A SECURITY METRICS FRAMEWORK FOR THE CLOUD

Jesus Luna, Hamza Ghani, Daniel Germanus, Neeraj Suri

2011

Abstract

Cloud computing is redefining the on-demand usage of remotely-located, and highly available computing resources to the user. Unfortunately, while the many economic and technological advantages are apparent, the migration of key sector applications to the Cloud has been limited due to a major show-stopper: the paucity of quantifiable metrics to evaluate the tradeoffs (features, problems and the economics) of security. Despite the obvious value ofmetrics in different scenarios to evaluate such tradeoffs, a formal and standard-based approach for the addressing of security metrics in the Cloud is a much harder and very much an open issue. This paper presents our views on the importance and challenges for developing a security metrics framework for the Cloud, also taking into account our ongoing research with organizations like the Cloud Security Alliance and European projects like ABC4Trust, CoMiFin and INSPIRE. This paper also introduces the basic building blocks of a proposed security metrics framework for elements such as a Cloud provider’s security assessment, taking into account the different service and deployment models of the Cloud.

Download


Paper Citation


in Harvard Style

Luna J., Ghani H., Germanus D. and Suri N. (2011). A SECURITY METRICS FRAMEWORK FOR THE CLOUD . In Proceedings of the International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2011) ISBN 978-989-8425-71-3, pages 245-250. DOI: 10.5220/0003446902450250

in Bibtex Style

@conference{secrypt11,
author={Jesus Luna and Hamza Ghani and Daniel Germanus and Neeraj Suri},
title={A SECURITY METRICS FRAMEWORK FOR THE CLOUD},
booktitle={Proceedings of the International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2011)},
year={2011},
pages={245-250},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0003446902450250},
isbn={978-989-8425-71-3},
}


in EndNote Style

TY - CONF
JO - Proceedings of the International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2011)
TI - A SECURITY METRICS FRAMEWORK FOR THE CLOUD
SN - 978-989-8425-71-3
AU - Luna J.
AU - Ghani H.
AU - Germanus D.
AU - Suri N.
PY - 2011
SP - 245
EP - 250
DO - 10.5220/0003446902450250