Towards the design of secure and privacy-oriented information systems in the cloud: Identifying the major concepts

Computer Standards & Interfaces - Tập 36 - Trang 759-775 - 2014
Christos Kalloniatis1, Haralambos Mouratidis2, Manousakis Vassilis1, Shareeful Islam2, Stefanos Gritzalis3, Evangelia Kavakli1
1Cultural Informatics Laboratory, Department of Cultural Technology and Communication, University of the Aegean, University Hill, GR81100 Mytilene, Greece
2School of Architecture, Computing and Engineering, University of East London, UK
3Information and Communication Systems Security Laboratory, Department of Information and Communications Systems Engineering, University of the Aegean, GR83200 Samos, Greece

Tài liệu tham khảo

2009

Cloud Security Alliance

Subashini, 2011, A survey on security issues in service delivery models of cloud computing, J. Netw. Comput. Appl., 34, 1, 10.1016/j.jnca.2010.07.006

Islam, 2012, A goal-driven risk management approach to support security and privacy analysis of cloud-based system

Pearson, 2010, Privacy, security and trust issues arising from cloud computing, 693

Gong, 2010, The characteristics of cloud computing

Mouratidis, 2012, Aligning security and privacy to support the development of secure information systems, J. Univ. Comput. Sci., 18, 1608

Kalloniatis, 2004, Security requirements engineering for egovernment applications: analysis of current frameworks, 66

Sindre, 2005, Eliciting security requirements with misuse cases, Requir. Eng. J., 10, 34, 10.1007/s00766-004-0194-4

Islam, 2012, Model based process to support security and privacy requirements engineering, vol. 3, No 3

Cloud Computing, 2011

Cloud Security Alliance

2012

Heiser, 2008, Assessing the Security Risks of Cloud Computing

Baburajan, 2011

Kerravala, 2011

Voorsluys, 2011, Introduction to cloud computing, 1, 10.1002/9780470940105.ch1

2008

“Jeff Bezos' Risky Bet”, Business Week, http://www.businessweek.com/stories/2006-11-12/jeff-bezos-risky-bet, (Last access 09/01/2013).

King, Rachael, Cloud computing: small companies take flight, http://www.businessweek.com/stories/2008-08-04/cloud-computing-small-companies-take-flightbusinessweek-business-news-stock-market-and-financial-advice Businessweek. (Last access 09/12/2012).

Defining and Measuring Cloud Elasticity, KIT Software Quality Departement. http://digbib.ubka.uni-karlsruhe.de/volltexte/1000023476. (Last access 13/08/2012).

Economies of Cloud Scale Infrastructure, 2011

Farber, Dan. The new geek chic: data centers. http://news.cnet.com/8301-13953_3-9977049-80.html CNET News. (Last access 22/08/2012).

Kitchenham, 2007, Guidelines for performing systematic literature reviews in software engineering, version 2.3

Zhou, 2010, Security and privacy in cloud computing: a survey

Szefer, 2011, A case for hardware protection of guest VMs from compromised hypervisors in cloud computing, 248

Yu, 2010, A view about cloud data security from data life cycle, 1

Sabahi, 2011, Cloud computing threats and responses

Grobauer, 2010, Towards incident handling in the cloud: challenges and approaches, 77, 10.1145/1866835.1866850

Wei, 2009, Managing security of virtual machine images in a cloud environment, 91, 10.1145/1655008.1655021

Ristenpart, 2009, Hey, You, get off of my cloud: exploring information leakage in third-party compute clouds, 199, 10.1145/1653662.1653687

Grance, 2011

Kalloniatis, 2005, PriS methodology: incorporating privacy requirements into the system design process

Kalloniatis, 2008, Addressing privacy requirements in system design: the PriS method, Requir. Eng. J., 13, 241, 10.1007/s00766-008-0067-3

Kalloniatis, 2010, PRIS tool: a case tool for privacy-oriented Requirements Engineering, vol. 6, No. 1, 3

Kavakli, 2006, Incorporating privacy requirements into the system design process: the PriS conceptual framework, vol. 16, No 2, 140

Kalloniats, 2005, Dealing with privacy issues during the system design process

Houmb, 2010, 15(1), 63

2010, “Cloud security and privacy: what is the data life cycle?”

1995

Cannon, 2004

Fischer-Hübner, 2001, vol. 1958

Pfitzmann, 1990, Rechsicherheit trotz Anonymität in offenen digitalen Systemen, Datenschutz Datensicherheit (DuD), 6, 243

Pfitzmann, 1990, 234

Mouratidis, 2006, Secure Tropos: a security-oriented extension of the Tropos methodology

Kavakli, 2007, Protecting privacy in system design: the electronic voting case, Transform. Gov. People Process Policy, 1, 307, 10.1108/17506160710839150

Kalloniatis, 2009, Methods for designing privacy aware information systems: a review, 185

Islam, 2010, Toward a framework to elicit and manage security and privacy requirements from laws and regulation, vol. 6182/2010, 255

Massey, 2010, Evaluating existing security and privacy requirements for legal compliance, vol. 15, No1

Mulazzani, 2011, Dark Clouds on the Horizon: Using Cloud Storage as Attack Vector and Online Slack Space

Khajeh-Hosseini, 2011, Decision support tools for cloud migration in the enterprise

Grobauer, 2011, Understanding cloud computing vulnerabilities, IEEE Secur. Priv. Mag., 9, 50, 10.1109/MSP.2010.115

Thông tin
Thông tin xuất bản

Computer Standards & Interfaces

Tập 36

759-775

Thông tin tác giả