作者: Janet L. Kourik
DOI:
关键词: Cloud computing 、 Software security assurance 、 Capital expenditure 、 Knowledge management 、 Risk management 、 Cloud computing security 、 Utility computing 、 Context (language use) 、 Engineering 、 Computer security 、 Transparency (human–computer interaction)
摘要: Cloud computing is composed of complex systems using many different technologies, services, and delivery mechanisms growing dramatically. Potential benefits cloud include reducing IT capital expenditure, providing rapid dynamic scaling resources on a metered basis, as well transparency related to platforms, storage, transmission processing data. However, these come with potential problems. There an urgent need investigate understand security assurance in computing. Small medium enterprises (SMEs) may be unable dedicate specialized staff other this end. This paper argues that emerging taxonomies, frameworks guidelines, collectively referred instruments paper, can facilitate SME enquiry into The have been developed refined by industry government consortia. Yet, are rarely referenced the academic literature, drawing attention continuing gap between academia. proposal oriented context prevailing definition model drawbacks presented. Organizations responsible for developing depicted followed systematic approach based upon instruments. Risk assessment several central illuminating SMEs. Additionally, offers opportunity collaboration.