A Metamodel for Security and Privacy Knowledge in Cloud Services

Washizaki, Hironori; Fukumoto, Sota; Yamamoto, Misato; Yoshizawa, Masatoshi; Fukazawa, Yoshiaki; Kato, Tsuyoshi; Ogata, Shinpei; Kaiya, Haruhiko; Fernández, Eduardo B.; Kanuka, Hideyuki; Kondo, Yuki; Yoshioka, Nobukazu; Okubo, Takao; Hazeyama, Atsuo

doi:10.1109/services.2016.30

Cited by 8 publications

(3 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Moreover, designers could refer to the metamodel for designing high-level architectures of cloud service systems in efficient and effective manner. To confirm the usefulness and feasibility of the metamodel, we conducted a case study that describes a cloud security pattern based on the metamodel [44]. …”

Section: Validation Of the Modelsmentioning

confidence: 99%

Modeling and Security in Cloud Ecosystems

et al. 2016

Self Cite

View full text Add to dashboard Cite

Clouds do not work in isolation but interact with other clouds and with a variety of systems either developed by the same provider or by external entities with the purpose to interact with them; forming then an ecosystem. A software ecosystem is a collection of software systems that have been developed to coexist and evolve together. The stakeholders of such a system need a variety of models to give them a perspective of the possibilities of the system, to evaluate specific quality attributes, and to extend the system. A powerful representation when building or using software ecosystems is the use of architectural models, which describe the structural aspects of such a system. These models have value for security and compliance, are useful to build new systems, can be used to define service contracts, find where quality factors can be monitored, and to plan further expansion. We have described a cloud ecosystem in the form of a pattern diagram where its components are patterns and reference architectures. A pattern is an encapsulated solution to a recurrent problem. We have recently expanded these models to cover fog systems and containers. Fog Computing is a highly-virtualized platform that provides compute, storage, and networking services between end devices and Cloud Computing Data Centers; a Software Container provides an execution environment for applications sharing a host operating system, binaries, and libraries with other containers. We intend to use this architecture to answer a variety of questions about the security of this system as well as a reference to design interacting combinations of heterogeneous components. We defined a metamodel to relate security concepts which is being expanded.

show abstract

Section: Validation Of the Modelsmentioning

confidence: 99%

Modeling and Security in Cloud Ecosystems

et al. 2016

Self Cite

View full text Add to dashboard Cite

show abstract

“…The above issues can be mitigated via reference architectures or metamodels that capture and encapsulate the essential concepts related to S&P in layered cloud stacks. Previously, we reported an earlier version of the metamodel (Washizaki, et al, 2016) (Xia, et al, 2018). This study proposes an extension called the "Cloud Security and Privacy Metamodel (CSPM)" to address S&P in cloud services.…”

Section: Introductionmentioning

confidence: 99%

CSPM

Xia

Washizaki

Fukazawa

et al. 2021

International Journal of Systems and Software Security and Protection

Self Cite

View full text Add to dashboard Cite

Security and privacy in cloud systems are critical. To address security and privacy concerns, many security patterns, privacy patterns, and non-pattern-based knowledge have been reported. However, knowing which pattern or combination of patterns to use in a specific scenario is challenging due to the sheer volume of options and the layered cloud stack. To deal with security and privacy in cloud services, this study proposes the cloud security and privacy metamodel (CSPM). CSPM uses a consistent approach to classify and handle existing security and privacy patterns. In addition, CSPM is used to develop a security and privacy awareness process to develop cloud systems. The effectiveness and practicality of CSPM is demonstrated via several case studies.

show abstract

“…The above issues can be overcome via metamodels or reference architectures that capture the essential concepts related to S&P in layered cloud stacks. Previously, we reported the background and an earlier version of the metamodel [10]. This study proposes an extension called the "Cloud Security and Privacy Metamodel (CSPM)" to address S&P in cloud services.…”

Section: Introductionmentioning

confidence: 99%

Metamodel for Security and Privacy Knowledge in Cloud Service Development

Xia¹,

Washizaki²,

Fukazawa³

et al. 2019

Preprint

Self Cite

View full text Add to dashboard Cite

Requirements for cloud services include security and privacy. Although many security patterns, privacy patterns, and non-pattern-based knowledge have been reported, knowing which pattern or combination of patterns to use in a specific scenario is challenging due to the sheer volume of options and the layered cloud stack. To deal with security and privacy in cloud services, this study proposes the Cloud Security and Privacy Metamodel (CSPM). CSPM uses a consistent approach to classify and support existing security and privacy patterns. In addition, CSPM is used to develop a security and privacy awareness process to develop cloud systems. The effectiveness and practicality of CSPM is demonstrated via several case studies.

show abstract

A Metamodel for Security and Privacy Knowledge in Cloud Services

Cited by 8 publications

References 10 publications

Modeling and Security in Cloud Ecosystems

Modeling and Security in Cloud Ecosystems

CSPM

Metamodel for Security and Privacy Knowledge in Cloud Service Development

Contact Info

Product

Resources

About