Building a security aware cloud by extending internal control to cloud

Proceedings - 2011 10th International Symposium on Autonomous Decentralized Systems, ISADS 2011

Volumn , Issue , 2011, Pages 323-326

  Sato, Hiroyuki ^a   Kanai, Atsushi ^b   Tanimoto, Shigeaki ^c  

^a UNIVERSITY OF TOKYO   (Japan)

^b HOSEI UNIVERSITY   (Japan)

^c CHIBA INSTITUTE OF TECHNOLOGY   (Japan)

Author keywords

Cloud; IAM; Internal control; Key management; Security; Trust model

Indexed keywords

IAM; INTERNAL CONTROL; KEY MANAGEMENT; SECURITY; TRUST MODEL;

CRITICAL INFRASTRUCTURES; FINANCE; INNOVATION; QUALITY OF SERVICE;

QUALITY CONTROL;

EID: 79955718012     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISADS.2011.48     Document Type: Conference Paper

References (22)

1. Amazon: Amazon Web Services, http://aws.amazon.com/
2. Burr, W., Dodson, W., Polk, W., "Electronic Authentication Guidelines," NIST SP800-63, 2006.
3. Armbrust, M., Fox, A., Griffith, R., Joseph, A.D., Katz, R.H., Konwinski A., Lee, G., Patterson, D.A., Rabkin, A., Stoica, I., Zaharia, M., "Above the Clouds: A Berkeley View of Cloud Computing," http://www.eecs.berkeley. edu/Pubs/TechRpts/2009/EECS-2009-28.html, 2009.
4. Chokbani, S., Ford, W., Sabett, R., Merrill, C., Wu, S., "Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework," RFC 3647, 2003.
5. Cloud Security Alliance, http://www.cloudsecurityalliance.org/
6. Cloud Security Alliance, Security Guidance for Critical Areas of Focus in Cloud Computing, http://www.cloudsecurityalliance.org/guidance.html
7. Google, Google Apps, http://www.google.com/apps/intl/en/business/index. html
8. IBM, The Benefits of Cloud Computing, ftp://ftp.software.ibm.com/common/ ssi/sa/wh/n/diw03004usen/DIW03004USEN.PDF, 2009.
9. IBM, IBM Point of View: Security and Cloud Computing, ftp://ftp.software.ibm.com/common/ssi/sa/wh/n/tiw14045usen/TIW14045USEN HR.PDF, 2009.
10. ISO, Information Security Management System, ISO/IEC 27001:2005, 2005.
11. Mell, P., Grance, T., "The NIST Definition of Cloud Computing," http://csrc.nist.gov/groups/SNS/cloud-computing/cloud-def-v15.doc, 2009.
12. Microsoft, Windows Azure Platform, http://www.microsoft.com/windowsazure/
13. Salesforce.com, Force.com, http://www.salesforce.com/platform/
14. OASIS, http://docs.oasis-open.org/security/saml/v2.0/
15. Ristenpart, T., Tromer, E., Shacham, H., Savage, S., "Hey, You, Get Off of My Cloud:Exploring Information Leakage in Third-Party Compute Clouds," ACM Computer and Communications Security 2009, 199-212, 2009.
16. Sato, H., "A Service Framework based on Grades of IdPs and SPs." Proc. Securiy and Management 2009, 379-385, 2009.
17. Sato, H, "N ±ε: Reflecting Local Risk Assessment in LoA," Proc. Information Security 2009 (LNCS 5871), 833-847, 2009.
18. Sato, H., Kanai, A., Tanimoto, S., "A Cloud Trust Model in Security Aware Cloud," Proc. 10th International Symposium of Applications and the Internet (SAINT 2010), 121-124, 2010.
19. Sun Micro, "Building Customer Trust in Cloud Computing with Transparent Security," Sun Micro White Paper, 2009.
20. https://apps.gov/cloud/advantage/main/start-page.do
21. http://cloud.manabing.jp/cloud-news/ing7048.html (In Japanese)
22. http://www.cloudsecurityalliance.org/trustedcloud.html