Addressing security compatibility for multi-tenant cloud services. (2013)

• Record Type: Journal Article
• Authors: Khan, Khaled M.; Erradi, Abdelkarim; Alhazbi, Saleh; Han, Jun
• Is Part Of: International journal of computer applications technology. Volume 47:Number 4(2013)
• Page Start: 370
• Page End: 378
• Publication Date: 2013
• Subjects: software services -- security compatibility -- security properties -- context-aware -- security ontology -- multi-tenant cloud services; Technology -- Data processing -- Periodicals; 620.00285
• Languages: English
• ISSNs: 0952-8091

Abstract

This paper addresses the issue of compatibility checking between the security requirements of service clients and the security assurances provided by multi-tenant cloud services. To allow early detection of security mismatches, our proposed framework provides a security ontology to support flexible specification of security policies and to allow semantic matching and run-time reasoning about the compatibility between security requirements and assurances of the interacting systems in multi-tenant service-oriented systems. The paper also defines various compositional models of a client based on the requirements of specific use context and users' profile of the client for a service.