 role based privilege management infrastructure" in Future Generation Computer Systems Vol 19, Issue 2, Feb 2003, pp 277-289.
13. OASIS, "WS-Policy", V1.2, Apr 25 2006.
14. Surridge, M., Payne, T. R., Taylor, S. J., Watkins, E. R., Leonard, T., Jacyno, M. and Ashri, R. (2006) Semantic Security in Service Oriented Environments. In: UK e-Science Programme All Hands Meeting 2006 (AHM2006).
15. F. den Braber, I. Hogganvik, M. S. Lund, K. Stølen and F. Vraalsen, "Model-based security analysis in seven steps - a guided tour to the CORAS method ", BT Technology Journal Vol 25, No 1, Jan 2007.
16. Ahsant, M., Surridge, M., Leonard, T. A., Krishna, A. and Mulmo, O. (2006) Dynamic Trust Federation in Grids. In: The 4th International Conference on Trust Management, 16 - 19 May 2006, Pisa, Tuscany, Italy, published as Trust Management, Lecture Notes in Computer Science Volume 3986/2006, Springer Berlin/Heidelberg, 2006. ISBN 978-3- 540-34295-3.
17. Briscombe, N.J., GoiIlau, P., Sheppard, T, and Watson, G., D3C: A Coherent, Socio-Technical Framework for Identifying, Modelling and Managing Risks in Coalition C2, International Command and Control Research and Technology Symposium, 2007.
18. Dynamic Service Provisioning Using GRIA SLAs, Boniface, M.J.; Phillips, S.C.; Sanchez-Macian, A.; Surridge, M., in proceedings of Non Functional Properties and Service Level Agreements in Service Oriented Computing Workshop (NFPSLA-SOC'07), September 17 2007, Vienna, Austria.
19. Eurostep, Share-A-Space, [Online] http://www.eurostep.com [Accessed: Feb. 11, 2010].
20. Microsoft, Windows Workflow Foundation, [Online]. Available: http://msdn.microsoft.com [Accessed: Feb. 11, 2010].
21. OASIS, "WS Notification", V1.3, Oct 1 2006.