Authors:
Valentina Casola
1
;
Massimiliano Rak
2
and
Giuseppe Alfieri
2
Affiliations:
1
University of Naples Federico II, Italy
;
2
Second University of Naples, Italy
Keyword(s):
Cloud Computing, Security, Cloud Application, SPECS, Negotiation, SLA.
Related
Ontology
Subjects/Areas/Topics:
Cloud Application Architectures
;
Cloud Brokering
;
Cloud Computing
;
Communication and Software Technologies and Architectures
;
e-Business
;
Enterprise Information Systems
;
Federated Cloud
;
Languages, Tools and Architectures
;
Model-Driven Software Development
;
Platforms and Applications
;
Service Brokering
;
Service Modeling and Specification
;
Service-Oriented Architectures
;
Services Science
;
Services Security and Reliability
;
Software Engineering
;
Technology Platforms
Abstract:
Cloud security is today considered one of the main limits to the adoption of Cloud Computing. Academic
works and the Cloud community (e.g., work-groups at the European Network and Information Security
Agency, ENISA) have stated that specifying security parameters in Service Level Agreements actually enables
the establishment of a common semantic in order to model security among users and Cloud Service
providers (CSPs). However, despite the state of the art efforts aiming at building and representing Cloud
SecLAs there is still a gap on the techniques to reason about them. Moreover a lot of activities are being
carrying out to clearly state which are the parameters to be shared, their meanings and how they affect service
provisioning. In this paper we propose to build up a cloud application that is able to offer Security level Evaluation
based on SLA expressed in many different ways. Such application can be offered as a service by Third
Parties in order to help customers to evaluate t
he offerings from providers. Furthermore it can be used to help
customers to negotiate security parameters in a Multi-Cloud system and perform Cloud brokering on the basis
of a quantitative evaluation of security parameters.
(More)