A RISK MANAGEMENT FRAMEWORK FOR CLOUD COMPUTING

摘要：

　　Although cloud computing has the advantages of cost-saving,efficiency and scalability,it also brings about many security issues.Because almost all software,hardware,and application data are deployed and stored in the cloud platforms,there is often the distrust between users and cloud suppliers.To resolve the problem,this paper proposes a risk management framework on the basis of the previous work.The framework consists of five components:user requirement self-assessment,cloud service providers desktop assessment,risk assessment,third-party agencies review,and continuous monitoring.By means of the framework,the cloud service suppliers can better understand the users requirements,and the trust between the users and the suppliers is more easily acquired.

关键词： Cloud computing security Risk management framework Security assessment Trust

作者: Feng Xie Yong Peng Wei Zhao Dongqing Chen Xiaoran Wang Xingmei Huo

作者单位: China Information Technology Security Evaluation Center,Beijing 100085,China Beijing Institute of Technology,Beijing 100081,China

会议类型: 国际会议

会议名称: 2012 2nd IEEE International Conference on Cloud Computing and Intelligence Systems (2012年第2届IEEE云计算与智能系统国际会议(IEEE CCIS2012))

会议地点: 杭州

会议语种:英文

页码: 608-612

在线出版日期: 2012-10-30（万方平台首次上网日期，不代表论文的发表时间）