Towards Achieving Data Security with the Cloud Computing Adoption Framework

IEEE Transactions on Services Computing

Volumn 9, Issue 1, 2016, Pages 138-151

  Chang, Victor ^a,b   Ramachandran, Muthu ^a  

^a LEEDS METROPOLITAN UNIVERSITY   (United Kingdom)

^b UNIVERSITY OF SOUTHAMPTON   (United Kingdom)

Author keywords

Business Process Modeling Notation (BPMN); Cloud Computing Adoption Framework (CCAF); Data security in the Data Center; multi layered security protection; security framework

Indexed keywords

ACCESS CONTROL; CLOUD COMPUTING; PERSONAL COMPUTING; PROCESS ENGINEERING; SYSTEMS ENGINEERING; VIRUSES;

ADOPTION FRAMEWORK; BUSINESS PROCESS MODELING NOTATION (BPMN); DATA CENTERS; MULTI-LAYERED; SECURITY FRAMEWORKS;

COMPUTER VIRUSES;

EID: 84962038954     PISSN: 19391374     EISSN: None     Source Type: Journal    
DOI: 10.1109/TSC.2015.2491281     Document Type: Article

References (34)

1. S. Marston, Z. Li, S. Bandyopadhyay, J. Zhang, and A. Ghalsasi, "Cloud computing - The business perspective," Decision Support Syst., vol. 51, no. 1, pp. 176-189, 2011.
2. M. A. Vouk, "Cloud computing-issues, research and implementations," J. Comput. Inf. Technol.-CIT, vol. 4, pp. 235-246, 2008.
3. A. K. Jha, C. M. DesRoches, E. G. Campbell, K. Donelan, S. R. Rao, T. G. Ferris, and D. Blumenthal, "Use of electronic health records in US hospitals," New England J. Med., vol. 360, no. 16, pp. 1628-1638, 2009.
4. H. T. Peng, W. W. Hsu, C. H. Chen, F. Lai, and J. M. Ho, "Financial cloud: open cloud framework of derivative pricing," in Proc. Int. Conf. Social Comput., Sep. 2013, pp. 782-789.
5. M. Mircea and A. I. Andreescu, "Using cloud computing in higher education: A strategy to improve agility in the current financial crisis," Commun. IBIMA, vol. 2011, pp. 1-15, 2011.
6. M. Armbrust, A. Fox, R. Griffith, A. D. Joseph, R. H. Katz, A. Konwinski, G. Lee, D. Patterson, A. Rabkin, I. Stoica, and M. Zaharia, "Above the clouds: A Berkeley view of cloud computing," Commun. ACM, vol. 53, no. 4, pp. 50-58, 2010.
7. L. Liu, E. Yu, and J. Mylopoulos, "Security and privacy requirements analysis within a social setting," in Proc. 11th IEEE Int. Requirements Eng. Conf., Sep. 2003, pp. 151-161.
8. T. Mather, S. Kumaraswamy, and S. Latif, Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance. Sebastopol, CA, USA: O'Reilly Media, 2009.
9. M. Pop and S. L. Salzberg, "Bioinformatics challenges of new sequencing technology," Trends Genetics, vol. 24, no. 3, pp. 142-149, 2008.
10. A. Greenberg, A. J. Hamilton, D. A. Maltz, and P. Patel, "The cost of a cloud: Research problems in data center networks," ACM SIGCOMM Comput. Commun. Rev., vol. 39, no. 1, pp. 68-73, 2008.
11. Q. Zhang, L. Cheng, and R. Boutaba, "Cloud computing: state-of-the-art and research challenges," J. Internet Services Appl., vol. 1, no. 1, pp. 7-18, 2010.
12. J. J. Cebula and L. R. Young, "A taxonomy of operational cyber security," Softw. Eng. Inst., Tech. Note: CMU/SEI-2010-TN-028, Pittsburgh, PA, USA, Dec. 2010.
13. S. Yu, C. Wang, K. Ren, and W. Lou, "Achieving secure, scalable, and fine-grained data access control in cloud computing," in Proc. IEEE INFOCOM, Mar. 14-19, 2010, pp. 1-9.
14. G. Wang, Q. Liu, and J. Wu, "Hierarchical attribute-based encryption for fine-grained access control in cloud storage services," in Proc. 17th ACM Conf. Comput. Commun. Security, Oct. 2010, pp. 735-737.
15. X. Zhang, M. Nakae, M. J. Covington, and R. Sandhu, "Toward a usage-based security framework for collaborative computing systems," ACM Trans. Inf. Syst. Security, vol. 11, no. 1, p. 3, 2008.
16. G. McGraw, Software Security: Building Security. Reading, MA, USA: Addison-Wesley, 2006.
17. P. Brooks and J. Chittenden, Metrics for Service Management: Designing for ITIL. Zaltbommel, Netherlands: Van Haren Publishing, 2012.
18. V. Chang, R. J. Walters, and G. Wills, Cloud Storage and Bioinformatics in a Private Cloud Deployment: Lessons for Data Intensive Research. New York, NY, USA: Springer CLOSER 2012, CCIS 367, pp. 245-264, 2013.
19. V. Chang, "Business intelligence as service in the cloud," Future Gener. Comput. Syst., vol. 37, pp. 512-534, 2014.
20. I. A. Tondel et al., "Security requirements for rest of us: A survey," IEEE Softw., Special Issue Security Agile Requirement Eng. Methods, vol. 25, no. 1, pp. 20-27, Jan./Feb. 2008.
21. N. R. Mead, T. Stehney, "Security quality requirements engineering (SQUARE)methodology," ACM, vol. 30, no 4, pp. 1-7, 2005.
22. Oracle. (2012). Data Security Challenges. Oracle9i security overview release number 2(9.2), accessed on 4th November [Online]. Available: http://docs.oracle.com/cd/B10501-01/network.920/a96582/overview.htm
23. V. Kumar, M. S. Swetha, M. S. Muneshwara, and S. Prakash "Cloud computing: Towards case study of data security mechanism," Int. J. Adv. Technol. Eng. Res., vol. 2, no. 4, pp. 1-8, Jul. 2012.
24. F. Wen, and L. Xiang, "The study on data security in cloud computing based on virtualization," in Proc. IEEE Int. Symp. IT Med. Edu., 2011, vol. 2, no. 1, pp. 257-261.
25. B. Schneier, Beyond Fear. New York, NY, USA: Copernicus Books, 2003.
26. IBM, "Eleven habits for highly successful BPMprograms," IBMThought Leadership White Paper, 2010.
27. G. M. Cimino and G. Vaglini, "An interval-valued approach to business process simulation based on genetic algorithms and the BPMN," Information, vol. 5, pp. 319-356, 2014.
28. A. Behl and K. Behl, "An analysis of cloud computing security issues," in Proc. World Congr. Inf. Commun. Technol., Trivandrum, India, Nov. 2012, pp. 109-114.
29. V. Vardharajan and U. Tupakula, "Security as a service model for cloud environment," IEEE Trans. Netw. Service Manage., vol. 11, no. 1, pp. 60-75, Mar. 2014.
30. M. Bishop, "About penetration testing," IEEE Security Privacy, vol. 5, no. 6, pp. 84-87, Nov./Dec. 2007.
31. M. H. Yang, N. Chandlrees, B. Lin, and H. Y. Chao, "The effect of perceived ethical performance of shopping websites on consumer trust," J. Comput. Inf. Syst., vol. 50, no. 1, p. 15, 2009.
32. V. Goyal, O. Pandey, A. Sahai, and B. Waters, "Attribute-based encryption for fine-grained access control of encrypted data," in Proc. 13th ACM Conf. Comput. Commun. Security, Oct., 2006, pp. 89-98.
33. D. Zissis and D. Lekkas, "Addressing cloud computing security issues," Future Gener. Comput. Syst., vol. 28, no. 3, pp. 583-592, 2012.
34. N. Antunes and M. Vieira, "Assessing and comparing vulnerability detection tools for web services: Benchmarking approach and examples," IEEE Trans. Services Comput., vol. 8, no. 2, pp. 269-283, Mar./Apr. 2015.