Leveraged BMIS Model for Cloud Risk Control
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Cloud computing has increasingly been drawing attention these days. Eachbig company in IT hurries to get a chunk of meat that promises to be a whoppingmarket in the future. At the same time, information is always associated with securityand risk problems. Nowadays, the handling of these risks is no longer just a technologyproblem, with a good deal of literature focusing on risk or security management andframework in the information system. In this paper, we find the specific businessmeaning of the BMIS model and try to apply and leverage this model to cloud risk. Through a previous study, we select and determine the causal risk factors in cloudservice, which are also known as CSFs (Critical Success Factors) in informationmanagement. Subsequently, we distribute all selected CSFs into the BMIS model bymapping with ten principles in cloud risk. Finally, by using the leverage points, we try toleverage the model factors and aim to make a resource-optimized, dynamic, generalrisk control business model for cloud service providers.
Abstract
Cloud computing has increasingly been drawing attention these days. Eachbig company in IT hurries to get a chunk of meat that promises to be a whoppingmarket in the future. At the same time, information is always associated with securityand risk problems. Nowadays, the handling of these risks is no longer just a technologyproblem, with a good deal of literature focusing on risk or security management andframework in the information system. In this paper, we find the specific businessmeaning of the BMIS model and try to apply and leverage this model to cloud risk. Through a previous study, we select and determine the causal risk factors in cloudservice, which are also known as CSFs (Critical Success Factors) in informationmanagement. Subsequently, we distribute all selected CSFs into the BMIS model bymapping with ten principles in cloud risk. Finally, by using the leverage points, we try toleverage the model factors and aim to make a resource-optimized, dynamic, generalrisk control business model for cloud service providers.
참고문헌 (27)
- G. Zhao, "Holistic framework of security management for cloud service providers", Proceedings of the 10th IEEE International Conference on Industrial Informatics, pp.852~856 (2012)
- Z. Guo, "A governance model for cloud computing", Proceedings of the International Conference on Management and Service Science, pp.1~6 (2010)
- J. J. Hwang, "A business model for cloud computing based on a separate encryption and decryption service", Proceedings of the International Conference on Information Science and Applications, pp.1~7 (2011)
- C. C. Lo, "Information Security and Its Impact on Business" (2006), National Chiao-Tung University
- R. von Rössing, "Applying BMIS to cloud security", ISSE 2010 Securing Electronic Business Processes, pp.101~112 (2011), Vieweg+Teubner Verlag
- S. Sembhi, "The business model for information security", RSA Conference Europe (2010)
- "Leverage points: places to intervene in a system" (1999)[URL]
- "An introduction to the business model for information security" (2010)[URL]
- "ISACA issues new comprehensive business model for information security" (2010)[URL]
- R. D. Daniel, "Management information crisis", Harvard Business Review, 39(5), pp.111~121 (1961)
- J. F. Rockart, "Chief executives define their own data needs", Harvard Business Review, 57(2), pp.81~93 (1979)
- A primer on critical success factors, "C. V. Bullen", Center for Information Systems Research, ~, pp.Working Paper No. 69 (1981)
- "Critical Success Factor"[URL]
- The critical success factor method: establishing a foundation for enterprise security management, "R. A. Caralli", Carnegie Mellon University, ~, pp.Technical Report CMU (2004), SEI-2004-TR-010
- J. S. Wang, "How to manage information security in cloud computing", IEEE International Conference on Systems, Man, and Cybernetics, pp.1405~1410 (2011)
- D. Vohradsky, "Cloud risk : 10 principles and a framework for assessment", ISACA Journal, 5, pp.31~41 (2012)
- "Lever"[URL]
- "Top Threats to Cloud Computing V1.0" (2010)[URL]
- V. Mukhin, "Notice of violation of IEEE publication principles security risk analysis for cloud computing systems", Proceedings of the IEEE 6th International Conference on Intelligent Data Acquisition and Advanced Computing Systems, pp.737~742 (2011)
- W. A. Jansen, "Cloud hooks: security and privacy issues in cloud computing", Proceeding of the 44th Hawaii International Conference on System Sciences, pp.1~10 (2011)
- Y. Kadam, "Security issues in cloud computing : a transparent view", International Journal of Computer Science & Emerging Technologies, 2(5), pp.316~322 (2011)
- "“Gartner: seven cloud-computing security risks,” InfoWorld News"[URL]
- S. K. B. Tammaiah, "Cloud computing data security internet and web system2-term paper", ~
- D. Firesmith, "Specifying reusable security requirements", Journal of Object Technology, 3(1), pp.61~75 (2004)
- "Technology"[URL]
- Y. Li, "Security & standards in the Cloud: building trust through openness and interoperability in the Cloud", ~
- P. Saripalli, "QUIRC: a quantitative impact and risk assessment framework for cloud security", Proceedings of the IEEE 3rd International Conference on Cloud Computing, pp.280~288 (2010)