Mitigating Threats and Security Metrics in Cloud Computing
2
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
Cloud computing is a distributed computing model that has lot of drawbacks and faces difficulties. Many new innovative and emerging techniques take advantage of its features. In this paper, we explore the security threats to and Risk Assessments for cloud computing, attack mitigation frameworks, and the risk-based dynamic access control for cloud computing. Common security threats to cloud computing have been explored and these threats are addressed through acceptable measures via governance and effective risk management using a tailored Security Risk Approach. Most existing Threat and Risk Assessment (TRA) schemes for cloud services use a converse thinking approach to develop theoretical solutions for minimizing the risk of security breaches at a minimal cost. In our study, we propose an improved Attack-Defense Tree mechanism designated as iADTree, for solving the TRA problem in cloud computing environments.
Abstract
Cloud computing is a distributed computing model that has lot of drawbacks and faces difficulties. Many new innovative and emerging techniques take advantage of its features. In this paper, we explore the security threats to and Risk Assessments for cloud computing, attack mitigation frameworks, and the risk-based dynamic access control for cloud computing. Common security threats to cloud computing have been explored and these threats are addressed through acceptable measures via governance and effective risk management using a tailored Security Risk Approach. Most existing Threat and Risk Assessment (TRA) schemes for cloud services use a converse thinking approach to develop theoretical solutions for minimizing the risk of security breaches at a minimal cost. In our study, we propose an improved Attack-Defense Tree mechanism designated as iADTree, for solving the TRA problem in cloud computing environments.
참고문헌 (11)
- D. V. Bernardo, "Utilizing security risk approach in managing cloud computing services", Proceedings of 2013 16th International Conference on Network-Based Information Systems (NBiS), pp.119~125 (2013)
- E. Datta, "Security attack mitigation framework for the cloud", Proceedings of 2014 Annual Reliability and Maintainability Symposium (RAMS), pp.1~6 (2014)
- D. R. Dos Santos, "A dynamic risk-based access control architecture for cloud computing", Proceedings of 2014 IEEE Network Operations and Management Symposium (NOMS), pp.1~9 (2014)
- P. Wang, "A novel threat and risk assessment mechanism for security controls in service management", Proceedings of 2013 IEEE 10th International Conference on e-Business Engineering (ICEBE), pp.337~344 (2013)
- I. Kotenko, "Security metrics for risk assessment of distributed information systems", Proceedings of 2013 IEEE 7th International Conference on Intelligent Data Acquisition and Advanced Computing Systems (IDAACS), pp.646~650 (2013)
- J. Kar, "Provably secure online", off-line identity-based signature scheme for wireless sensor network, 2014, pp.16(1), 29~39
- M. R. Mishra, "Practical deployment of one-pass key establishment protocol on wireless sensor networks", International Journal of Pure and Applied Mathematics, 100(4), pp.531~542 (2015)
- J. Kar, "Case Studies in Secure Computing Achievements and Trends", pp.437~456 (2014), Taylor and Francis
- P. K. Manadhata, "An attack surface metric", IEEE Transactions on Software Engineering, 37(3), pp.371~386 (2011)
- B. Grobauer, "Understanding cloud computing vulnerabilities", IEEE Security & Privacy, 9(2), pp.50~57 (2011)
- D. V. Bernardo, "Security risk assessment : toward a comprehensive practical risk management", International Journal of Information and Computer Security, 5(2), pp.77~104 (2012)