Publikationen

Autor	Habib, Sheikh Mahbub; Varadharajan, Vijay; Mühlhäuser, Max
Datum	2013
Art	Conference Proceedings
Abstrakt	Trustworthy selection of cloud services has become a significant issue in emerging cloud marketplaces. As a consequence, the Cloud Security Alliance (CSA) has formulated a self-assessment framework for cloud providers to publish their cloud platform's security controls and capabilities. This framework enables consumers to select a cloud service based on the capabilities and controls published by the providers. However, a fundamental question that arises is, how can consumers trust that the security controls are satisfied as claimed by the providers and are compliant with consumers' requirements. This paper proposes a trust-aware framework to verify and evaluate these security controls considering consumers' requirements. First, we model the security controls in the form of trust properties. Then, we introduce a taxonomy of these properties based on their semantics and identify the authorities who can validate the properties. The taxonomy of these properties is the basis of trust formalisation in our proposed framework. The framework rests on the notion of hybrid trust that combines hard and soft trust mechanisms for verifying the trust properties. Furthermore, a decision model is proposed as an integral part of the framework in order to empower consumers to determine trustworthiness of cloud providers. Finally, we demonstrate that the proposed trust-aware security evaluation framework could be potentially useful in practice for consumers to determine trustworthy cloud providers in a competitive marketplace
ISBN	978-0-7695-5022-0
In	Trust, Security and Privacy in Computing and Communications (TrustCom), 2013 12th IEEE International Conference on, p.459-468
Publisher	IEEE
Schlüssel	TUD-CS-2013-0466
Url	https://tubiblio.ulb.tu-darmstadt.de/id/eprint/101918