Towards Model-Based Security Assessment of Cloud Applications

摘要: Security issues are still posing limitations to the full exploitation of potential cloud computing paradigm, and developers more required take security into account from very beginning development process. Unfortunately, application classical best practices may be not enough due involvement services provided by third-parties out control developer. In this paper, overcome issue, we introduce discuss a model-based process for assessment applications. particular, suggest complete that can executed within lifecycle application, requirement elicitation up validation (both static dynamic through generation execution suitable test cases) final deployment against requirements. work, sketch main phases illustrate high-level modelling languages have been defined describe an at different levels abstraction formalize both requirements applications features offered existing services. A running example involving simple yet realistic is used throughout paper better proposal demonstrate its feasibility effectiveness.