عرض بسيط للتسجيلة

المؤلفNhlabatsi A.
المؤلفHong J.B.
المؤلفKim D.S.
المؤلفFernandez R.
المؤلفFetais N.
المؤلفKhan K.M.
تاريخ الإتاحة2020-03-18T08:10:08Z
تاريخ النشر2018
اسم المنشورProceedings - 2018 IEEE 18th International Conference on Software Quality, Reliability, and Security, QRS 2018
المصدرScopus
معرّف المصادر الموحدhttp://dx.doi.org/10.1109/QRS.2018.00049
معرّف المصادر الموحدhttp://hdl.handle.net/10576/13315
الملخصConventional security risk assessment approaches for cloud infrastructures do not explicitly consider risk with respect to specific threats. This is a challenge for a cloud provider because it may apply the same risk assessment approach in assessing the risk of all of its clients. In practice, the threats faced by each client may vary depending on their security requirements. The cloud provider may also apply generic mitigation strategies that are not guaranteed to be effective in thwarting specific threats for different clients. This paper proposes a threat-specific risk assessment framework which evaluates the security risk with respect to specific threats by considering only those threats that are relevant to a particular cloud client. The risk assessment process is divided into three phases which have inter-related activities arranged in a spiral. An application of the framework to a cloud deployment case study shows that considering risk with respect to specific threats leads to a more accurate quantification of security risk. Although our framework is motivated by security risk assessment challenges in the cloud it can be applied in any network environment. ? 2018 IEEE.
راعي المشروعACKNOWLEDGMENT This paper was made possible by Grant NPRP 8-531-1-111 from Qatar National Research Fund (QNRF). The statements made herein are solely the responsibility of the authors.
اللغةen
الناشرInstitute of Electrical and Electronics Engineers Inc.
الموضوعassessment framework
cloud
العنوانSpiralSRA: A threat-specific security risk assessment framework for the cloud
النوعConference Paper
الصفحات367 - 374
dc.accessType Abstract Only


الملفات في هذه التسجيلة

الملفاتالحجمالصيغةالعرض

لا توجد ملفات لها صلة بهذه التسجيلة.

هذه التسجيلة تظهر في المجموعات التالية

عرض بسيط للتسجيلة