QUIRC: A quantitative impact and risk assessment framework for cloud security

Proceedings - 2010 IEEE 3rd International Conference on Cloud Computing, CLOUD 2010

Volumn , Issue , 2010, Pages 280-288

  Saripalli, Prasad ^a   Walters, Ben ^a  

^a Runaware Inc   (United States)

Author keywords

CIAMAU; Cloud computing; Delphi method; Impact; Risk; Risk Asessment; Security; STRIDE

Indexed keywords

CIAMAU; CLOUD COMPUTING; DELPHI METHOD; IMPACT; SECURITY; STRIDE;

DECISION MAKING; GRID COMPUTING; SECURITY OF DATA;

RISK ASSESSMENT;

EID: 77957948993     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CLOUD.2010.22     Document Type: Conference Paper

References (25)

1. Armbrust, M., Fox, A., Griffith, R., Joseph, A., Katz, R., Konwinski, A., Lee, G., Patterson, D., Rabkin, A., Stoica, I. and Zaharia, M. 2009. Above the Clouds: A Berkeley View of Cloud Computing. Technical Report. University of California at Berkeley.
2. IDC Cloud Computing 2010 - An IDC Update, Frank Gens, Robert P Mahowald, Richard L Villars, Sep 2009 - Doc # TB20090929, 2009.
3. Cloud Security Alliance, Security Guidance for Critical Areas of Focus in Cloud Computing, April 2009, http://www.cloudsecurityalliance.org/guidance/ csaguide.pdf.
4. IDC Cloud Computing Survey http://blogs.idc.com/ie/?p=210 accessed on January 25, 2010.
5. th, 2010.).
6. Saripalli, K.P., Oldenberg, C., Walters, B. and Radheshyam, N. (2010) A Cloud Architecture and Platform for Scientific Computing as a Service (SCaaS) ACM CloudScience2010 (in review).
7. The Top Cyber Security Risks, SAN Institute Report (Sept. 2009) http://www.sans.org/top-cyber-security-risks/accessed on January 18, 2010.
8. Federal Information Processing Standards Pub 199: Standards for Security Categorization of Federal Information and Information Systems http://csrc.nist.gov/publications/fips/fips199/FIPS-PUB-199-final.pdf accessed on Jan 7, 2010.
9. Chen, Y., Paxson, V. and Katz, R. H. (2010) What's New About Cloud Computing Security? University of California, Berkeley Report No. UCB/EECS-2010-5 January 20, 2010 http://www.eecs.berkeley.edu/Pubs/TechRpts/ 2010/EECS-2010-5.pdf accesed on February 18, 2010.
10. Poore, R. S. (1999) International Information Security Foundation, Generally Accepted System Security Principles Release for Public Comment. www.infosectoday.com/Articles/gassp.pdf accessed on January 11, 2010.
11. Elahi, G. and Yu, E. A Goal Oriented Approach for Modeling and Analyzing Security Trade-Offs; Lecture Notes in Computer Science Springer Berlin/Heidelberg Volume 4801/2007.
12. Ristenpart, T., Tromer, E., Hovav Shacham, H. and Stefan Savage, S. (2009) Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds, CCS'09, Chicago, IL, USA.
13. OWASP Top 10 Web Security Vulnerabilities (2007) accessed on January 11, 2010 http://www.owasp.org/index.php/Top-10-2007.
14. Web2.0 http://www.net-security.org/article.php?id=949&p=4.
15. Gartner, Assessing the Security Risks of Cloud Computing, June 2008, http://www.gartner.com/DisplayDocument?id=685308.
16. Forum, J. Cloud Cube Model: Selecting Cloud Formations for Secure Collaboration, April 2009, http://www.opengroup.org/jericho/cloud-cube-model-v1. 0.pdf.
17. Saripalli, K.P., Mahasenan, N.M. and Cook, E.M., 2003. Risk and hazard assessment for projects involving the geological sequestration of CO2 In: Gale, J. and Y. Kaya (eds.) Sixth International Greenhouse Gas Control Conference, Kyoto, Japan, pp. 285-289. Elsevier Ltd. (2003).
18. Linstone, H.A. (1975). The Delphi Method: Techniques and Applications. Addison-Wesley.
19. RAND Corporation. (2007). A collection of RAND publications on the Delphi method. Accessed on Jan 15, 2010 from http://www.rand.org/pardee/pubs/ methodologies.html#delphi.
20. Stuter, L.M. (1996). The Delphi Technique: What is it?. Lynn's Educational and Research Network, March 1996. Retrieved from http://www.learnusa.com/transformation-process/acf001.htm.
21. Paul, C. L. A Modified Delphi Approach to a New Card Sorting Methodology J. Usability Studies Vol. 4, Issue 1, November 2008, pp. 7-30.
22. Teijlingen, E., Pitchfork, E., Bishop, C., & Russell, E. (2005). Delphi method and nominal group techniques in family planning and reproductive health research. Journal of Family Planning and Reproductive Health Care, 31(2) 132-135.
23. Paul, C.L. (2007). Investigation of Applying the Delphi Method to a New Card Sorting Technique. Information Architecture Institute, June 6, 2007. Accessed January 15, 2010, from http://iainstitute.org/news/000632.php.
24. Whitmore, M., Berman, A., & Chmielewski, C. (1997, March). Independent Verification and Validation of Complex User Interfaces: A Human Factors Approach (TP-3665). Houston, TX: Lockheed Martin Engineering & Science Services.
25. Nadeau, R., Cloutier, E., & Guay, J.H. (1993). New Evidence About the Existence of a Bandwagon Effect in the Opinion Formation Process. International Political Science Review, 4(2), 203-213.