A Framework for Evaluating Security in Multi-Cloud Environments

Navigating the Multi-Cloud Maze: Benefits, Challenges, and Future Trends

“…An intelligent security system and compliance framework are mandatory for correct multi-cloud implementation. Within the complicated landscape of multi-cloud environments, obtaining visibility and security awareness is quite challenging, courtesy of the distributed nature of application components across multiple clouds [45]. Hence, multi-cloud security requires a proper security evaluation framework, the benchmark for a thorough assessment of the app components deployed on different types of clouds, and the overall multi-cloud app [45].…”

“…Within the complicated landscape of multi-cloud environments, obtaining visibility and security awareness is quite challenging, courtesy of the distributed nature of application components across multiple clouds [45]. Hence, multi-cloud security requires a proper security evaluation framework, the benchmark for a thorough assessment of the app components deployed on different types of clouds, and the overall multi-cloud app [45]. In this regard, the framework helps in threat identification, risk analysis, selecting metrics and security controls, security monitoring, decision-making, and visualizing security status, improving visibility and trust in multi-cloud environments.…”

Understanding the challenges and novel architectural models of multi-cloud native applications – a systematic literature review

“…To overcome these issues, many security countermeasures have been proposed. To cope with management and organizational issues, novel security enforcement solutions [52,86,92,95] and frameworks [44,47,95,113] have been thought. The majority of them focused on new countermeasures and opportunities for the multi-cloud architectures, addressing data protection, access control models, novel cryptographic mechanisms, privacy preserving mechanisms, policy conflicts management.…”

“…In view of this, it thus becomes necessary to ensure adequate transparency and security awareness in multi-cloud environments. Authors in [113] exploited the possibility to model and evaluate security, and to develop frameworks and platforms to provide security with a quantitative approach. Authors in [69,91] introduced a security data model to manage security properties with Security SLAs.…”

“…• Characterization of the cloud continuum and its relationship with the cloud osmotic computing paradigm [74]. Cloud continuum is an emerging research topic that has arisen from the characterization of complex environments where every element Novel cryptographic techniques for multi-cloud [44,108] Security and policy conflicts in multi-cloud [73,75] Sharing security components and mechanisms in multi-cloud [65,80] Security Countermeasures Improving (Data) Security with multi-cloud [35,49,52,68,71,86,95,[110][111][112] Security enforcement framework [52,86,92,95] Novel architecture to enforce security [30,44,45,113] Unified Access Control models [70,82] Security-by-design methodologies Security-by-design and SecDevOps [57,69,91] Evaluating Security [113] Security Framework and PaaS [69,87] Optimization and SLA driven design [57,91] Security driven management and provisioning [96,114] the infrastructural layer can be considered as part of such a continuum. Several approaches define and address the term multi-cloud from a restricted perspective where the adjective "multi" is in fact defining only two or three different types of cloud elements (e,g, virtual machine, storage, database).…”