Open Access
Security and Compliance Ontology for Cloud Service Agreements
Ana Sofía Zalazar, Luciana Ballejos, Sebastian Rodriguez
Open Journal of Cloud Computing (OJCC), 4(1), Pages 17-25, 2017, Downloads: 2375, Citations: 2
Full-Text: pdf | URN: urn:nbn:de:101:1-2017100112242 | GNL-LP: 1140718274 | Meta-Data: tex xml rdf rss | Show/Hide Abstract | Show/Hide BibTex
Abstract: Cloud computing is a business paradigm where two important roles must be defined: provider and consumer. Providers offer services (e.g. web application, web services, and databases) and consumers pay for using them. The goal of this research is to focus on security and compliance aspects of cloud service. An ontology is introduced, which is the conceptualization of cloud domain, for analyzing different compliance aspects of cloud agreements. The terms, properties and relations are shown in a diagram. The proposed ontology can help service consumers to extract relevant data from service level agreements, to interpret compliance regulations, and to compare different contractual terms. Finally, some recommendations are presented for cloud consumers to adopt services and evaluate security risks.
BibTex:
@Article{OJCC_2017v4i1n02_Zalazar,
title = {Security and Compliance Ontology for Cloud Service Agreements},
author = {Ana Sof\'{i}a Zalazar and
Luciana Ballejos and
Sebastian Rodriguez},
journal = {Open Journal of Cloud Computing (OJCC)},
issn = {2199-1987},
year = {2017},
volume = {4},
number = {1},
pages = {17--25},
url = {http://nbn-resolving.de/urn:nbn:de:101:1-2017100112242},
urn = {urn:nbn:de:101:1-2017100112242},
publisher = {RonPub},
bibsource = {RonPub},
abstract = {Cloud computing is a business paradigm where two important roles must be defined: provider and consumer. Providers offer services (e.g. web application, web services, and databases) and consumers pay for using them. The goal of this research is to focus on security and compliance aspects of cloud service. An ontology is introduced, which is the conceptualization of cloud domain, for analyzing different compliance aspects of cloud agreements. The terms, properties and relations are shown in a diagram. The proposed ontology can help service consumers to extract relevant data from service level agreements, to interpret compliance regulations, and to compare different contractual terms. Finally, some recommendations are presented for cloud consumers to adopt services and evaluate security risks.}
}