Security risk assessment of cloud carrier

Proceedings - 13th IEEE/ACM International Symposium on Cluster, Cloud, and Grid Computing, CCGrid 2013

Volumn , Issue , 2013, Pages 442-449

  Lenkala, Swetha Reddy ^a   Shetty, Sachin ^a   Xiong, Kaiqi ^b  

^a Tennessee State University   (United States)

^b Rochester Institute of Technology   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

NATIONAL VULNERABILITY DATABASE; QUALITY OF SECURITY SERVICES; RISK ASSESSMENT FRAMEWORK; SECURITY AND PRIVACY; SECURITY RISK ASSESSMENTS; SECURITY VULNERABILITIES; SERVICE LEVEL AGREEMENTS; SYSTEM IMPLEMENTATION;

CLOUD COMPUTING; GRID COMPUTING; INDUSTRY; RISK ASSESSMENT; WEB SERVICES; WINDOWS OPERATING SYSTEM;

SECURITY OF DATA;

EID: 84881309609     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CCGrid.2013.28     Document Type: Conference Paper

References (26)

1. "Amazon Web Services." [Online]. Available: http://aws.amazon.com/.
2. "Windows Azure Platform." [Online]. Available: https://www.windowsazure.com/en-us/.
3. "Google App Engine." Google, [Online]. Available: https://developers.google.com/appengine/.
4. "Rackspace." [Online]. Available: http://www.rackspace.com/.
5. "National Vulnerability Database." [Online]. Available: http://nvd.nist.gov/.
6. Maxmind, "Maxmind - GeoIP Database Installation Instructions." [Online]. Available: http://www.maxmind.com/en/installation?city=1.
7. PlanetLab, "An open platform for developing, deploying, and accessing planetaryscale." [Online]. Available: http://www.planet-lab.org/.
8. F. Liu, J. Tong, J. Mao, R. B. Bohn, J. V. Messina, M. L. Badger and D. M. Leaf, "NIST Cloud Computing Reference Architecture." Cloud Computing Program Information Technology Laboratory National Institute of Standards and Technology, 2011. [Online]. Available: http://www.nist.gov/ customcf/getpdf.cfm?pubid=909505.
9. H. Liu, "A new form of DOS attack in a cloud and its avoidance mechanism, " in CCSW '10 Proceedings of the 2010 ACM workshop on Cloud computing security workshop, New York, 2010.
10. N. Luna, S. Shetty, T. Rogers and K. Xiong, "Assessing Network Path Vulnerabilities for Secure Cloud Computing, " in First GENI Research and Educational Experiment Workshop, Los Angeles, 2012.
11. P. Akritidis, W. Chin, V. Lam, S. Sidiroglou and K. Anagnostakis, "Proximity breeds danger: emerging threats in metro-area wireless networks, " in SS'07 Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium, Berkeley, 2007.
12. P. Mell, K. Scarfone and S. Romanosky, "A Complete Guide to the Common Vulnerability Scoring System Version 2.0, " [Online]. Available: http://www.first.org/cvss/cvss-guide.pdf.
13. J. A. Wang, H. Wang, M. Guo, Z. Linfeng and J. Camargo, "Ranking Attacks Based on Vulnerability Analysis, " in 43rd International Conference on System Sciences, Hawaii, 2010.
14. K. Sun, S. Jajodia, J. Li, Y. Cheng, W. Tang and A. Singhal, "Automatic Security Analysis Using Security Metrics, " in MILITARY COMMUNICATIONS CONFERENCE, 2011 - MILCOM 2011, Baltimore, MD, 2011.
15. S. H. Houmb and V. N. Franqueira, "Estimating ToE Risk Level using CVSS, " in 2009 International Conference on Availability, Reliability and Security, Fukuoka, 2009.
16. H. Joh and Y. K. Malaiya, "Defining and Assessing Quantitative Security Risk Measures Using Vulnerability Lifecycle and CVSS Metrics, " in SAM'11 The 2011 International Conference on Security and Management, Las Vegas, 2011.
17. S. Zhang, D. Caragea and X. Ou, "An Empirical Study on Using the National Vulnerability Database to Predict Software Vulnerabilities, " in International conference on Database and expert systems applications (DEXA'11), Toulouse, France, 2011.
18. S. Houmb, V. Nunes Leal Franqueira and E. Engum, "Estimating Impact and Frequency of Risks to Safety and Mission Critical Systems Using CVSS, " in ISSRE Supplemental Proceedings: 1st Workshop on Dependable Software Engineering, Seattle, 2008.
19. B. S. Blanchard and W. J. Fabrycky, Systems Engineering and Analysis, Pearson Prentice Hall, 2006.
20. G. Stoneburner, A. Goguen and A. Feringa, "Risk Management Guide for Information Technology Systems, " in National Institute of Standards and Technology Special Publication, 2002.
21. O. Arkin, F. Yarochkin and M. Kydyraliev, "The Present and Future of Xprobe2 The Next Generation of Active Operating System Fingerprinting." [Online]. Available: http://www.netsecurity.org/dl/articles/ PresentandFutureXprobe2-v1.0.pdf.
22. "Common Vulnerabilities and Exposures." [Online]. Available: http://cve.mitre.org/about/index.html.
23. "National Infrastructure Advisory Council." [Online]. Available: http://www.dhs.gov/national-infrastructure-advisory-council.
24. "National Institute of Standards and Technology." [Online]. Available: http://www.nist.gov/index.html.
25. A. Li, et. al., "CloudCmp: Comparing Public Cloud Providers, " Internet Measurement Conference, 2010.
26. A. M. Matwyshyn, A. Cui, A. D. Keromytis and S. Stolfo, "Ethics in Security Vulnerability Research, " IEEE Security & Privacy, vol. 8, no. 2, pp. 67 - 72, 2010.