Pattern-based support for context establishment and asset identification of the ISO 27000 in the field of cloud computing

Proceedings of the 2011 6th International Conference on Availability, Reliability and Security, ARES 2011

Volumn , Issue , 2011, Pages 327-333

  Beckers, Kristian ^a   Schmidt, Holger ^a   Küster, Jan Christoph ^b   Faßbender, Stephan ^c  

^a UNIVERSITY OF DUISBURG ESSEN   (Germany)

^b Fraunhofer ISST ^*  (Germany)

^c TU DORTMUND UNIVERSITY   (Germany)

Author keywords

Cloud computing; Requirements engineering; Security standards

Indexed keywords

ASSET IDENTIFICATION; BUSINESS PROCESS; CLOUD DEVELOPMENT; CLOUD SYSTEMS; COMPUTING SYSTEM; CONTEXT ANALYSIS; IT APPLICATIONS; IT INFRASTRUCTURES; IT SYSTEM; ON-LINE BANKING; OPERATIONAL ENVIRONMENTS; SECURITY STANDARDS;

COMPUTER SYSTEMS; INFORMATION TECHNOLOGY; SECURITY OF DATA; STANDARDS; SYSTEMS ANALYSIS;

CLOUD COMPUTING;

EID: 80455140374     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2011.55     Document Type: Conference Paper

References (10)

1. ISO/IEC, "Information technology - security techniques -information security risk management," International Organization for Standardization (ISO) and International Electrotechnical Commission (IEC), ISO/IEC 27005, 2008.
2. M. Armbrust, A. Fox, R. Griffith, A. D. Joseph, R. H. Katz, A. Konwinski, G. Lee, D. A. Patterson, A. Rabkin, I. Stoica, and M. Zaharia, "Above the clouds: A Berkeley view of cloud computing," EECS Department, University of California, Berkeley, Tech. Rep., 2009.
3. P. Mell and T. Grance, "The NIST definition of cloud computing," Working Paper of the National Institute of Standards and Technology (NIST), 2009.
4. L. M. Vaquero, L. Rodero-Merino, J. Caceres, and M. Lindner, "A break in the clouds: Towards a cloud definition," Special Interest Group on Data Communication (SIGCOMM) Computer Communication Review, vol. 39, no. 1, pp. 50-55, 2008.
5. R. Buyya, R. Ranjan, and R. N. Calheiros, "Modeling and simulation of scalable cloud computing environments and the cloudsim toolkit: Challenges and opportunities," in Proceedings of the International Conference von High Performance Computing and Simulation (HPCS). IEEE Computer Society, 2009.
6. BSI, "IT-Grundschutz-Vorgehensweise," Bundesamt für Sicherheit in der Informationstechnik (BSI), BSI Standard 100-2, 2008.
7. H. Schmidt, "Threat- and risk-analysis during early security requirements engineering," in Proceedings of the International Conference on Availability, Reliability and Security (ARES). IEEE Computer Society, 2010, pp. 188-195.
8. N. Mayer, A. Rifaut, and E. Dubois, "Towards a risk-based security requirements engineering framework," in Proceedings of the International Workshop on Requirements Engineering: Foundation for Software Quality (REFSQ), 2005.
9. C. B. Haley, J. D. Moffett, R. Laney, and B. Nuseibeh, "A framework for security requirements engineering," in Proceedings of the International Workshop on Software Engineering for Secure Systems (SESS). ACM, 2006, pp. 35-42.
10. S. Fenz, G. Goluch, A. Ekelhart, B. Riedl, and E. Weippl, "Information security fortification by ontological mapping of the ISO/IEC 27001 standard," in Proceedings of the International Symposium on Dependable Computing. IEEE Computer Society, 2007, pp. 381-388.