IT auditing to assure a secure cloud computing

Proceedings - 2010 6th World Congress on Services, Services-1 2010

Volumn , Issue , 2010, Pages 253-259

  Chen, Zhixiong ^a   Yoon, John ^a  

^a MERCY COLLEGE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CLOUD COMPUTING; CLOUD SERVICES; DATA FLOW; HOLISTIC APPROACH; NEW TECHNOLOGIES; STRATEGIC VALUES;

GRID COMPUTING; LAWS AND LEGISLATION;

INFORMATION TECHNOLOGY;

EID: 78049340512     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SERVICES.2010.118     Document Type: Conference Paper

References (21)

1. NIST Definition of Cloud Computing v15, accessed on 4/15/2010, http://csrc.nist.gov/groups/SNS/cloudcomputing/cloud-def-v15.doc.
2. Will Forrest, Clearing the Air on Cloud Computing, Discussion Document from McKinsey and Company, March 2009.
3. Luis M Vaquero, et al, A Breaks in the Clouds: Toward the Definitions, ACM SIGCOMM Computer Communication Review, V39 No1, January, 2009, pp 50-55.
4. open crowd cloud computing taxonomy, http://www.opencrowd.com/views/.
5. NIST Presentation on Effectively and Securely Using the Cloud Computing Paradigm v26, accessed on 4/15/2010, http://csrc.nist.gov/groups/SNS/ cloudcomputing/cloud-computing-v26.ppt.
6. FISMA: http://csrc.nist.gov/drivers/documents/FISMAfinal.pdf.
7. Gramm-Leach-Bliley Act (GLBA, the Financial Services Modernization Act), http://www.gpo.gov/fdsys/pkg/PLAW-106publ102/contentdetail.html.
8. HIPAA U.S. Department of Health & Human Services, Office of Civil Rights, HIPAA, http://www.hhs.gov/ocr/hipaa/privacy.html.
9. Sarbanes-Oxley Act 2002, U.S. Securities and Exchange Commission (effective July 30, 2002), http://www.sec.gov/about/laws/soa2002.pdf.
10. Payment Card Industry Data Security Standard, https://www. pcisecuritystandards.org/security-standards/pci-dss.shtml.
11. SAS 70 Audit: http://www.aicpa.org/download/members/div/auditstd/AU- 00324.PDF.
12. Security Guidance for Critical Areas of Focus in Cloud Computing V2.1, by Cloud Security Alliance, December 2009.
13. Open Security Architecture Group http://www.opensecurityarchitecture.org/ cms/library/patternlandscape/251-pattern-cloud-computing.
14. Gerard Briscoe, Alexandros Marinos: Digital Ecosystems in the Clouds: Towards Community Cloud Computing, IEEE Digital EcosystemS and Technologies DEST (2009), online access at http://arxiv.org/PS-cache/arxiv/pdf/0903/0903.0694v3. pdf.
15. Data is cited from several IBM presentations. For example the IEEE Services I (2009) keynote, Cloud Computing for the Enterprise by IBM Enterprise Initiative Vice President of Cloud Computing Enablement, Maria Azua. It can be found online "the Future of Learning" by IBM Education Industry director, Alex Kaplan at. www.wv.gov/education/summit/Documents/Kaplan.ppt.
16. IDE Enterprise Panel, August 2008, n = 244.
17. Coud Computing, the role of internal auditing, Ernst and Young, PPT presentation, October 8, 2009.
18. Rajkumar Buyyaa, Chee Shin Yeoa, Srikumar Venugopala, James Broberga, and Ivona Brandicc, Cloud computing and emerging IT platforms: Vision, hype, and reality for delivering computing as the 5th utility, Future Generation Computer Systems, Volume 25, Issue 6, June 2009, Pages 599-616.
19. Frank Gens, IDC, Cloud Computing in the Enterprise, From Enterprise IT in the Cloud Computing Era New IT Models for Business Growth & Innovation.
20. Michael Armbrust, et al, Above the Clouds: A Berkeley View of Cloud Computing, UC Berkeley Reliable Adaptive Distributed Systems Laboratory, Feb, 2009.
21. Mike Fratto, Cloud Control, InformationWeek, Reports, an 26, 2009, pp 31-36.