PROJECT TITLE :

Assurance of Security and Privacy Requirements for Cloud Deployment Models - 2018

ABSTRACT:

Despite of the many benefits of migrating enterprise important assets to the cloud, there are challenges specifically related to security and privacy. It's necessary that cloud users perceive their security and privacy needs, based mostly on their specific context and choose cloud model best match to support these needs. The literature provides works that focus on discussing security and privacy issues for cloud systems however such works don't give a close methodological approach to elicit security and privacy needs neither ways to pick out cloud deployment models based mostly on satisfaction of those requirements by cloud service providers. This work advances this state of the art towards this direction. In particular, we take into account needs engineering ideas to elicit and analyze security and privacy needs and their associated mechanisms using a conceptual framework and a systematic method. The work introduces assurance as proof for satisfying the safety and privacy needs in terms of completeness and reportable of security incident through audit. This allows perspective cloud users to outline their assurance requirements therefore that appropriate cloud models can be selected for a given context. To demonstrate our work, we have a tendency to present results from a true case study based on the Greek National Gazette.