I/UCRC FRP: Risk Assessment Techniques for Off-line and On-line Security Evaluation of Cloud Computing

I/UCRC FRP：云计算离线和在线安全评估的风险评估技术

• 批准号: 1332035
• 负责人: Krishna Kavi
• 金额: $ 8.95万
• 依托单位: University of North Texas
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-08-01 至 2016-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1332035&HistoricalAwards=false
• 关键词: UCRC; FRP; Risk; Assessment; Techniques

Understanding the risk and reliance on specific system security practices is critical in order to formulate a coherent strategy on safe cloud adoption. This work will investigate techniques for security risk evaluation for cloud computing with specific focus on the two areas of off-line risk management and on-line trust evaluation. The research will develop a project assessment model to capture relations between threats, tasks, assets and business logic; develop a vender assessment model to evaluate the vender?s share of security responsibility; and develop a cost benefit trade-off methodology for optimal cloud adoption strategy.Based on these, will develop an on-line assessment methodology for cloud service providers assessment based on different applications, services and vendor compositions.With the proliferation of cloud architectures, it is critical that their security be assessable and issues addressable. The proposed work has the potential to enable loud users to gauge the trust-worthiness of individual cloud elements or aggregated cloud resources and to analyze and suggest appropriate risk mitigation strategy. The work is supported by the Industry Advisory Board and will engage multiple industry members of the center. The center will involve graduate students and be integrated in graduate course offerings. Industry tutorials will also be developed and offered.

了解对特定系统安全实践的风险和依赖对于为了制定安全云采用的连贯策略至关重要。这项工作将调查用于云计算的安全风险评估的技术，特别关注离线风险管理和在线信任评估的两个领域。该研究将开发一个项目评估模型，以捕获威胁，任务，资产和业务逻辑之间的关系；开发一个Vender评估模型来评估VENDEN的安全责任；并为最佳的云采用策略开发成本收益折衷的方法。基于这些方法，将根据不同的应用，服务和供应商组成为云服务提供商评估开发在线评估方法。在云体系结构的扩散之内，至关重要的是，他们的安全性可以评估并可以解决。拟议的工作有可能使大声的用户能够评估单个云元素或汇总云资源的信任度，并分析并提出适当的降低风险策略。这项工作得到了行业顾问委员会的支持，将与该中心的多个行业成员互动。该中心将参与研究生，并将其纳入研究生课程。 行业教程也将开发和提供。