Assessment and Management the Security Risk of Public Cloud Service

Abstract:

Cloud computing has become a very attractive paradigm because of its economic and operational benefits. However, most enterprise executives hesitate to use cloud computing system due to the security and privacy challenges. We recognize that it is very important that enterprises assess the security risk before transforming their traditional information services into the cloud. In this paper, we discuss the existing information security risk assessment solutions and approaches, analysis the security challenges of the cloud computing. We propose a useful information security risk assessment and management framework for cloud computing environments and discuss the specific implement of framework.

• Periodical: Advanced Materials Research (Volumes 760-762)
• Pages: 959-965
• DOI: https://doi.org/10.4028/www.scientific.net/AMR.760-762.959
• Online since: September 2013
• Authors: Xin Wan, Xiao Yin Liu, Xiang Lin Kong
• Keywords: Cloud Service, Informant Security Risk Management, Risk Assessment

References

[1] Information technology — Security techniques — Information security management systems — Requriement, . ISO/IEC 27001: 2005 Standar.

DOI: 10.3403/30310928

[2] Information technology — Security techniques — Information security risk management,. ISO/IEC 27005: 2008 Standar.

DOI: 10.1007/978-3-658-08774-6_3

[3] http: /csrc. nist. gov/groups/SNS/cloud-computing/cloud-def-v15. doc.

[4] Jon Brodkin Guide for Conducting Risk Assessments". NIST Special Publication 800-30 Revision 1.

[5] Gartner: Seven cloud-computing security risks.

[6] Security Guidance for Critical Areas of Focus in Cloud Computing V3. 0.

[7] Axel Buecker, Koos Lodewijkx, Harold Moss, Kevin Skapinetz, Michael Waidner, Cloud Security Guidance IBM Recommendations for the Implementation of Cloud Security, IBM Corp. 2009, p.2, p.7, p.19.

[8] Maria Spinola, An Essential Guide to Possibilities and Risks of Cloud Computing, p.12, June (2009).