Control Framework for Secure Cloud Computing

• 作者: Harshit Srivastava Sathish Alampalayam Kumar
• 来源期刊: 信息安全(英文)
• 学科: 工学
• 关键词: CLOUD Computing Security PRIVACY Organization CONTROL GOVERNANCE FRAMEWORK CLOUD PROVIDER
• 年，卷（期）: 2015,（1）
• 页码范围: 12-23
• 页数: 12页
• 分类号: TP3

摘要

Cloud computing is touted as the next big thing in the Information Technology (IT) industry, which is going to impact the businesses of any size and yet the security issue continues to pose a big threat on it. The security and privacy issues persisting in cloud computing have proved to be an obstacle for its widespread adoption. In this paper, we look at these issues from a business perspective and how they are damaging the reputation of big companies. There is a literature review on the existing issues in cloud computing and how they are being tackled by the Cloud Service Providers (CSP). We propose a governing body framework which aims at solving these issues by establishing relationship amongst the CSPs in which the data about possible threats can be generated based on the previous attacks on other CSPs. The Governing Body will be responsible for Data Center control, Policy control, legal control, user awareness, performance evaluation, solution architecture and providing motivation for the entities involved.