Quantitative Reasoning about Cloud Security Using Service Level Agreements

Cloud Security Engineering: Theory, Practice and Future Research

“…Esposito, Castiglione and Choo (2016), for example, remarked that ensuring data sovereignty can also be part of the SLA management system. This is also echoed by Luna et al (2016) in this special issue, who emphasized the importance of including security specifications in SLAs (i.e. the development of security level agreements).…”

A risk assessment model for selecting cloud service providers

“…Other EU projects such as SPECS [22] and EscudoCloud [23] also looked at quantifying the capacity of a given cloud provider to satisfy security Servive Level Agreements (SLAs) using information published in the CSA STAR registry. It also has a focus on usability, but the endeavour is different in essence.…”

“…It also has a focus on usability, but the endeavour is different in essence. Here we are assessing risk scenarios in an automated way, whereas in that work [23] does not provide an automated processing for the answers given by the CSPs to the CAIQ, making it difficult to compare more than three providers quickly.…”

Novel efficient techniques for real-time cloud security assessment

“…However, the algorithm used in the QHP is based on matrices and eigenvectors that are associated to high computational costs, hence not suitable for scenarios with efficiency constraints. A side by side comparison of the QPT and the QHP, providing insights into their individual and collective capabilities, is available in [19].…”

“…The last element of the final PV is the score for the CSC SecSLA and serves as the benchmark. For more details on the methodology see [2,19], or use cases considered in Section 6.…”