Risk Assessment for Cloud-Based IT Systems

Authors:
Yuyu Chou;Jan Oetting
Affiliations:
Berlin Institute of Technology, Germany;Consileon Business Consultancy GmbH, Germany
Venue:
International Journal of Grid and High Performance Computing
Year:
2011

Citing 7
Cited 0

Distributed Systems: Principles and Paradigms (2nd Edition)

Distributed Systems: Principles and Paradigms (2nd Edition)
Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds

Proceedings of the 16th ACM conference on Computer and communications security
Outlook: Cloudy with a Chance of Security Challenges and Improvements

IEEE Security and Privacy
Cloud Computing in Developing Economies

Computer
In Trust We Trust

Computer
Design science in information systems research

MIS Quarterly
SP 800-145. The NIST Definition of Cloud Computing

SP 800-145. The NIST Definition of Cloud Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

The use of Cloud Computing services is an attractive option to improve IT systems to achieve rapidly and elastically provisioned capability, and also to offer economic benefits. However, companies see security as a major concern in migrating to the Cloud. To bring clarity in Cloud security, this paper presents a systematic approach to manage the risks and analyzes the full range of risk in Cloud Computing solutions. Furthermore, as a study case, Google App Engine Platform is assessed based on ISO/IEC 27002 and OWASP Top 10 Risk List in this paper. Knowing the risks of Cloud solutions, companies can execute well-informed decisions on going into the Cloud and build their Cloud solutions in a secure way, relying on a robust e-trust relationship.