A Semantic Approach to Cloud Security and Compliance

Proceedings - 2015 IEEE 8th International Conference on Cloud Computing, CLOUD 2015

Volumn , Issue , 2015, Pages 1081-1084

  Hendre, Amit ^a   Joshi, Karuna Pande ^a  

^a UNIVERSITY OF MARYLAND BALTIMORE COUNTY   (United States)

Author keywords

Cloud computing; Cloud security; Cloud security models; Security compliance models

Indexed keywords

CLOUD COMPUTING; DISTRIBUTED DATABASE SYSTEMS; SECURITY SYSTEMS; SEMANTICS; WEB SERVICES;

CLOUD SECURITIES; POTENTIAL THREATS; SECURITY AND PRIVACY; SECURITY COMPLIANCE; SECURITY CONTROLS; SECURITY MEASURE; SECURITY THREATS; SEMANTIC APPROACH;

COMPLIANCE CONTROL;

EID: 84960192744     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CLOUD.2015.157     Document Type: Conference Paper

References (34)

1. Cloud Security Alliance, 2013, The Notorious Nine: Cloud Computing Top Threats in 2013, p8-p21.
2. NIST, NIST Cloud Computing Reference Architecture, 2011
3. Privacy and data protection, Vol 7 Issue 4, IT compliance and IT security-Part 1, Dr. Jörg Hladjk, p 3-4
4. SSAE16, The SSAE16 Auditing Standard, http://www. ssae-16. com/
5. FedRAMP, http://www. gsa. gov/portal/category/102375
6. S. Subashini, V. Kavitha, A survey on security issues in service delivery models of cloud computing, Journal of Network and Computer Applications, Volume 34, Issue 1, January 2011, Pages 1-11
7. Ramgovind, S.; Eloff, M. M.; Smith, E., "The management of security in Cloud computing, " Information Security for South Africa (ISSA), 2010, vol., no., pp. 1, 7, 2-4 Aug. 2010
8. T. Mather, S. Kumarswamy, S. Latif, Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance, O'Reilly Media, 2009
9. CSA, Diana Kelley, Understanding Cloud Controls Matrix v1. 4. xls
10. CSA, Nov 14 2014, CSA security Guidance v3
11. Mell, P. & Grance, t. (2011) The NIST Definition of Cloud Computing, (Special Publication 800-145).
12. Vaultive, http://www. vaultive. com/technology/encryption-in-use/
13. STIG, Application Security and Development STIG, 2014
14. Introduction to ISO 27002, http://www. standards. bz/iso-27002. html
15. ISO/IEC 27001, http://www. iso. org/iso/home/standards/managementstandards/ iso27001. htm
16. SAFE HARBOR, http://export. gov/safeharbor/eu/eg-main-018476. Asp
17. HIPAA, may 2003, Summary of HIPAA privacy rules. http://www. hhs. gov/ocr/privacy/hipaa/understanding/summary/privacys ummary. pdf
18. NIST SP 800-53, Information security, http://csrc. nist. gov/publications/nistpubs/800-53-Rev3/sp800-53-rev3-final-updated-errata-05-01-2010. pdf
19. FIPS 140-2, Jan 2011, security requirement for cryptographic models, http://csrc. nist. gov/publications/fips/fips140-2/fips1402. pdf
20. NIST Recommended Security Controls for Federal Information Systems and Organizations., http://csrc. nist. gov/publications/nistpubs/800-53-Rev3/sp800-53-rev3-final-updated-errata-05-01-2010. pdf
21. EDRM-PSRRM, Privacy and Security risk reduction model, http://www. edrm. net/resources/psrrm
22. SOX, Sarbanes-Oxley Act, http://en. wikipedia. org/wiki/Sarbanes%E2%80%93Oxleyact
23. Overview of OASIS SAML v2, https://www. oasis-open. org/ committees/download. php/27819/sstc-saml-tech-overview-2. 0-cd-02. pdf
24. ISO 17799, International Standard ISO/IEC 17799:2000 Code of Practice for Information Security Management http://csrc. nist. gov/publications/secpubs/otherpubs/reviso-faq. pdf
25. DMTF CADF, June 2012, Cloud Auditing Data Federation http://www. dmtf. org/sites/default/files/standards/documents/DSP2028-1. 0. 0a. pdf
26. NIST 800-16, http://csrc. nist. gov/publications/drafts/800-16-rev1/draft-sp800-16-rev1-2nd-draft. pdf
27. NIST 800-50, for awareness and training, Oct 2003, program, http://csrc. nist. gov/publications/nistpubs/800-50/NIST-SP800-50. pdf
28. MPAA, entertainment content security and protection, http://www. fightfilmtheft. org/docs/2012annual-Trending-Report-Fin al. pdf, 2012
29. PCI-DSS, oct 2010, requirement and security assessment, https://www. pcisecuritystandards. org/documents/pci-dss-v2. pdf
30. NIST 800-61, Computer Security Incident Handling Guide, Aug 2012, http://csrc. nist. gov/publications/nistpubs/800-61rev2/SP800-61rev2. pdf
31. A. Hendre, T. Finin, K. Joshi, Cloud Security and Compliance Ontology, July 2014, http://ebiquity. umbc. edu/resource/html/id/361/Cloud-Security-and-Compliance-Ontology
32. D. McGuinness, F. Van Harmelen, et al., OWL web ontology language overview, W3C recommendation, World Wide Web Consortium, 2004.
33. P Kamongi et al., Nemesis: Automated Architecture for Threat Modeling and Risk Assessment for Cloud Computing, ASE 2014
34. Popovi, K.; Hocenski, Z., "Cloud computing security issues and challenges, " MIPRO, 2010 Proceedings of the 33rd International Convention, vol., no., pp. 344, 349, 24-28 May 2010