Conference

Authors: Pavlidis M., Mouratidis C., Kalloniatis C., Islam S., Gritzalis S.
Title: Trustworthy Selection of Cloud Providers based on Security and Privacy Requirements: Justifying Trust Assumptions
Conference: TRUSTBUS 2013 10th International Conference on Trust, Privacy and Security in Digital Business
Editors: S. Furnell, C. Lambrinoudakis
Ed: No
Eds: Yes
Pages: 185-198
To appear: No
Month: August
Year: 2013
Place: Prague, Czech
Pubisher: Springer LNCS Lecture Notes in Computer Science
Link: http://link.springer.com/content/pdf/10.1007%2F978-3-642-40343-9_16.pdf
File name:
Abstract: Cloud computing is a new paradigm with a promising potential. However, issues of security, privacy, and trust raise concerns and discourage its adoption. In previous work we presented a framework for the selection of appropriate cloud provider based on security and privacy requirements criteria. However, the adoption of cloud includes release of control over valuable assets, which constitutes trust in the cloud provider of paramount importance. In this paper we extend the framework by incorporating trust and control concepts in its language and adding a new activity to properly identify and reason about trust assumptions during the selection of appropriate cloud provider. Also, the CASE tool was extended to support the new activity. A case study is used to illustrate the usefulness of our approach.