.png){kind=icon}
返回
Application design phase risk assessment framework using cloud security domains
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jisa.2020.102617.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Security risk assessment is done to identify the vulnerabilities of a client's application and develop strong security measures within budgetary constraints. However, while migrating to the Cloud platform, a generic notion of their publicly available security policies make it challenging for clients to assess the security threats solely relevant to their applications. Additionally, traditional risk assessment techniques cannot address these challenges as they neither consider cloud security domains as assessment criteria nor identifies critical system resources that need to be protected in the likelihood of a successful attack. In order to address these challenges, this paper presents a risk assessment framework for clients' applications that is characterized by the inclusion of cloud security metrics to perform risk assessment during the design phase of an application by incorporating the techniques of cloud misuse patterns. It also helps improve the security requirements phase that precedes risk assessment, by illustrating clients how different attack scenarios can spread through the applications by using the concepts of percolation centrality and probabilistic state transition diagrams. One of the key findings this work address is how to systematically gain a distinction between multiple system resources belonging to the same security defense priority level.
Keyword:
Cloud computing
Cloud migration
Security risk assessment
Software development lifecycle
Misuse patterns
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.7
论文数:
2.0K
被引数:
4.9K
机构
引用论文
Using SMCD to reduce inconsistencies in misuse case models: A subject-based empirical evaluation使用SMCD减少滥用案例模型中的不一致: 基于主题的实证评估
.png){kind=icon}
PREAI
分享收藏分享收藏分享收藏
查看更多内容