Towards remote security monitoring in cloud services utilizing security metrics

Reijo Savola, Jukka Ahola

    Research output: Chapter in Book/Report/Conference proceedingConference article in proceedingsScientificpeer-review

    2 Citations (Scopus)

    Abstract

    Large amounts of business-critical data are transferred, processed and stored in cloud services, raising concerns about their security level.
    Adequate security management of cloud services is vital to their success. Systematically developed and maintained security metrics can be used to offer evidence of the security effectiveness of cloud services.
    We propose a metrics based approach for remote security correctness monitoring in the Cloud.
    The approach was investigated by building a monitoring system within an experimental cloud system set-up.
    Moreover, we discuss how risk-driven security metrics modeling based on the decomposition of security objectives is used to manage monitoring activities.
    Original languageEnglish
    Title of host publicationProceedings of the 6th International Conference on Application of Information and Communication Technologies, AICT 2013
    PublisherIEEE Institute of Electrical and Electronic Engineers
    Pages21-27
    ISBN (Electronic)978-1-4673-1740-5
    ISBN (Print)978-1-4673-1739-9
    DOIs
    Publication statusPublished - 2012
    MoE publication typeA4 Article in a conference publication
    EventIEEE 6th International Conference on Application of Information and Communication Technologies, AICT 2012 - Tbilisi, Georgia
    Duration: 17 Oct 201219 Oct 2012

    Conference

    ConferenceIEEE 6th International Conference on Application of Information and Communication Technologies, AICT 2012
    Abbreviated titleAICT 2012
    CountryGeorgia
    CityTbilisi
    Period17/10/1219/10/12

    Fingerprint

    Monitoring
    Decomposition
    Industry

    Cite this

    Savola, R., & Ahola, J. (2012). Towards remote security monitoring in cloud services utilizing security metrics. In Proceedings of the 6th International Conference on Application of Information and Communication Technologies, AICT 2013 (pp. 21-27). IEEE Institute of Electrical and Electronic Engineers . https://doi.org/10.1109/ICAICT.2012.6398469
    Savola, Reijo ; Ahola, Jukka. / Towards remote security monitoring in cloud services utilizing security metrics. Proceedings of the 6th International Conference on Application of Information and Communication Technologies, AICT 2013. IEEE Institute of Electrical and Electronic Engineers , 2012. pp. 21-27
    @inproceedings{26e5ecd80b004f7db30883f96c2080be,
    title = "Towards remote security monitoring in cloud services utilizing security metrics",
    abstract = "Large amounts of business-critical data are transferred, processed and stored in cloud services, raising concerns about their security level. Adequate security management of cloud services is vital to their success. Systematically developed and maintained security metrics can be used to offer evidence of the security effectiveness of cloud services. We propose a metrics based approach for remote security correctness monitoring in the Cloud. The approach was investigated by building a monitoring system within an experimental cloud system set-up. Moreover, we discuss how risk-driven security metrics modeling based on the decomposition of security objectives is used to manage monitoring activities.",
    author = "Reijo Savola and Jukka Ahola",
    year = "2012",
    doi = "10.1109/ICAICT.2012.6398469",
    language = "English",
    isbn = "978-1-4673-1739-9",
    pages = "21--27",
    booktitle = "Proceedings of the 6th International Conference on Application of Information and Communication Technologies, AICT 2013",
    publisher = "IEEE Institute of Electrical and Electronic Engineers",
    address = "United States",

    }

    Savola, R & Ahola, J 2012, Towards remote security monitoring in cloud services utilizing security metrics. in Proceedings of the 6th International Conference on Application of Information and Communication Technologies, AICT 2013. IEEE Institute of Electrical and Electronic Engineers , pp. 21-27, IEEE 6th International Conference on Application of Information and Communication Technologies, AICT 2012, Tbilisi, Georgia, 17/10/12. https://doi.org/10.1109/ICAICT.2012.6398469

    Towards remote security monitoring in cloud services utilizing security metrics. / Savola, Reijo; Ahola, Jukka.

    Proceedings of the 6th International Conference on Application of Information and Communication Technologies, AICT 2013. IEEE Institute of Electrical and Electronic Engineers , 2012. p. 21-27.

    Research output: Chapter in Book/Report/Conference proceedingConference article in proceedingsScientificpeer-review

    TY - GEN

    T1 - Towards remote security monitoring in cloud services utilizing security metrics

    AU - Savola, Reijo

    AU - Ahola, Jukka

    PY - 2012

    Y1 - 2012

    N2 - Large amounts of business-critical data are transferred, processed and stored in cloud services, raising concerns about their security level. Adequate security management of cloud services is vital to their success. Systematically developed and maintained security metrics can be used to offer evidence of the security effectiveness of cloud services. We propose a metrics based approach for remote security correctness monitoring in the Cloud. The approach was investigated by building a monitoring system within an experimental cloud system set-up. Moreover, we discuss how risk-driven security metrics modeling based on the decomposition of security objectives is used to manage monitoring activities.

    AB - Large amounts of business-critical data are transferred, processed and stored in cloud services, raising concerns about their security level. Adequate security management of cloud services is vital to their success. Systematically developed and maintained security metrics can be used to offer evidence of the security effectiveness of cloud services. We propose a metrics based approach for remote security correctness monitoring in the Cloud. The approach was investigated by building a monitoring system within an experimental cloud system set-up. Moreover, we discuss how risk-driven security metrics modeling based on the decomposition of security objectives is used to manage monitoring activities.

    U2 - 10.1109/ICAICT.2012.6398469

    DO - 10.1109/ICAICT.2012.6398469

    M3 - Conference article in proceedings

    SN - 978-1-4673-1739-9

    SP - 21

    EP - 27

    BT - Proceedings of the 6th International Conference on Application of Information and Communication Technologies, AICT 2013

    PB - IEEE Institute of Electrical and Electronic Engineers

    ER -

    Savola R, Ahola J. Towards remote security monitoring in cloud services utilizing security metrics. In Proceedings of the 6th International Conference on Application of Information and Communication Technologies, AICT 2013. IEEE Institute of Electrical and Electronic Engineers . 2012. p. 21-27 https://doi.org/10.1109/ICAICT.2012.6398469