Cloud computing adoption framework: A security framework for business clouds

Future Generation Computer Systems

Volumn 57, Issue , 2016, Pages 24-41

  Chang, Victor ^a   Kuo, Yen Hung ^b   Ramachandran, Muthu ^a  

^a LEEDS METROPOLITAN UNIVERSITY   (United Kingdom)

^b INSTITUTE FOR INFORMATION INDUSTRY   (Taiwan)

Author keywords

CCAF multi layered security; Cloud computing adoption framework (CCAF); OpenStack; Security for business clouds

Indexed keywords

BIG DATA; BLENDING; CLOUD COMPUTING; MALWARE; QUERY LANGUAGES; VIRUSES;

ADOPTION FRAMEWORK; BUSINESS ACTIVITIES; IDENTITY MANAGEMENT; MULTI-LAYERED; OPENSTACK; SECURITY FRAMEWORKS; SECURITY TECHNOLOGY; STRUCTURED QUERY LANGUAGE;

COMPUTER VIRUSES;

EID: 84949545363     PISSN: 0167739X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.future.2015.09.031     Document Type: Article

References (33)

1. X. Zhang, M. Nakae, M.J. Covington, and R. Sandhu Toward a usage-based security framework for collaborative computing systems ACM Trans. Inf. Syst. Secur. 11 1 2008 3
2. H. Takabi, J.B. Joshi, G.J. Ahn, Securecloud: Towards a comprehensive security framework for cloud computing environments, in: 2010 IEEE 34th Annual Conference, Computer Software and Applications Workshops, COMPSACW, July, 2010, pp. 393-398.
3. T. Zia, A. Zomaya, A security framework for wireless sensor networks, in: Proceedings of the IEEE Sensors Applications Symposium, February, 2006, pp. 49-53.
4. T. Mather, S. Kumaraswamy, and S. Latif Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance 2009 O'Reilly Media, Inc.
5. S. Marston, Z. Li, S. Bandyopadhyay, J. Zhang, and A. Ghalsasi Cloud computing - The business perspective Decis. Support Syst. 51 1 2011 176 189
6. V. Chang, R.J. Walters, and G. Wills Cloud storage and bioinformatics in a private cloud deployment: Lessons for data intensive research Cloud Computing and Services Science 2013 Springer International Publishing 245 264
7. M. Ramachandran, V. Chang, Cloud Security proposed and demonstrated by cloud computing adoption framework, in: 2014 Emerging Software as a Service and Analytics Workshop, 2014.
8. M. Ramachandran, V. Chang, C.S. Li, The improved cloud computing adoption framework to deliver secure services, in: Emerging Software as a Service and Analytics 2015 Workshop, ESaaSA 2015, in Conjunction with CLOSER 2015, Lisbon, Portugal, 20-22 May, 2015.
9. R.K. Ko, P. Jagadpramana, M. Mowbray, S. Pearson, M. Kirchberg, Q. Liang, B.S. Lee, TrustCloud: A framework for accountability and trust in cloud computing, in: 2011 IEEE World Congress on Services, SERVICES, July, 2011, pp. 584-588.
10. S. Pal, S. Khatua, N. Chaki, S. Sanyal, A new trusted and collaborative agent based approach for ensuring cloud security, 2011. arXiv Preprint arXiv:1108.4100.
11. NIST, Framework for Improving Critical Infrastructure Cybersecurity, Technical Report, Version 1.0, February 2014
12. S. Subashini, and V. Kavitha A survey on security issues in service delivery models of cloud computing J. Netw. Comput. Appl. 34 1 2011 1 11
13. M. Basso, and J. Mann MarketScope for Enterprise File Synchronization and Sharing 2013 Gartner
14. Y.H. Kuo, Y.L. Jeng, J.N. Chen, A hybrid cloud storage architecture for service operational high availability, in: Proceedings of the 37th IEEE Annual International Computers, Software & Applications Conference, IEEE COMPSAC 2013, July, 2013, pp. 487-492.
15. J. Sanders, Dropbox and Box Leak Files in Security Through Obscurity Nightmare, TechRepublic, http://www.techrepublic.com/article/dropbox-and-box-leak-files-in-security-through-obscurity-nightmare/, Retrieved on August 15th, 2014.
16. S.A. Baset, Open source cloud technologies, in: Proceedings of the Third ACM Symposium on Cloud Computing, SoCC, October, 2012.
17. R. Cattell Scalable SQL and NoSQL data stores ACM SIGMOD Rec. 39 4 2010 12 27
18. J. Han, E. Haihong, G. Le, J. Du, Survey on NoSQL database, in: Proceedings of the 6th International Conference on Pervasive Computing and Applications, ICPCA 2011, October, 2011, pp. 363-366.
19. Y.H. Kuo, Y.L. Jeng, Apparatus, Method, and Non-transitory Computer Readable Storage Medium Thereof for Controlling Access of a Resource, U.S. Patent Application (Priority No.: 13/954,885).
20. Y.H. Kuo, Y.L. Jeng, Cloud Storage Server and Management Method Thereof, U.S. Patent Application (Priority No.: 14/032,440).
21. D. Dolev, and A.C. Yao On the security of public key protocols IEEE Trans. Inf. Theory 29 2 1983 198 208
22. U.M. Maurer, and J.L. Massey Cascade ciphers: The importance of being first J. Cryptol. 6 1 1993 55 61
23. C. Percival, Stronger key derivation via sequential memory-hard functions, in: The BSD Conference, BSDCan, May, 2009.
24. Y.H. Kuo, Y.L. Jeng, Secure Synchronization Apparatus, Method, and Non-transitory Computer Readable Storage Medium Thereof, U.S. Patent Application (Priority No.: 14/292,901).
25. k.Y. Wang, Y.H. Kuo, Y.L. Jeng, Synchronization Apparatus, Method, and Non-transitory Computer Readable Storage Medium, U.S. Patent Application (Priority No.: 14/300,955).
26. V. Chang, and M. Ramachandran Towards data security with the cloud computing adoption framework IEEE Trans. Serv. Comput. 8 6 2015
27. N. Antunes, and M. Vieira Assessing and comparing vulnerability detection tools for web services: Benchmarking approach and examples IEEE Trans. Serv. Comput. 8 2 2015 269 283
28. A. Kieyzun, P.J. Guo, K. Jayaraman, M.D. Ernst, Automatic creation of SQL injection and cross-site scripting attacks, in: IEEE 31st International Conference on Software Engineering, 2009. ICSE 2009, May, 2009, pp. 199-209.
29. S. McClure, S. Shah, and S. Shah Web Hacking: Attacks and Defense 2002 Addison-Wesley Longman Publishing Co., Inc.
30. OWASP article, Testing for NoSQL Injection, Technical Report, accessible on https://www.owasp.org/index.php/Testing-for-NoSQL-injection, July, 2015.
31. NIST, An introduction to computer security. Publication 800-12, 1996, downloaded from http://csrc.nist.gov/publications/nistpubs/800-12/handbook.pdf.
32. M.D. Harris, D. Herron, and S. Iwanicki The Business Value of IT: Managing Risks, Optimizing Performance and Measuring Results 2008 CRC Press
33. V. Chang A Proposed Cloud Computing Business Framework 2015 Nova Science Publisher 9781634820172 (print)