How much cloud can you handle?

Proceedings - 10th International Conference on Availability, Reliability and Security, ARES 2015

Volumn , Issue , 2015, Pages 467-473

  Jaatun, Martin Gilje ^a   Tøndel, Inger Anne ^a  

^a SINTEF ICT   (Norway)

Author keywords

Accountability; Cloud computing; Incident response; Privacy; Security

Indexed keywords

CLOUD COMPUTING; DATA PRIVACY;

ACCOUNTABILITY; CLOUD SERVICE PROVIDERS; INCIDENT RESPONSE; INFORMATION SECURITY INCIDENTS; SECURITY;

SECURITY OF DATA;

EID: 84961574664     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2015.38     Document Type: Conference Paper

References (23)

1. M. G. Jaatun, A. A. Nyre, S. Alapnes, and G. Zhao, "A Farewell to Trust: An Approach to Confidentiality Control in the Cloud, " in Proceedings of the 2nd International Conference on Wireless Communications, Vehicular Technology, Information Theory and Aerospace & Electronic Systems Technology (Wireless Vitae Chennai 2011), 2011.
2. M. G. Jaatun, P. H. Meland, K. Bernsmed, H. Castejón, and A. Undheim, "Cloud Security Whitepaper-A Briefing on Cloud Security Challenges and Opportunities, " October 2013. http://www. telenor. com/media/articles/2013/safe-in-the-cloud/
3. "Security Guidance for Critical Areas of Focus in Cloud Computing, " 2011. https: //cloudsecurityalliance. org/guidance/
4. B. Grobauer and T. Schreck, "Towards incident handling in the cloud: Challenges and approaches, " in Proceedings of the 2010 ACM Workshop on Cloud Computing Security Workshop, ser. CCSW '10. New York, NY, USA: ACM, 2010, pp. 77-86. http://doi. acm. org/10. 1145/1866835. 1866850
5. N. H. A. Rahman and K.-K. R. Choo, "A survey of information security incident handling in the cloud, " Computers & Security, vol. 49, no. 0, pp. 45-69, 2015. http://www. sciencedirect. com/science/article/pii/S0167404814001680
6. V. Munteanu, A. Edmonds, T. Bohnert, and T.-F. Fortis, "Cloud incident management, challenges, research directions, and architectural approach, " in Utility and Cloud Computing (UCC), 2014 IEEE/ACM 7th International Conference on, Dec 2014, pp. 786-791.
7. "ISO/IEC 27035: 2011 Information technology-Security techniques-Information security incident management, " 2011.
8. P. Cichonski, T. Millar, T. Grance, and K. Scarfone, "Computer Security Incident Handling Guide, " National Institute of Standards and Technology Special Publication 800-61, 2012.
9. ENISA, "Good practice guide for incident management, " 2010. http://www. enisa. europa. eu/act/cert/support/incident-management
10. M. G. Jaatun, K. Bernsmed, and A. Undheim, "Security SLAs an idea whose time has come" in "Proceedings of the International Cross Domain Conference and Workshop (CD-ARES)", 2012.
11. P. H. Meland, K. Bernsmed, M. G. Jaatun, H. N. Castejón, and A. Undheim, "Expressing cloud security requirements for slas in deontic contract languages for cloud brokers, " Int. J. of Cloud Computing, vol. 3, no. 1, pp. 69-93, 2014.
12. M. G. Jaatun, S. Pearson, F. Gittler, and R. Leenes, "Towards strong accountability for cloud service providers, " in Cloud Computing Technology and Science (CloudCom), 2014 IEEE 6th International Conference on, Dec 2014, pp. 1001-1006.
13. S. Metzger, W. Hommel, and H. Reiser, "Integrated Security Incident Management-Concepts and Real-World Experiences, " in Sixth International Conference on IT Security Incident Management and IT Forensics (IMF), 2011, pp. 107-121.
14. M. B. Line and N. B. Moe, "Understanding Collaborative Challenges in IT Security Preparedness Exercises, " in Proceedings of IFIP SEC, 2015.
15. S. Dhar, "From outsourcing to cloud computing: evolution of it services, " Management Research Review, vol. 35, no. 8, pp. 664-675, 2012.
16. A. Ahmad, J. Hadgkiss, and A. B. Ruighaver, "Incident Response Teams-Challenges in Supporting the Organisational Security Function, " Computers & Security, vol. 31, no. 5, pp. 643-652, 2012.
17. C. R. B. de Souza, C. S. Pinhanez, and V. F. Cavalcante, "Information needs of system administrators in information technology service factories, " in Proceedings of the 5th ACM Symposium on Computer Human Interaction for Management of Information Technology, ser. CHIMIT '11. New York, NY, USA: ACM, 2011, pp. 3: 1-3: 10. http://doi. acm. org/10. 1145/2076444. 2076447
18. P. Kampanakis, "Security automation and threat information-sharing options, " Security Privacy, IEEE, vol. 12, no. 5, pp. 42-51, Sept 2014.
19. H. Debar, D. A. Curry, and B. S. Feinstein, "The Intrusion Detection Message Exchange Format (IDMEF), " IETF Network Working Group RFC 4765, March 2007. http://www. ietf. org/rfc/rfc4765. txt
20. R. Danyliw, J. Meijer, and Y. Demchenko, " The Incident Object Description Exchange Format, " IETF Network Working Group RFC 5070, December 2007. http://www. ietf. org/rfc/rfc5070. txt
21. Cloud Security Alliance, " Cloud Trust Protocol. " https: //cloudsecurityalliance. org/research/ctp/
22. T. Pulls, R. Peeters, and K. Wouters, "Distributed privacy-preserving transparency logging, " in Proceedings of the 12th ACM Workshop on Workshop on Privacy in the Electronic Society, ser. WPES '13. New York, NY, USA: ACM, 2013, pp. 83-94. http://doi. acm. org/10. 1145/2517840. 2517847
23. R. Floodeen, J. Haller, and B. Tjaden, "Identifying a shared mental model among incident responders, " in IT Security Incident Management and IT Forensics (IMF), 2013 Seventh International Conference on, March 2013, pp. 15-25.