Towards a Model Based Security Testing Approach of Cloud Computing Environments | IEEE Conference Publication | IEEE Xplore

Towards a Model Based Security Testing Approach of Cloud Computing Environments


Abstract:

In recent years Cloud computing became one of the most aggressively emerging computer paradigms resulting in a growing rate of application in the area of IT outsourcing. ...Show More

Abstract:

In recent years Cloud computing became one of the most aggressively emerging computer paradigms resulting in a growing rate of application in the area of IT outsourcing. However, as recent studies have shown, security most of the time is the one requirement, neglected at all. Yet, especially because of the nature of usage of Cloud computing, security is inevitable. Unfortunately, assuring the security of a Cloud computing environment is not a one time task, it is a task to be performed during the complete lifespan of the Cloud. This is motivated by the fact that Clouds undergo daily changes in terms of newly deployed applications and offered services. Based on this assumption, in this paper, we propose a novel model -- based, change -- driven approach, employing risk analysis, to test the security of a Cloud computing environment among all layers. As a main intrusion point, our approach exploits the public service interfaces, as they are a major source of newly introduced vulnerabilities, possibly leading to severe security incidents.
Date of Conference: 20-22 June 2012
Date Added to IEEE Xplore: 06 August 2012
ISBN Information:
Conference Location: Gaithersburg, MD, USA

References

References is not available for this document.