SOCaaS: Security Operations Center as a Service for Cloud Computing Environments
SOCaaS: Security Operations Center as a Service for Cloud Computing Environments
复制标题
SOCaaS：云计算环境的安全运营中心即服务
DOI：
--
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
T. Gulliver
中科院分区：
文献类型：
--
作者：
Fahad F. Alruwaili;T. Gulliver
信息安全操作是一项复杂的任务，尤其是在云服务层中。安全操作中心（SOC）框架作为云服务提供商和客户的服务。政策和监管要求。遵守法规。隐私。
The management of information security operations is a complex task, especially in a cloud environment. The cloud service layers and multi-tenancy architecture creates a complex environment in which to develop and manage an information security incident management and compliance program. This paper presents a novel security operations center (SOC) framework as a service for cloud service providers and customers. The goal is to protect cloud services against new and existing attacks as well as comply with security policies and regulatory requirements. The SOCaaS design is based on multi-governance and defense in depth models and fits within the multi-tenancy cloud services. A SOCaaS provider is a trusted entity that collects event and system logs from cloud systems to ensure proactive incident management and compliance with regulations. The proposed approach provides better managed services for customers wanting to outsource their information security operations to attain reliable, transparent, and efficient security and privacy.