As the cloud computing law was passed in March, 2015, many private companies and public organizations give consideration to introduce cloud computing services. However, most of them are still concerned about the security issues in cloud computing services. To solve the problem, a certification system of cloud security is necessary as an enabler for adoption of the trusted cloud services. There have been a number of studies about certification systems for cloud security, but only few studies exist about certification scheme of cloud security. Therefore, in this study, foreign certification systems for cloud security are analyzed to draw requirements for developing a domestic certification scheme for cloud security. Based on the result of analysis, this study proposes the three certification schemes of cloud security, which have been reviewed by the focus group interview method to draw advantages and disadvantages of each scheme.
Abstract-The development of information technology has a positive impact on business environment and at the same time, a negative impact on various security threats. Organizations try to implement various countermeasures for preventing security incident. However they tend to rely on technical security solution and security incidents are not possible to prevent completely. Recently, People Centric Security as a new approach has become an issue and the security education for changing the behavior of employees is emphasized. However, most organizations have difficulty in expecting any changes in behavior of employees because security education regards as a formal activity for compliance. Moreover, few previous security education-related researches studied the relevance of the educational contents necessary for employees with the behavioral changes in students and security experts. The purpose of this research is to provide security education framework for employee's behavior change based on pedagogy and social psychology. In addition, some future researches that overcome the limitation of this research for effective security education program were proposed.Index Terms-Security education, social psychology, people centric security.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.
hi@scite.ai
10624 S. Eastern Ave., Ste. A-614
Henderson, NV 89052, USA
Copyright © 2024 scite LLC. All rights reserved.
Made with 💙 for researchers
Part of the Research Solutions Family.