Authors: | Pavlidis M., Mouratidis C., Kalloniatis C., Islam S., Gritzalis S. |
---|
Title: | Trustworthy Selection of Cloud Providers based on Security and Privacy Requirements: Justifying Trust Assumptions |
---|
Conference: | TRUSTBUS 2013 10th International Conference on Trust, Privacy and Security in Digital Business |
---|
Editors: | S. Furnell, C. Lambrinoudakis |
---|
Ed: | No |
---|
Eds: | Yes |
---|
Pages: | 185-198 |
---|
To appear: | No |
---|
Month: | August |
---|
Year: | 2013 |
---|
Place: | Prague, Czech |
---|
Pubisher: | Springer LNCS Lecture Notes in Computer Science |
---|
Link: | http://link.springer.com/content/pdf/10.1007%2F978-3-642-40343-9_16.pdf |
---|
File name: | |
---|
Abstract: | Cloud computing is a new paradigm with a promising potential. However, issues of security, privacy, and trust raise concerns and discourage its adoption. In previous work we presented a framework for the selection of appropriate cloud provider based on security and privacy requirements criteria. However, the adoption of cloud includes release of control over valuable assets, which constitutes trust in the cloud provider of paramount importance. In this paper we extend the framework by incorporating trust and control concepts in
its language and adding a new activity to properly identify and reason about trust assumptions during the selection of appropriate cloud provider. Also, the CASE tool was extended to support the new activity. A case study is used to illustrate the usefulness of our approach. |