Access Control and Security Properties Requirements Specification for Clouds' SecLAs

Guesmi, Asma; Clemente, Patrice

doi:10.1109/cloudcom.2013.133

Cited by 7 publications

(8 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Guesmi and Clemente in [7] described security-related SLAs in relation to problems arise in cloud-based services. The authors noted that external SPs should be able to describe what they can supply regarding security capabilities specified in SLAs according to security requirements, which help the providers to convince the customers regarding their security capabilities.…”

Section: Reflection With Related Workmentioning

confidence: 99%

“…However, there is an absence of coherent approaches for preserving the confidentiality of sensitive data across GAs when using such SLAs. On top of that, most external SPs place a greater emphasis on the system availability and performance aspects, but overlook security in SLAs [3,4,7]. Also, they do not adequately incorporate security capabilities of the SPs into formulating security-related SLAs.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Investigating Security Capabilities in Service Level Agreements as Trust-Enhancing Instruments

Nugraha

Martin

2017

Trust Management XI

View full text Add to dashboard Cite

Many government agencies (GAs) increasingly rely on external computing, communications and storage services supplied by service providers (SPs) to process, store or transmit sensitive data to increase scalability and decrease the costs of maintaining services. The relationships with external SPs are usually established through service level agreements (SLAs) as trust-enhancing instruments. However, there is a concern that existing SLAs are mainly focused on the system availability and performance aspects, but overlook security in SLAs. In this paper, we investigated 'real world' SLAs in terms of security guarantees between GAs and external SPs, using Indonesia as a case study. This paper develops a grounded adaptive Delphi method to clarify the current and potential attributes of security-related SLAs that are common among external service offerings. To this end, we conducted a longitudinal study of the Indonesian government auctions of 59 e-procurement services from 2010-2016 to find 'auction winners'. Further, we contacted five selected major SPs (n=15 experts) to participate in a three-round Delphi study. Using a grounded theory analysis, we examined the Delphi study data to categorise and generalise the extracted statements in the process of developing propositions. We observed that most of the GAs placed significant importance on service availability, but security capabilities of the SPs were not explicitly expressed in SLAs. Additionally, the GAs often use the provision of service availability to demand additional security capabilities supplied by the SPs. We also observed that most of the SPs found difficulties in addressing data confidentiality and integrity in SLAs. Overall, our findings call for a proposition-driven analysis of the Delphi study data to establish the foundation for incorporating security capabilities into security-related SLAs.

show abstract

Section: Reflection With Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Investigating Security Capabilities in Service Level Agreements as Trust-Enhancing Instruments

Nugraha

Martin

2017

Trust Management XI

View full text Add to dashboard Cite

show abstract

“…Of course, the lack of assurance of confidentiality and integrity of handled sensitive government data is a major drawback. For instance, Guesmi and Clemente [9] pointed out that existing cloud SPs do not express service provisions in terms of data protection and data security in their SLAs.…”

Section: Background and Related Workmentioning

confidence: 99%

Towards the Classification of Confidentiality Capabilities in Trustworthy Service Level Agreements

Nugraha

Martin

2017

2017 IEEE International Conference on Cloud Engineering (IC2E)

View full text Add to dashboard Cite

“…This two security requirements are usually used in some cloud based data sharing scenarios, such as [3][4][5]. While the third one is mainly about the SLA, several research work has considered [6][7][8]. [6] proposes a SLA-driven resource allocation scheme but does not provide cross-layer elasticity management.…”

Section: Introductionmentioning

confidence: 99%

“…Using collaboration in network environment is no longer a conventional abstract conception but truly involved in many cyber areas, while in cloud computing scenery, people like Almorsy proposed the notion of evaluating Cloud SecLAs, by introducing a metric to benchmark the security of a CSP based on categories [8]. Xu etc.…”

Section: Introductionmentioning

confidence: 99%

Collaborative intrusion detection as a service in cloud computing environment

Liang

Wang

et al. 2015

2015 IEEE International Conference on Progress in Informatics and Computing (PIC)

View full text Add to dashboard Cite

With the growing trends of cloud computing, the security issues in this area are growing at the same speed as its development. Some malicious intruders and other malware activities tend to find the inner vulnerabilities and spare no effort to control the administration or conduct the pure break-down service with curiosity or on purpose. Traditional defense systems such as firewall, intrusion detection and malware code system are still utilized in nowadays network scenes, but they may not support enough in cloud computing environment with old fashioned architectures. Here we focus on intrusion detection system (IDS) to defend against intruders and other attacks. In this paper, we proposed a collaborative intrusion detection service and our goal is to make use of the state-of-the-art computing framework in cloud environment and to provide a rounded IDS service for both cloud providers and cloud tenants, while the collaborative architecture will help to respond to the attacks promptly. We set up our system prototype and discuss the empirical results on the preference. The experimental results demonstrate that our system does enhance the security when some network-based attacks happen and ensure that both cloud service providers and tenants are protected with satisfaction.

show abstract

Access Control and Security Properties Requirements Specification for Clouds' SecLAs

Cited by 7 publications

References 9 publications

Investigating Security Capabilities in Service Level Agreements as Trust-Enhancing Instruments

Investigating Security Capabilities in Service Level Agreements as Trust-Enhancing Instruments

Towards the Classification of Confidentiality Capabilities in Trustworthy Service Level Agreements

Collaborative intrusion detection as a service in cloud computing environment

Contact Info

Product

Resources

About