Risk propagation of security SLAs in the cloud

2012 IEEE Globecom Workshops, GC Wkshps 2012

Volumn , Issue , 2012, Pages 730-735

  Hale, Matthew L ^a   Gamble, Rose ^a  

^a The University of Tulsa   (United States)

Author keywords

algorithms; audit; certification; cloud computing; matchmaking; quality of security service; risk; security; service level agreement; web services

Indexed keywords

AUDIT; CERTIFICATION; MATCHMAKING; QUALITY OF SECURITY SERVICES; SECURITY; SERVICE LEVEL AGREEMENTS;

ALGORITHMS; CLOUD COMPUTING; NETWORK ARCHITECTURE; QUALITY OF SERVICE; RISKS; WEB SERVICES;

DISTRIBUTED DATABASE SYSTEMS;

EID: 84875681664     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOMW.2012.6477665     Document Type: Conference Paper

References (21)

1. A. Minkiewicz, "Cloud Nine, are we there yet?," Journal of Software Technology, vol. 14, pp. 4-8, 2011.
2. NIST, "Special Publication 800-53 Recommended Security Controls for Federal Information Systems," 2009.
3. M. Hale, and R. Gamble, "SecAgreement: Advancing Security Risk Calculations in Cloud Services," 8th IEEE World Congress on Services, 2012.
4. A. Andrieux et al., Web Services Agreement Specification (WS-Agreement), 2007. ogf.org/documents/GFD.107.pdf
5. Pankesh Patel, Ajith Ranabahu, and A. Sheth, "Service Level Agreement in Cloud Computing," OOPSLA, 2009.
6. K. Clark et al., "Secure Monitoring of Service Level Agreements," Int'l Conf. Avail., Reliability & Security, 2010.
7. C. Chen, L. Li, and J. Wei, "AOP Based Trustable SLA Compliance Monitoring for Web Services," 7th Int'l Conf. on Quality Software, 2007.
8. R. Henning, "Security Service Level Agreements: Quantifiable Security for the Enterprise?," New Security Paradigms Wksp, 1999.
9. C. Irvine and T. Levin, "Quality of Security Service," New Security Paradigms Workshop, 2000.
10. S. Lindskog, "Modeling and Tuning Security from a Quality of Service Perspective," Chalmers Univ. Of Tech., 2005.
11. K. Bernsmed et al., "Security SLAs for Federated Cloud Services," Int'l Conf. Avail., Reliabilty and Security, 2011.
12. A. Celesti et al., "How to Enhance Cloud Architectures to Enable Cross-Federation," 3rd Int'l Conf. on Cloud Computing, 2010.
13. R. Hu et al., "WSRank: A Method for Web Service Ranking in Cloud Environment," Int'l Conf. on Dependable, Autonomic and Secure Computing, 2011.
14. M. Klusch et al, "Hybrid Adaptive Web Service Selection with SAWSDL-MX and WSDL-Analyzer," The Semantic Web: Research and Applications vol. 5554, L. Aroyo et al. eds., pp. 550-564: Springer, 2009.
15. MITRE. "The Common Weakness Enumeration (CWE) Initiative", MITRE Corporation, (http://cwe.mitre.org/).
16. MITRE. "Common Vulnerabilities and Exposures (CVE) Initiative", MITRE Corporation, (http://cve.mitre.org/).
17. M. Hale, and R. Gamble, "A Semantic Model for Software Security Compliance Certification Report No. SEAT-UTULSA-122011," 2011(under review).
18. B. Best, J. Jürjens, and B. Nuseibeh, "Model-based Security Engineering of Distributed Information Systems using UMLsec," 29th Int'l Conf. on Software Engineering, 2007.
19. C. Haley et al, "Security Requirements Engineering: A Framework for Representation and Analysis," Transactions on Software Engineering, vol. 34 no. 1, pp.133-153, 2008. (Pubitemid 351343906)
20. C. Zhou, L. Chia, and B. Lee "DAML-QoS Ontology for Web Services," Int. Conf. on Web Services, 2004.
21. N. Srinivasan et al, "An Efficient Algorithm for OWL-S Based Semantic Search in UDDI," Semantic Web Services and Web Process Composition. vol. 3387, J. Cardoso et al. eds., pp. 96-110, 2005.