A user oriented cloud security evaluation framework. (2015)

• Record Type: Journal Article
• Authors: Rizvi, Syed; Karpinski, Kelsey; Kelly, Brennen; Walker, Taryn
• Is Part Of: International journal on trust management in computing and communications. Volume 3:Number 2(2015)
• Page Start: 168
• Page End: 192
• Publication Date: 2015
• Subjects: cloud computing -- trust -- security validation -- third party auditor -- TPA -- cloud service providers -- CSP -- cloud service users -- CSU -- user oriented cloud security -- security evaluation -- security auditing -- security preferences; Data protection -- Periodicals; Database management -- Periodicals; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.8
• Languages: English
• ISSNs: 2048-8378

Abstract

Recent trends within the IT industry have led to a tectonic shift in the way organisations utilise information systems to yield maximum efficiency. Cloud services are the cornerstone of the aforementioned paradigm permutation. The advent of cloud computing has brought with it a multitude of new and exciting concepts that can complicate security demands exponentially. These security demands must be met to ensure user trust. This paper presents a user-oriented security auditing framework to establish the user trust by: a) allowing the cloud users to provide their security preferences for the desired cloud services; b) providing an auditing mechanism to validate the security controls and internal security policies of cloud service providers (CSPs) published in the cloud security alliance (CSA) STAR database; c) maintaining a database of CSPs along with their responses to the consensus assessments initiative questionnaire (CAIQ) as well as the certificates issued by the certificate authorities.