SCCAF: A Secure and Compliant Continuous Assessment Framework in Cloud‐Based IoT Context

Li, Xiang; Jin, Xin; Wang, Qixu; Cao, Mingsheng; Chen, Xingshu

doi:10.1155/2018/3078272

Cited by 10 publications

(6 citation statements)

References 46 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Research by [30] proposed a secure and compliant continuous assessment framework for evaluating the security and compliance levels of cloud services. The proposed framework facilitates cloud service to customers to select an optimal cloud service provider (CSP) who satisfies their desired security requirements.…”

Section: B Existing Research Workmentioning

confidence: 99%

See 1 more Smart Citation

A Review of Security Standards and Frameworks for IoT-Based Smart Environments

Karie¹,

et al. 2021

View full text Add to dashboard Cite

Assessing the security of IoT-based smart environments such as smart homes and smart cities is becoming fundamentally essential to implementing the correct control measures and effectively reducing security threats and risks brought about by deploying IoT-based smart technologies. The problem, however, is in finding security standards and assessment frameworks that best meets the security requirements as well as comprehensively assesses and exposes the security posture of IoT-based smart environments. To explore this gap, this paper presents a review of existing security standards and assessment frameworks which also includes several NIST special publications on security techniques highlighting their primary areas of focus to uncover those that can potentially address some of the security needs of IoT-based smart environments. Cumulatively a total of 80 ISO/IEC security standards, 32 ETSI standards and 37 different conventional security assessment frameworks which included seven NIST special publications on security techniques were reviewed. To present an all-inclusive and up-to-date state-of-the-art research, the review process considered both published security standards and assessment frameworks as well as those under development. The findings show that most of the conventional security standards and assessment frameworks do not directly address the security needs of IoT-based smart environments but have the potential to be adapted into IoT-based smart environments. With this insight into the state-of-the-art research on security standards and assessment frameworks, this study helps advance the IoT field by opening new research directions as well as opportunities for developing new security standards and assessment frameworks that will address future IoT-based smart environments security concerns. This paper also discusses open problems and challenges related to IoT-based smart environments security issues. As a new contribution, a taxonomy of challenges for IoT-based smart environment security concerns drawn from the extensive literature examined during this study is proposed in this paper which also maps the identified challenges to potential proposed solutions.

show abstract

Section: B Existing Research Workmentioning

confidence: 99%

“…The proposed framework facilitates cloud service to customers to select an optimal cloud service provider (CSP) who satisfies their desired security requirements. However, the framework also enables cloud service customers to evaluate the compliance of the selected CSP in the process of using cloud services [30].…”

Section: B Existing Research Workmentioning

confidence: 99%

A Review of Security Standards and Frameworks for IoT-Based Smart Environments

Karie¹,

et al. 2021

View full text Add to dashboard Cite

show abstract

“…H7c-TDS participation has a significant positive impact on ISD. [51]. It has the characteristics of heterogeneity, value, difference, and irreplaceability and can bring unique value to customers.…”

Section: Tds Participation and Vccmentioning

confidence: 99%

The Value Cocreation Influence Mechanism of Network Freight Transport Platform in IoT‐Based Environments: Under the Service‐Dominant Logic

Bai

et al. 2021

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

The Internet of Things (IoT) has brought many benefits to the development of industries, from manufacturing to services. In the context of IoT, the network freight transport platform is equivalent to an integrator, integrating the scattered resources such as carriers and shippers in the supply chain, providing a solution, improving the use efficiency of vehicles, effectively reducing logistics cost, and creating value for the freight transport platform and bilateral customers. The purpose of this research is to explain the influence mechanism of transport demand subjects’ participation in value cocreation (VCC) under the service-dominant logic (SDL). We proposed a conceptual framework and 10 hypotheses and used SEM to measure the direct and mediating relationship among SDL, transport demand subject (TDS) participation, relational embeddedness (RE), platform VCC, and TDS value in the online business environment. The findings show that (1) SDL, TDS participation, and RE do not directly affect the TDS value, but indirectly through platform VCC; (2) SDL affects platform VCC not only directly but also indirectly through TDS participation and RE; (3) TDS participation affects platform VCC not only directly but also indirectly through RE; (4) RE indirectly affects TDS value by affecting platform VCC; and (5) platform VCC plays a mediating role in SDL, TDS participation, RE, and TDS value. Hence, transport enterprises should pay attention to the innovation concept, guide TDS participation, jointly improve platform VCC, give play to the network effect of the freight transport platform, and achieve TDS value through the deepening of TDS relationship embedding.

show abstract

“…It is worthy considering that the status of QoS attributes would fluctuate dynamically during the running time of cloud service in the real cloud context [25]. actual operation process.…”

Section: Determine the Objective Weights Of Qos Attributesmentioning

confidence: 99%

FASTCloud: A framework of assessment and selection for trustworthy cloud service based on QoS

Li¹

2020

Preprint

Self Cite

View full text Add to dashboard Cite

By virtue of technology and benefit advantages, cloud computing has increasingly attracted a large number of potential cloud consumers (PCC) plan to migrate traditional business to the cloud service. However, trust has become one of the most challenging issues that prevent the PCC from adopting cloud services, especially in trustworthy cloud service selection. In addition, due to the diversity and dynamic of quality of service (QoS) in cloud environment, the existing trust assessment methods based on the single constant value of QoS attribute and the subjective weight assignment are not good enough to provides an effective solution for PCCs to identify and select a trustworthy cloud service among a wide range of functionally-equivalent cloud service providers (CSP). To address the challenge, a novel assessment and selection framework for trustworthy cloud service, FASTCloud, is proposed in this study. This framework facilitate PCCs to select a trustworthy cloud service based on their actual QoS requirements. In order to accurately and efficiently assess the trust level of cloud services, a QoS-based trust assessment model is proposed. This model represents a trust level assessment method based on the interval multiple attributes with a objective weight assignment method based on the deviation maximization to adaptively determine the trust level of different cloud services provisioned by candidate CSPs. The advantage of proposed trust level assessment method in time complexity is demonstrated by the performance analysis

show abstract

SCCAF: A Secure and Compliant Continuous Assessment Framework in Cloud‐Based IoT Context

Cited by 10 publications

References 46 publications

A Review of Security Standards and Frameworks for IoT-Based Smart Environments

A Review of Security Standards and Frameworks for IoT-Based Smart Environments

The Value Cocreation Influence Mechanism of Network Freight Transport Platform in IoT‐Based Environments: Under the Service‐Dominant Logic

FASTCloud: A framework of assessment and selection for trustworthy cloud service based on QoS

Contact Info

Product

Resources

About