research-article

An optimal investment scheme based on ATM considering cloud security environment

Authors:

Jun-Young Park,

Eui-Nam HuhAuthors Info & Claims

IMCOM '17: Proceedings of the 11th International Conference on Ubiquitous Information Management and Communication

Article No.: 93, Pages 1 - 7

https://doi.org/10.1145/3022227.3022319

Published: 05 January 2017 Publication History

Abstract

There is an increasing use of cloud computing in information technology (IT) with the widening scope of cloud computing. However, some service owners are reluctant to adopt cloud computing because the associated security technologies have not yet matured. Cloud service providers need to invest in security to improve the use of cloud computing. Additionally, research on the security investment in cloud computing is still in its early stages; due to the lack of related work, most companies or organizations should not provide an unlimited budget for security investment. Therefore, we devised an optimal investment scheme for constructing cloud security services that considers budget and the features of cloud computing services. This scheme includes an evaluation of security vulnerabilities concerning potential security attacks, and we performed an evaluation of a security investment strategy based on attack tree map (ATM) that analyze cloud security threat and vulnerabilities. Finally, we demonstrated the proposed scheme by examining two case studies using different security investment strategies.

References

[1]

D. C. Wyld, Moving to the cloud: An introduction to cloud computing in government. IBM Center, 2009.

[2]

J. Liang, "Government Cloud: Enhancing Efficiency of E-Government and Providing Better Public Services", 2012 IJCSS.

Digital Library

[3]

D. G. Chandra, et al. "Cloud Computing Model for National E-governance Plan (NeGP)", 2012 CICN.

Digital Library

[4]

Fazal-e-Amin, et al. "Cloud Based C4I Systems: Security Requirements and Concerns", 2014

[5]

L. A. Gordon, M. P. Loeb, "The Economics of Information Security Investment", ACM Transaction InfoSystem Secure, 2002.

Digital Library

[6]

W. Sonnenreich, et al. "Return on security investment (ROSI)-a practical quantitative model", J. Res. Pract. Inf. Technol., 2006.

[7]

C. Gollier, "Expected net present value, expected net future value, and the Ramsey rule", J. Environ. Econ. Manag., 2010.

[8]

L. P. Swiler, et al., "A Graph-Based Network-Vulnerability Analysis System", Sandia National Labs, 1998.

[9]

S. Jha, et al., "Two formal analyses of attack graphs", 15th IEEE Computer Security Foundations Workshop, 2002.

Digital Library

[10]

R. Dewri, et al., "Optimal security hardening on attack tree models of networks: a cost-benefit analysis", Int. J. Inf. Secur., 2012.

Digital Library

[11]

R. Dewri, et al., "Optimal Security Hardening Using Multi-objective Optimization on Attack Tree Models of Networks", ACM Conference on CCS, 2007.

Digital Library

[12]

K. J. S. Hoo, "How much is enough? A risk management approach to computer security". Stanford University, 2000.

[13]

Joost R. Santos, "Modeling the Demand Reduction Input-Output Inoperability Due to Terrorism of Interconnected Infrastructures", Wiley Online Library, 2004.

[14]

B. Karabacak, et al., "ISRAM: information security risk analysis method", Computers & Security, 2005.

Digital Library

[15]

K. Bernsmed, et al., "Security SLAs for Federated Cloud Services", 2011 ARES.

Digital Library

[16]

C. J. Alberts, et al. "Managing Information Security Risks: The Octave Approach". Addison-Wesley Longman, 2002.

Digital Library

[17]

M. S. Lund, et al., "Model-Driven Risk Analysis: The CORAS Approach".Science & Business Media, 2010.

Digital Library

[18]

F. Vraalsen, et al., "The CORAS Tool-Supported Methodology for UML-Based Security Analysis". SINTEFICT, 2004.

[19]

Z. Yazar, "A qualitative risk analysis and management tool-CRAMM", InfoSec Read. Room White Paper, 2002.

[20]

Cloud Security Alliance, "The Treacherous 12 Cloud Computing Top Threats in 2016". 2016.

Cited By

C. R MSharma SSharma ASunil Kumar MKelkar SVishal Deshmukh S(2023)Cloud Top Management Role in Reducing Mobile Broadband Transmission Hazards and Offering Safety2023 3rd International Conference on Advance Computing and Innovative Technologies in Engineering (ICACITE)10.1109/ICACITE57410.2023.10182893(1064-1068)Online publication date: 12-May-2023
https://doi.org/10.1109/ICACITE57410.2023.10182893
Purohit J(2022)Role of Cloud Management in Mitigating Vulnerabilities in Wireless Data Exchange Providing Cybersecurity2022 International Interdisciplinary Humanitarian Conference for Sustainability (IIHC)10.1109/IIHC55949.2022.10060432(671-676)Online publication date: 18-Nov-2022
https://doi.org/10.1109/IIHC55949.2022.10060432
Alouffi BHasnain MAlharbi AAlosaimi WAlyami HAyaz M(2021)A Systematic Literature Review on Cloud Computing Security: Threats and Mitigation StrategiesIEEE Access10.1109/ACCESS.2021.30732039(57792-57807)Online publication date: 2021
https://doi.org/10.1109/ACCESS.2021.3073203

Index Terms

An optimal investment scheme based on ATM considering cloud security environment
1. Computing methodologies
  1. Modeling and simulation
    1. Model development and analysis
      1. Modeling methodologies

Recommendations

Different facets of security in the cloud
CNS '12: Proceedings of the 15th Communications and Networking Simulation Symposium

Cloud computing is a long fantasized visualization of computing as a utility, where data owners can remotely store and access their data in the cloud anytime and from anywhere. Using a shared pool of configurable resources, users can be relieved from ...
Cloud Computing Security: Opportunities and Pitfalls

The evolution of modern computing systems has lead to the emergence of Cloud computing. Cloud computing facilitates on-demand establishment of dynamic, large scale, flexible, and highly scalable computing infrastructures. However, as with any other ...
A Cloud Computing Security Framework Based on Cloud Security Trusted Authority
INFOS '16: Proceedings of the 10th International Conference on Informatics and Systems

Cloud computing is a promising technology that provides dynamic resource allocation, power saving, and low running cost. On the other hand, security risks of cloud computing represent a major concern that slows down its market growth. There are many ...

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences

IMCOM '17: Proceedings of the 11th International Conference on Ubiquitous Information Management and Communication

January 2017

746 pages

ISBN:9781450348881

DOI:10.1145/3022227

Copyright © 2017 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

Sponsors

SIGAPP: ACM Special Interest Group on Applied Computing

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 05 January 2017

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Research-article

Conference

IMCOM '17

Sponsor:

SIGAPP

IMCOM '17: The 11th International Conference on Ubiquitous Information Management and Communication

January 5 - 7, 2017

Beppu, Japan

Acceptance Rates

IMCOM '17 Paper Acceptance Rate 113 of 366 submissions, 31%;

Overall Acceptance Rate 213 of 621 submissions, 34%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

3
Total Citations
View Citations
98
Total Downloads

Downloads (Last 12 months)4
Downloads (Last 6 weeks)0

Reflects downloads up to 06 Nov 2024

Other Metrics

View Author Metrics

Citations

Cited By

C. R MSharma SSharma ASunil Kumar MKelkar SVishal Deshmukh S(2023)Cloud Top Management Role in Reducing Mobile Broadband Transmission Hazards and Offering Safety2023 3rd International Conference on Advance Computing and Innovative Technologies in Engineering (ICACITE)10.1109/ICACITE57410.2023.10182893(1064-1068)Online publication date: 12-May-2023
https://doi.org/10.1109/ICACITE57410.2023.10182893
Purohit J(2022)Role of Cloud Management in Mitigating Vulnerabilities in Wireless Data Exchange Providing Cybersecurity2022 International Interdisciplinary Humanitarian Conference for Sustainability (IIHC)10.1109/IIHC55949.2022.10060432(671-676)Online publication date: 18-Nov-2022
https://doi.org/10.1109/IIHC55949.2022.10060432
Alouffi BHasnain MAlharbi AAlosaimi WAlyami HAyaz M(2021)A Systematic Literature Review on Cloud Computing Security: Threats and Mitigation StrategiesIEEE Access10.1109/ACCESS.2021.30732039(57792-57807)Online publication date: 2021
https://doi.org/10.1109/ACCESS.2021.3073203

View Options

Get Access

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Media

Figures

Other

Tables

View Table of Contents