Virtualisation security risk assessment for enterprise cloud services based on stochastic game nets model. (1st January 2018)

• Record Type: Journal Article
• Authors: Lv, Junjie; Rong, Juling
• Is Part Of: IET information security. Volume 12:Number 1(2018)
• Page Start: 7
• Page End: 14
• Publication Date: 2018-01-01
• Subjects: virtualisation -- security of data -- risk management -- cloud computing -- stochastic games -- resource allocation; virtualisation security risk assessment -- enterprise cloud services -- stochastic game nets model -- resource virtualisation -- resource utilisation efficiency -- service quality; Computer security -- Periodicals; Cryptography -- Periodicals; Computer networks -- Security measures -- Periodicals; Database security -- Periodicals; 005.8
• DOI: 10.1049/iet-ifs.2017.0038
• Languages: English
• ISSNs: 1751-8709

Abstract

Abstract : Resource virtualisation is a prominent characteristic of cloud services, and it determines the resource utilisation efficiency and service quality. However, the virtualisation security issues also have a significant impact on the safety of cloud services. The security of virtualisation in cloud services is so complicated that current security risk assessment methods generally have some limitations when applying in cloud services. In this work, a security risk assessment model has been proposed for cloud services as a solution of this problem using stochastic game nets. Based on graphical tools, the virtualisation security risk scenario of cloud services can be described clearly, and virtualisation security risk factors can be evaluated accurately. The analysis results proved this method had powerful ability to simulate complicated and dynamic security issues in cloud services. Furthermore, our achievements can be used to help the cloud provider or tenant of the cloud service system taking corresponding measures to mitigate the risk.