I/UCRC FRP: Collaborative: Risk Assessment Techniques for Off-line and On-line Security Evaluation of Cloud Computing

I/UCRC FRP：协作：云计算离线和在线安全评估的风险评估技术

基本信息

批准号：
1332002
负责人：
Sanjay Madria
金额：
$ 11.05万
依托单位：
Missouri University of Science and Technology
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2013
资助国家：
美国
起止时间：
2013-08-01 至 2017-07-31
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1332002&HistoricalAwards=false
关键词：
UCRC FRP Collaborative Risk Assessment

项目摘要

Understanding the risk and reliance on specific system security practices is critical in order to formulate a coherent strategy on safe cloud adoption. This work will investigate techniques for security risk evaluation for cloud computing with specific focus on the two areas of off-line risk management and on-line trust evaluation. The research will develop a project assessment model to capture relations between threats, tasks, assets and business logic; develop a vender assessment model to evaluate the venders share of security responsibility; and develop a cost benefit trade-off methodology for optimal cloud adoption strategy. Based on these, will develop an on-line assessment methodology for cloud service providers assessment based on different applications, services and vendor compositions. With the proliferation of cloud architectures, it is critical that their security be assessable and issues addressable. The proposed work has the potential to enable loud users to gauge the trust-worthiness of individual cloud elements or aggregated cloud resources and to analyze and suggest appropriate risk mitigation strategy. The work is supported by the Industry Advisory Board and will engage multiple industry members of the center. The center will involve graduate students and be integrated in graduate course offerings. Industry tutorials will also be developed and offered.

了解对特定系统安全实践的风险和依赖对于为了制定安全云采用的连贯策略至关重要。这项工作将调查用于云计算的安全风险评估的技术，特别关注离线风险管理和在线信任评估的两个领域。该研究将开发一个项目评估模型，以捕获威胁，任务，资产和业务逻辑之间的关系；开发一个Vender评估模型来评估供应商的安全责任；并为最佳采用云策略开发成本收益权衡的方法。基于这些，将根据不同的应用程序，服务和供应商组成为云服务提供商评估开发一种在线评估方法。随着云体系结构的扩散，至关重要的是可以评估其安全性并可以解决问题。拟议的工作有可能使大声的用户能够评估单个云元素或汇总云资源的信任度，并分析并提出适当的降低风险策略。这项工作得到了行业顾问委员会的支持，将与该中心的多个行业成员互动。该中心将参与研究生，并将其纳入研究生课程。行业教程也将开发和提供。