Developing a Conceptual Framework for Cloud Security Assurance

Bob Duncan; David J. Pym; Mark Whittington

doi:10.1109/CloudCom.2013.144

Developing a Conceptual Framework for Cloud Security Assurance

Bob Duncan, David J. Pym, Mark Whittington

Research output: Chapter in Book/Report/Conference proceeding › Published conference contribution

16 Citations (Scopus)

96 Downloads (Pure)

Abstract

Managing information security in the cloud is a challenge. Traditional checklist approaches to standards compliance may well provide compliance, but do not guarantee to provide security assurance. The complexity of cloud relationships must be acknowledged and explicitly managed by recognising the implications of self-interest of each party involved. We begin development of a conceptual modelling framework for cloud security assurance that can be used as a starting point for effective continuous security assurance, together with a high level of compliance.

Original language	English
Title of host publication	2013 IEEE 5th International Conference on Cloud Computing Technology and Science (CloudCom)
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
Pages	120-125
Number of pages	6
Volume	2
ISBN (Electronic)	9780769550954
ISBN (Print)	9781479915484
DOIs	https://doi.org/10.1109/CloudCom.2013.144
Publication status	Published - 5 Dec 2013
Event	Cloud Com 2013 - University of the West of England Exhibition and Conference Centre, Frenchay Campus, Coldharbour Lane, Bristol, Bristol, United Kingdom Duration: 2 Dec 2013 → 5 Dec 2013 http://cipsijoomla.ux.uis.no/index.php

Conference

Conference	Cloud Com 2013
Abbreviated title	CloudCom 2013
Country/Territory	United Kingdom
City	Bristol
Period	2/12/13 → 5/12/13
Internet address	http://cipsijoomla.ux.uis.no/index.php

Keywords

cloud computing
security
assurance
framework
compliance

Access to Document

10.1109/CloudCom.2013.144Licence: Unspecified

Accepted Manuscript
© 2013 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
Accepted author manuscript, 406 KBLicence: Unspecified

Cite this

Developing a Conceptual Framework for Cloud Security Assurance. / Duncan, Bob; Pym, David J.; Whittington, Mark.
2013 IEEE 5th International Conference on Cloud Computing Technology and Science (CloudCom). Vol. 2 Institute of Electrical and Electronics Engineers (IEEE), 2013. p. 120-125.

Research output: Chapter in Book/Report/Conference proceeding › Published conference contribution

Duncan, B, Pym, DJ & Whittington, M 2013, Developing a Conceptual Framework for Cloud Security Assurance. in 2013 IEEE 5th International Conference on Cloud Computing Technology and Science (CloudCom). vol. 2, Institute of Electrical and Electronics Engineers (IEEE), pp. 120-125, Cloud Com 2013, Bristol, United Kingdom, 2/12/13. https://doi.org/10.1109/CloudCom.2013.144

@inproceedings{6466470a49b04ba99fcd1bb93432da9d,

title = "Developing a Conceptual Framework for Cloud Security Assurance",

abstract = "Managing information security in the cloud is a challenge. Traditional checklist approaches to standards compliance may well provide compliance, but do not guarantee to provide security assurance. The complexity of cloud relationships must be acknowledged and explicitly managed by recognising the implications of self-interest of each party involved. We begin development of a conceptual modelling framework for cloud security assurance that can be used as a starting point for effective continuous security assurance, together with a high level of compliance.",

keywords = "cloud computing, security, assurance, framework, compliance",

author = "Bob Duncan and Pym, {David J.} and Mark Whittington",

year = "2013",

month = dec,

day = "5",

doi = "10.1109/CloudCom.2013.144",

language = "English",

isbn = "9781479915484",

volume = "2",

pages = "120--125",

booktitle = "2013 IEEE 5th International Conference on Cloud Computing Technology and Science (CloudCom)",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

note = "Cloud Com 2013, CloudCom 2013 ; Conference date: 02-12-2013 Through 05-12-2013",

url = "http://cipsijoomla.ux.uis.no/index.php",

}

TY - GEN

T1 - Developing a Conceptual Framework for Cloud Security Assurance

AU - Duncan, Bob

AU - Pym, David J.

AU - Whittington, Mark

PY - 2013/12/5

Y1 - 2013/12/5

N2 - Managing information security in the cloud is a challenge. Traditional checklist approaches to standards compliance may well provide compliance, but do not guarantee to provide security assurance. The complexity of cloud relationships must be acknowledged and explicitly managed by recognising the implications of self-interest of each party involved. We begin development of a conceptual modelling framework for cloud security assurance that can be used as a starting point for effective continuous security assurance, together with a high level of compliance.

AB - Managing information security in the cloud is a challenge. Traditional checklist approaches to standards compliance may well provide compliance, but do not guarantee to provide security assurance. The complexity of cloud relationships must be acknowledged and explicitly managed by recognising the implications of self-interest of each party involved. We begin development of a conceptual modelling framework for cloud security assurance that can be used as a starting point for effective continuous security assurance, together with a high level of compliance.

KW - cloud computing

KW - security

KW - assurance

KW - framework

KW - compliance

U2 - 10.1109/CloudCom.2013.144

DO - 10.1109/CloudCom.2013.144

M3 - Published conference contribution

SN - 9781479915484

VL - 2

SP - 120

EP - 125

BT - 2013 IEEE 5th International Conference on Cloud Computing Technology and Science (CloudCom)

PB - Institute of Electrical and Electronics Engineers (IEEE)

T2 - Cloud Com 2013

Y2 - 2 December 2013 through 5 December 2013

ER -

Developing a Conceptual Framework for Cloud Security Assurance

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this