Assessing the Security Risks of Multicloud SaaS Applications: A Real-World Case Study

Abstract

Cloud computing is widely believed to be the future of computing. It has grown from being a promising idea to one of the fastest research and development paradigms of the computing industry. However, security and privacy concerns represent a significant hindrance to the widespread adoption of cloud computing services. Likewise, the attributes of the cloud such as multi-tenancy, dynamic supply chain, limited visibility of security controls and system complexity, have exacerbated the challenge of assessing cloud risks. In this paper, we conduct a real-world case study to validate the use of a supply chaininclusive risk assessment model in assessing the risks of a multicloud SaaS application. Using the components of the Cloud Supply Chain Cyber Risk Assessment (CSCCRA) model, we show how the model enables cloud service providers (CSPs) to identify critical suppliers, map their supply chain, identify weak security spots within the chain, and analyse the risk of the SaaS application, while also presenting the value of the risk in monetary terms. A key novelty of the CSCCRA model is that it caters for the complexities involved in the delivery of SaaS applications and adapts to the dynamic nature of the cloud, enabling CSPs to conduct risk assessments at a higher frequency, in response to a change in the supply chain.

Risk Assessment for Logistics Applications in Cloud Migration

“…The calculation of risk value is calculated by considering 1 (one) coefficient indicator which states as the ratio of the control level, and in this study does not compare the residual risk or risk with a value that is close to the actual result, so that the risk value in this study there is only one formula for calculating risk, namely before migration (before migration). Further research [10] analyzed the risks of using Software as a Service (SaaS) applications to validate supply chain usage with the Cloud Supply Chain Cyber Risk Assessment (CSCCRA) model, the results of this model enable CSPs to understand, manage, and make well-informed decisions about their cloud risks Software as a Service (SaaS) application users. In addition, a cloud-based health service has also been developed to solve problems in integrated health services [11].…”

AAAA: SSO and MFA Implementation in Multi-Cloud to Mitigate Rising Threats and Concerns Related to User Metadata

“…Because the cloud paradigm has very dense and diverse usability in the current information technology era, therefore reliance on username/password identity alone is not enough to ensure security on a shared pool of resources. Due to the diverse nature of the multi-cloud infrastructure and deployment model on vendors, security has been enhanced as multifactor authentication (MFA) [2]. Multifactor authentication has different forms depending on the infrastructure and pattern on which it has been deployed.…”