Data Centers and Cloud Computing are today essential to most of the business and industry worldwide. Given it complexity and heterogeneous nature the issue of trust and privacy remain to be a challenge.
I don't think that metrics are as important for an organization to trust the cloud compared to making sure that there is a security architecture in place that has implemented the proper controls, such as a unified IDAM system, assurances that data is encrypted at rest and in transit, and trained and knowledgeable staff. Here are two papers describing our experience with implementing computing outside of our firewalls and in the cloud:
https://www.intel.com/content/www/us/en/it-management/intel-it-best-practices/boosting-iaas-and-paas-security-in-the-public-cloud-paper.html
https://www.intel.com/content/www/us/en/it-management/intel-it-best-practices/taking-enterprise-security-beyond-the-edge-paper.html
Trust is founded on security of data and privacy safeguards. The user credentials and personal private information should not be disclosed to the third party more so the intellectual property and trade secrets that may compromise on differentiated comparative advantages. Unauthorized disclosure leads to organisational/personal reputation and image damage that may lead to financial loss, loss of competitiveness, loss of customers trust and loss of market share as well as profitability. The answer lies in guarantees of confidentiality, availability, integrity, and non-repudiation of data stored or in motion in transactions. Cloud computing cuts down capital expenditures (CAPEX) and operations expenditures (OPEX) in disintermmediation of resources by outsourcing for convenience, efficiency and effectiveness. However, the cyber-criminals are always ahead with schemes to exploit system vulnerabilities for financial gains while the safeguards in place cannot ensure 100% security. The metrics to for information assurances cannot guarantee 100 % success. Cyber risk assessments (metrics) informing continuous mitigation measures may lessen impacts
Cloud computing is a technology that relies on the transfer of processing and storage space of the computer to the so-called cloud, which are servers that are accessed through the Internet. To transform programs from products to services. Users have access to them online without having to have the knowledge, experience and control of the hardware.
The most important benefits of cloud computing make software maintenance and development burdens a technology for vendors, reducing the burden on users and making them focus on using these services only.
Cloud computing relies on advanced data centers that provide large storage space for users, and provides some software as services to users.
With the development of technologies available through the Web with the emergence of Web 2.0 and Web 3.0 and the acceleration of Internet traffic available to the public, companies have made their applications available online using cloud computing. This technology has been widely reported by users to save expenses.
Historically, the term cloud was initially used to refer to the Internet. The idea of software came as services in the 1960s. John McCarthy expressed the idea that "computing might be organized to become a public service one day."
Hi Eduard,
You can take a look to our work :
Cloud Security Quantitative Assessment Based on Mobile Agent and Web Service Interaction
- June 2016
- DOI
- 10.1007/978-3-319-50463-6_13
- Conference: International Conference on Mobile, Secure and Programmable Networking
- 📷Abir Khaldi
- 📷Kamel Karoui
- 📷Henda Ben Ghezala
- Badges
- Science method