Evaluation of cloud computing offers through security risks - An industrial case study

Auteurs

J. Remiche, J. Aubert, and N. Mayer

Référence

in 8th International Conference on Cloud Computing and Services Science, pp. 338-345, 2018.

Description

Cloud provider selection is a difficult task, even more when security is a critical aspect of the processes to be moved on the cloud. To support cloud offer selection by a cloud consumer, we have introduced an innovative risk-based approach, proposing to distribute risk assessment activities between the cloud provider and the cloud consumer. This paper proposes an evaluation of this approach by assessing and comparing the portfolio of offers of POST Telecom, a cloud provider in Luxembourg. The case study will cover the evaluation of the offers with the help of standard security controls provided by three leading cloud organizations: Cloud Security Alliance, ISO/IEC and SANS Institute.

Lien

doi:10.5220/0006665703380345

Partager cette page :