Towards a service lifecycle based methodology for risk assessment in cloud computing

Proceedings - IEEE 9th International Conference on Dependable, Autonomic and Secure Computing, DASC 2011

Volumn , Issue , 2011, Pages 449-456

  Kiran, Mariam ^a   Jiang, Ming ^a   Armstrong, Django J ^a   Djemame, Karim ^a  

^a UNIVERSITY OF LEEDS   (United Kingdom)

Author keywords

Cloud services; infrastructure provider; optimization; risk assessment; service provider

Indexed keywords

CLOUD SERVICES; COMPLEX ENVIRONMENTS; COST EFFECTIVE; ECO-EFFICIENCY; HIGH CONFIDENCE; INFRASTRUCTURE PROVIDER; INFRASTRUCTURE SERVICES; IT SERVICES; JOB EXECUTION; MITIGATION STRATEGY; RESEARCH AND DEVELOPMENT; RISK ASSESSMENT FRAMEWORK; RISK FACTORS; RISK IDENTIFICATION; SERVICE LIFECYCLE; SERVICE PROVIDER; SOFTWARE TOOLKITS;

CLOUDS; DISTRIBUTED DATABASE SYSTEMS; EMBEDDED SOFTWARE; GRID COMPUTING; LIFE CYCLE; OPTIMIZATION; RATING; RISK ASSESSMENT; RISK MANAGEMENT; WEB SERVICES;

CLOUD COMPUTING;

EID: 84856119966     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DASC.2011.89     Document Type: Conference Paper

References (17)

1. A. Morali and R. J. Wieringa, Risk-Based Confidentiality Requirements Specification for Outsourced IT Systems, Pgs: 199-208, Proceedings of the 18th IEEE International Requirements Engineering Conference, 2010, DOI 10.1109/RE.2010.30
2. C. S. Yeo and R. Buyya, Integrated Risk Analysis for a Commercial Computing Service in Utility Computing, Journal of Grid Computing, Vol 7,No.1,Pgs:1-24,ISSN:1570-7873,Springer,Germany,March 2009
3. Min Luo, Liang-Jie Zhang and Fengyun Lei, An Insurance Model for Guaranteeing Service Assurance, Integrity and QoS in Cloud Computing, Pgs: 584-591, Proceedings of 2010 IEEE International Conference on Web Services, DOI 10.1109/ICWS.2010.113
4. J. Oriol Fitó, Mario Maćas and Jordi Guitart, Towards Business-driven Risk Management for Cloud Computing, Pgs: 238-241, Proceedings of 2010 Int. Conf. on Network and Service Management
5. A. Juan Ferrer, F. Hernandez, J. Tordsson, E. Elmroth, C. Zsigri, R. Sirvent, J. Guitart, R.M. Badia, K. Djemame, W. Ziegler, T. Dimitrakos, S.K. Nair, G. Kousiouris, K. Konstanteli, T. Varvarigou, B. Hudzia, A. Kipp, S. Wesner, M. Corrales, N. Forgo, T. Sharif, and C. Sheridan, OPTIMIS: a Holistic Approach to Cloud Service Provisioning, Future Generation Computer Systems, 2011,DOI: 10.1016/j.future.2011.05.022
6. K. Djemame, I. Gourlay, J. Padgett, K. Voss, and O. Kao, Risk Management in Grids, In R. Buyya and K. Bubendorfer, eds, Market-Oriented Grid and Utility Computing, pgs 335-353. Wiley, 2009
7. J. A. Zachman, A Framework for Information Systems Architecture, IBM Systems Journal, Vol 26. No 3, 1987
8. P. Saripalli and B. Walters, QUIRC: A Quantitative Impact and Risk Assessment Framework for Cloud Security, Pgs:280-288, Proceedings of IEEE 3rd Int. Conference on Cloud Computing, 2010
9. X. Zhang, N. Wuwong, H. Li and X. Zhang, Information Security Risk Management Framework for the Cloud Computing Environments,Pgs:1328-1334, Proceedings of the 10th IEEE Int. Conference on Computer and Information Technology, 2010
10. DC Cloud Computing Survey 〈http://blogs.idc.com/ie/?p=210〉 12.02.2011
11. ENSIA Report on Cloud Computing Security Risk Assessment 〈http://www.enisa.europa.eu/act/rm/files/deliverables/Cloudcomputing- risk-assessment〉 12.02.2011
12. K. Djemame, J. Padgett, I. Gourlay, and D. Armstrong, Brokering of Risk-Aware Service Level Agreements in Grids, Concurrency and Computation: Practice and Experience, 2011
13. C. Carlsson,Risk Assessment for Grid Computing with Predictive Probabilities and Possibilistic Models,Proceedings of 5th International Workshop on Preferences and Decisions,Trento, Italy,April,2000
14. P. Mell and T. Grance, Effectively and Securely Using the Cloud Computing Paradigm (v0.25), NIST,2009
15. B. Grobauer, T. Walloschek, E. Stocker,Understanding Cloud-Computing Vulnerabilities,IEEE Security and Privacy,vol 99, Preprints,2010
16. W. Jansen, T. Grance, Draft NIST Special Publication,Guidelines on Security and Privacy in Public Cloud Computing,Computer Security, Jan2011
17. K. Djemame, D. Armstrong, M. Kiran and M. Jiang, A Risk Assessment Framework and Software Toolkit for Cloud Service Ecosystems,Cloud Computing 2011, pgs 119-129, Rome Italy