SciTePress - Affiliation Profile

TU Dortmund University, Germany

Context (please use complete words only)

Field

Sort by

3 Papers

Supporting the Security Certification of Cloud-Computing-Infrastructures

Authors: Amir Shayan Ahmadian ¹ , Fabian Coerschulte ² and Jan Jürjens ³

Affiliations: ¹ TU Dortmund, Germany , ² Chair of Software Engineering, Technical University Dortmund, Germany , ³ Fraunhofer ISST and TU Dortmund, Germany

Digital Object Identifier: 10.5220/0005885600650074

Proceedings of BMSD 2015, ISBN: 978-989-758-111-3

Quick Abstract

Outsourcing services into the cloud is a worthwhile alternative to classic service models from both a customers and providers point of view. Therefore many new cloud providers surface, offering their cloud solutions. The trust and acceptance for cloud solutions are however still not given for many customers since a lot of security incidents related to cloud computing were reported. One possibility for companies to raise the trust in the own products is to gain a certification for them based on ISO27001. The certification is however a large hurdle, especially for small and medium enterprises since they lack resources and know-how. In this paper we present an overview of the ClouDAT framework. It represents a tool based approach to help in the certification process for cloud services specifically tailored to SMEs.

Ontology-based Analysis of Compliance and Regulatory Requirements of Business Processes

Authors: Thorsten Humberg ¹ , Christian Wessel ² , Daniel Poggenpohl ¹ , Sven Wenzel ² , Thomas Ruhroth ² and Jan Jürjens ³

Affiliations: ¹ Fraunhofer ISST, Germany , ² Technical University Dortmund, Germany , ³ Technical University Dortmund and Fraunhofer ISST, Germany

Digital Object Identifier: 10.5220/0004505405530561

Proceedings of CloudSecGov 2013/CLOSER, ISBN: 978-989-8565-52-5

Quick Abstract

Despite its significant potential benefits, the concept of Cloud Computing is still regarded with skepticism in most companies. One of the main obstacle is posed by concerns about the systems’ security and compliance issues. Examining system and process models for compliance manually is time-consuming and error-prone, in particular due to the mere extent of potentially relevant sources of security and compliance concerns that have to be considered. This paper proposes techniques to ease these problems by providing support in identifying relevant aspects, as well as suggesting possible methods (from an existing pool of such) to actually check a given model. We developed a two-step approach: At first, we build an ontology to formalize rules from relevant standards, augmented with additional semantic information. This ontology is then utilized in the analysis of an actual model of a system or a business process in order to detect possible compliance obligations.

SECURING PROCESSES FOR OUTSOURCING INTO THE CLOUD

Authors: Sven Wenzel ¹ , Christian Wessel ¹ , Thorsten Humberg ² and Jan Jürjens ³

Affiliations: ¹ Technical University Dortmund, Germany , ² Fraunhofer ISST, Germany , ³ Technical University Dortmund and Fraunhofer ISST, Germany

Digital Object Identifier: 10.5220/0003979306750680

Proceedings of CloudSecGov 2012/CLOSER, ISBN: 978-989-8565-05-1

Quick Abstract

Cloud computing is yet one of the leading developments and depicts the biggest progress in web technologies. It offers a convenient way for using shared and easy accessible resources, in both a web-based and demand-oriented sense. However, cloud computing brings concept-based risks, e.g. the risk of private data becoming publicly available. Outsourcing of services into a cloud computing environment arises numerous compliance and security-problems for the potential customer. Legal as well as business requirements have to be met after migration to a cloud environment. Compliance to laws, industry-specific regulations and other rules have to be kept. In this paper we present the research project SecureClouds and our ongoing research towards security and compliance analysis of processes which are to be outsourced into the cloud. We further show a first prototype of an analytic tool-environment that allows us to examine whether outsourcing of a business process is possible while keeping all security and compliance requirements.

Context (please use complete words only)

Field

Sort by

Topic(s):

Title:
ISBN:
Year:
Acronym:
Subject:

Title:
Author:
Affiliation:
Subject:

Name:
Affiliation:
Country:
Conference:
Subject:

Name:
Country:
Subject:

Affiliation

Filter listed results, by