Authors:
Tian Xia
1
;
Hironori Washizaki
1
;
Takehisa Kato
2
;
Haruhiko Kaiya
3
;
Shinpei Ogata
4
;
Eduardo B. Fernandez
5
;
Hideyuki Kanuka
6
;
Masayuki Yoshino
6
;
Dan Yamamoto
6
;
Takao Okubo
7
;
Nobukazu Yoshioka
8
and
Atsuo Hazeyama
9
Affiliations:
1
Waseda University, Japan
;
2
Toshiba Digital Solutions Corporation, Japan
;
3
Kanagawa University, Japan
;
4
Shinshu University, Japan
;
5
Florida Atlantic University, United States
;
6
Hitachi Ltd., Japan
;
7
Institute of Information Security, Japan
;
8
National Institute of Informatics, Japan
;
9
Tokyo Gakugei University, Japan
Keyword(s):
Cloud Computing, Metamodel Model, Security Patterns, Privacy Patterns, Software and System Architecture.
Related
Ontology
Subjects/Areas/Topics:
MetaModeling
;
Models
;
Paradigm Trends
;
Software Engineering
Abstract:
Security and privacy are important in cloud services. Numerous security and privacy patterns as well as non-pattern-based knowledge such as practices and principles exist in cloud services. Selecting and combining the appropriate knowledge is difficult due to numerous options and the nature of the layered cloud stack. Herein we propose a metamodel called the Cloud Security and Privacy Metamodel (CSPM) to handle security and privacy in cloud service development and operations. CSPM can classify and support existing cloud security and privacy patterns and practices in a consistent and uniform manner. Moreover, we propose a security and privacy aware process to develop cloud system utilizing CSPM. Several case studies verify the effectiveness and usability of our approach. As a result, we confirmed effectiveness and usability of CSPM, as well as some possible future work.