Threat Assessment in the Cloud Environment: A Quantitative Approach for Security Pattern Selection

Cloud computing has emerged as a fast-growing technology in the past few years. It provides a great flexibility for storing, sharing and delivering data over the Internet without investing on new technology or resources. In spite of the development and wide array of cloud usage, security perspective of cloud computing still remains its infancy. Security challenges faced by cloud environment becomes more complicated when we include various stakeholders’ perspectives. In a cloud environment, security perspectives and requirements are usually designed by software engineers or security experts. Sometimes clients’ requirements are either ignored or given a very high importance. In order to implement cloud security by providing equal importance to client organizations, software engineers and security experts, we propose a new methodology in this paper. We use Microsoft’s STRIDE-DREAD model to assess threats existing in the cloud environment and also to measure its consequences. Our a...

• Type: Journal
• Year: 2016
• Where: ICUIMC
• Authors: Priya Anand, Jungwoo Ryoo, Hyoungshick Kim, Eunhyun Kim
• Keywords: ICUIMC 2016, Information Technology