I/UCRC FRP: Collaborative: Risk Assessment Techniques for Off-line and On-line Security Evaluation of Cloud Computing

I/UCRC FRP：协作：云计算离线和在线安全评估的风险评估技术

• 批准号: 1332002
• 负责人: Sanjay Madria
• 金额: $ 11.05万
• 依托单位: Missouri University of Science and Technology
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-08-01 至 2017-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1332002&HistoricalAwards=false
• 关键词: UCRC; FRP; Collaborative; Risk; Assessment

Understanding the risk and reliance on specific system security practices is critical in order to formulate a coherent strategy on safe cloud adoption. This work will investigate techniques for security risk evaluation for cloud computing with specific focus on the two areas of off-line risk management and on-line trust evaluation. The research will develop a project assessment model to capture relations between threats, tasks, assets and business logic; develop a vender assessment model to evaluate the venders share of security responsibility; and develop a cost benefit trade-off methodology for optimal cloud adoption strategy. Based on these, will develop an on-line assessment methodology for cloud service providers assessment based on different applications, services and vendor compositions. With the proliferation of cloud architectures, it is critical that their security be assessable and issues addressable. The proposed work has the potential to enable loud users to gauge the trust-worthiness of individual cloud elements or aggregated cloud resources and to analyze and suggest appropriate risk mitigation strategy. The work is supported by the Industry Advisory Board and will engage multiple industry members of the center. The center will involve graduate students and be integrated in graduate course offerings. Industry tutorials will also be developed and offered.

了解风险和对特定系统安全实践的依赖对于制定安全云采用的一致策略至关重要。这项工作将研究云计算安全风险评估技术，特别关注离线风险管理和在线信任评估两个领域。该研究将开发一个项目评估模型，以捕获威胁、任务、资产和业务逻辑之间的关系；建立供应商评估模型，评估供应商的安全责任分担；并为最佳云采用策略开发成本效益权衡方法。在此基础上，将开发基于不同应用程序、服务和供应商组合的云服务提供商评估的在线评估方法。随着云架构的扩散，其安全性的可评估和问题的可解决是至关重要的。拟议的工作有可能使云用户能够衡量单个云元素或聚合云资源的可信度，并分析和建议适当的风险缓解战略。这项工作得到了行业咨询委员会的支持，并将吸引该中心的多个行业成员。该中心将招收研究生，并与研究生课程相结合。行业教程也将开发和提供。