Selecting a Cloud Service Provider in the age of cybercrime

Computers and Security

Volumn 38, Issue , 2013, Pages 3-13

  Ouedraogo, Moussa ^a   Mouratidis, Haralambos ^b  

^a LUXEMBOURG INSTITUTE OF SCIENCE AND TECHNOLOGY   (Luxembourg)

^b UNIVERSITY OF EAST LONDON   (United Kingdom)

Author keywords

Cyber insecurity; Metrics; Security; Security assurance; Trusted Cloud services

Indexed keywords

DISTRIBUTED DATABASE SYSTEMS; NETWORK SECURITY; RISK ASSESSMENT;

CYBER INSECURITY; METRICS; SECURITY; SECURITY ASSURANCE; TRUSTED CLOUDS;

TRUSTED COMPUTING;

EID: 84885175490     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2013.01.007     Document Type: Article

References (32)

1. Anthes G. Security in the cloud. Communication of the ACM 2010; 53(11):16-8.
2. Brodkin J. Cloud computing outages: Amazon customers the latest to suffer downtime. Available at: Network world: http://www.networkworld.com/community/ node/48961; 2009.
3. De Chaves SA, Uriarte RB, Westphall CB. Toward an architecture for monitoring private clouds. IEEE Communications Magazine 2011;49(12):130-7.
4. Chen Y, Paxson V, Katz RH. What's new about cloud computing security?. Report EECS Department Berkeley: University of California. Available at:, http://www.eecs.berkeley.edu/Pubs/TechRpts/2010/EECS-2010-5.html; 2010 [Last accessed: 10.10.12].
5. Cloud Security Alliance -CSA. Cloud controls matrix v.1.3. Available at: https://cloudsecurityalliance.org/; 2011 [Last accessed 10.10.12].
6. Cloud Security Alliance eCSA. Consensus assessments initiative questionnaire 1.1. Available at: https://cloudsecurityalliance.org/; 2012 [Last accessed: 10.10.12].
7. Cloud Security Alliance-CSA. Security guidance for critical areas of focus in cloud computing V2.1. Available at: http://www.cloudsecurityalliance. org/guidance/csaguide.v2.1.pdf; 2009 [Last accessed: 10.10.12].
8. ENISA. Cloud computing information assurance framework. Available at: http://www.enisa.europa.eu/activities/riskmanagement/files/deliverables/ cloud-computing-informationassurance-framework; 2009 [Last accessed: 21.12.12].
9. FedRAMP. Federal risk and authorization management program. Available online at: http://www.gsa.gov/portal/category/102371; 2011.
10. Garfinkel S. The criminal cloud-technology review. Available at: http://www.technologyreview.com/news/425770/thecriminal-cloud/; 2011 [Last accessed 21.12.12].
11. Gentry C. Fully homomorphic encryption using ideal lattices. In: Proceedings of the 41st annual ACM symposium on theory of computing (STC 2009). ACM; 2009. p. 169-78.
12. Hu F, Qiu M, Li J, Grant T, Tylor D, McCaleb S, et al. A review on cloud computing: design challenges in architecture and security. Journal of Computing and Information Technology 2011;19(1):25-55.
13. ISO/IEC. Information technology - security techniques - evaluation criteria for IT security-Part1: introduction and general model; 2009. ISO/IEC15408-1, Geneva, Switzerland.
14. Jansen W, Grance T. Guidelines on security and privacy in public cloud computing. NIST SP 800-144. Gaithersburg, MD: National Institute of Standardisation and Technology; 2011.
15. Kamara S, Lauter K. Cryptographic cloud storage. In: Proceedings of financial cryptography: workshop on real-life cryptographic, protocols and standardization; 2010. Tenerife, Canary Islands, Spain.
16. Krautheim FJ. Private virtual infrastructure for cloud computing. In: Proceedings of the HotCloud 2009. ACM; 2009.
17. McAfee and Guardian Analytics. Dissecting operation high roller. Report, Available at: http://www.mcafee.com/us/resources/reports/rp-operation-high- roller.pdf; 2012 [Last accessed: 10.11.12].
18. Mills E. Cybercriminals move to the cloud. Available at, http://news.cnet.com/8301-1009-3-57464177-83/cybercrime-movesto-the-cloud/; 2012.
19. Mouratidis H. Secure software systems engineering: the secure Tropos approach. International Journal of Software 2011;6(3): 331-9.
20. Ouedraogo M, Savola R, Mouratidis H, Preston D, Khadraoui D, Dubois E. Taxonomy of quality metrics for assessing assurance of security correctness. Software Quality Journal 2013;21(1):67-97 [Springer].
21. Ouedraogo M, Khadraoui D, Mouratidis H, Dubois E. Appraisal and reporting of security assurance at operational systems level. Journal of Software and System and Software 2012;85(1): 193-208. http://dx.doi.org/10.1007/s11219-011- 9169-0.
22. Oza NV, Karppinen K, Savola R. User experience and security in the cloud - an empirical study in the finnish cloud consortium. In: Proceeding of CloudCom 2010. IEEE; 2010. p. 621-8.
23. Popovič K, Hocenski Z. Cloud computing security issues and challenges. Computer Issue 2010;3:344-9 [IEEE].
24. Rak M, Liccardo L, Aversa R. A SLA-based interface for security management in cloud and GRID integrations. In: proceedings of IAS 2011. IEEE; 2011. p. 378-83.
25. Santos N, Gummadi KP, Rodrigues R. Towards trusted cloud computing. In: Proceedings of the 2009 conference on Hot topics in cloud computing (HotCloud). San Diego: USENIX; 2009.
26. Teneyuca D. Internet cloud security: the illusion of inclusion. Information Security Technical Report 2011;16(3-4):102-7 [Elsevier].
27. Vaquero LM, Rodero-Merino L, Morán D. Locking the sky: a survey on IaaS cloud security. Computing 2011;91(1):93-118 [Springer].
28. Wang G, Liu Q, Wu J, Guo M. Hierarchical attribute-based encryption and scalable user revocation for sharing data in cloud servers. Computers & Security 2011;30(5):320-31 [Elsevier].
29. Wieder P, editor. Service level agreements for cloud computing. Springer; 2011.
30. Winkler V. Securing the cloud-cloud computer security techniques and tactics. Syngress; 2011.
31. Zetter K. FBI defends disruptive raids on texas data centers. Wired Magazine. Available at: http://www.wired.com/threatlevel/2009/04/data-centers- ra/; 2009 [Last accessed: 10.10.12].
32. Zhu Y, Hu H, Ahn GJ, Yau SS. Efficient audit service outsourcing for data integrity in clouds. Journal of Systems and Software 2012;85(5):1083-95 [Elsevier].