Adaptive Risk Management Framework for Cloud Computing

Cloud computing is an emerging economic model that provides a broad network access to services with many benefits to many tenants at the same time. Although it creates a large potential to develop new online services the evolution of cloud computing has been accompanied by the proliferation of various attacks against the services on the cloud infrastructures. The importance of risk management in cloud computing is mainly motivated by the dynamic context in which the services and applications are implemented. In fact, the intrinsic characteristics of cloud infrastructures prevent the use of previously developed process of traditional frameworks. The goal of this paper is to present a new risk management framework for better considering context parameters of cloud computing environment. An example is considered in which the risk treatment process in this framework proposes how to dynamically balance between the security and performance degradation due to the implementation of security mechanism.