A Risk Assessment Framework and Software Toolkit for Cloud Service Ecosystems

作者: Karim Djemame , Django J. Armstrong , Ming Jiang , Mariam Kiran

DOI:

关键词:

摘要: As the realization of Cloud computing environments advances from a simple and single private towards more complex Service Ecosystem consisting multiple coexisting public or hybrid Clouds, there are emerging high level concerns such as risk, trust, ecological, security, cost legal factors that underpin non-functional properties ecosystem. These beyond traditional focus providing functionalities at levels close to infrastructure hardware resource virtualization. In this paper we present ongoing research work analyze address risk factor in for purpose optimizing service. The main contributions design implementation an effective efficient assessment framework (methodologies identification, evaluation, mitigation monitoring) service provision. Together with corresponding strategies, provides technological assurance will lead higher confidence consumers on one side cost-effective reliable productivity Provider (SP) resources organized by individual Infrastructure (IP) other side. its software toolkit is part development OPTIMIS (Optimized Services) project whose objective enable open dependable delivers IT services adaptable, reliable, auditable sustainable both ecologically economically. Keywords-risk assessment; services; provider; optimization.

参考文章(13)
Terry Bollinger, Jody Heaney, Duane Hybertson, Susan Chapin, Douglas Williams, Information Assurance for Enterprise Engineering ,(2002)
Christer Carlsson, Robert Fullér, Risk Assessment of SLAs in Grid Computing with Predictive Probabilistic and Possibilistic Models Preferences and Decisions. pp. 11- 29 ,(2010) , 10.1007/978-3-642-15976-3_2
Karim Djemame, James Padgett, Iain Gourlay, Kerstin Voss, Odej Kao, Risk Management in Grids John Wiley & Sons, Inc.. pp. 335- 353 ,(2009) , 10.1002/9780470455432.CH15
Xuan Zhang, Nattapong Wuwong, Hao Li, Xuejie Zhang, Information Security Risk Management Framework for the Cloud Computing Environments 2010 10th IEEE International Conference on Computer and Information Technology. pp. 1328- 1334 ,(2010) , 10.1109/CIT.2010.501
A Ali-Eldin, RM Badia, M Corrales, T Dimitrakos, K Djemame, E Elmroth, N Forgó, J Guitart, F Hernández, B Hudzia, A Juan, A Kipp, K Konstanteli, G Kousiouris, S Nair, T Sharif, C Sheridan, R Sirvent, J Tordsson, T Varvarigou, S Wesner, W Ziegler, C Zsigri, OPTIMIS: A holistic approach to cloud service provisioning Future Generation Computer Systems. ,vol. 28, pp. 66- 77 ,(2012) , 10.1016/J.FUTURE.2011.05.022
K. Djemame, J. Padgett, I. Gourlay, D. Armstrong, Brokering of risk-aware service level agreements in grids Concurrency and Computation: Practice and Experience. ,vol. 23, pp. 1558- 1582 ,(2011) , 10.1002/CPE.1721
Chee Shin Yeo, Rajkumar Buyya, Integrated Risk Analysis for a Commercial Computing Service in Utility Computing Journal of Grid Computing. ,vol. 7, pp. 1- 24 ,(2009) , 10.1007/S10723-008-9103-2
Prasad Saripalli, Ben Walters, QUIRC: A Quantitative Impact and Risk Assessment Framework for Cloud Security international conference on cloud computing. pp. 280- 288 ,(2010) , 10.1109/CLOUD.2010.22
Matei Zaharia, Ariel Rabkin, Michael Armbrust, David A. Patterson, Andrew Konwinski, Anthony D. Joseph, Gunho Lee, Ion Stoica, Randy H. Katz, Armando Fox, Rean Griffith, Above the Clouds: A Berkeley View of Cloud Computing Science. ,vol. 53, pp. 07- 013 ,(2009)
Aye Morali, Roel Wieringa, Risk-based Confidentiality Requirements Specification for Outsourced IT Systems requirements engineering. pp. 199- 208 ,(2010) , 10.1109/RE.2010.30