An Approach to Measure Security of Cloud Hosted Application

Recent time has seen rampant proliferation in the cloud services. However cloud services characteristics has also increased opportunities for attacks on data and applications hosted in the cloud. Unsecure practices at technical or/and at operational level by cloud service providers (CSP), dependency on web based service delivery and cloud technology related vulnerabilities could lead to application and data compromise. These threat scenarios require cloud customer to look for more transparency and controls. SLA's and contracts do not provide technical and measurable method to find the security control status of cloud hosted application/data. In this paper,we propose an approach and system for security measurement, which can help cloud customers to have realistic view of their application/data security posture in the cloud environment.