[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to main content

Towards Automatic Comparison of Cloud Service Security Certifications

  • Conference paper
  • First Online:
SOFSEM 2019: Theory and Practice of Computer Science (SOFSEM 2019)

Abstract

Cloud service providers who offer services to their users traditionally signal security of their offerings through certifications based on various certification schemes. Currently, a vast number of schemes and standards exists on one side (cloud service certifications), while another large set of security requirements stemming from internal needs or laws and regulations stand on the other side (users of cloud services). Determining whether a service with an arbitrary certificate in one country fulfills requirements imposed by the user in another country is a difficult task and therefore a project (EU-SEC) was started focusing on allowing cross-border usage of cloud services. In this paper, we propose automated comparison of cloud service security certification schemes and, subsequently, security of cloud services certified using these schemes. In the presented method, we map requirements in schemes, standards, laws, and regulations into a proposed cloud service security ontology. Due to the free-form text nature of these items, we also describe a supporting method for semi-automated conversion of free text into this ontology using natural language processing. The requirements described in ontology format are then easily compared against each other. We also describe an implementation of a prototype system supporting the conversion and comparison with preliminary results on describing and comparing two well-known schemes.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Subscribe and save

Springer+ Basic
£29.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
GBP 19.95
Price includes VAT (United Kingdom)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
GBP 35.99
Price includes VAT (United Kingdom)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
GBP 44.99
Price includes VAT (United Kingdom)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

Notes

  1. 1.

    Example: “Prior to granting customers access to data, assets, and information systems, identified security, contractual, and regulatory requirements for customer access shall be addressed.” (AIS-02, CSA CCM v3.0.1).

  2. 2.

    https://www.w3.org/2005/Incubator/usdl/XGR-usdl-20111027/.

  3. 3.

    https://www.w3.org/2005/Incubator/usdl/.

  4. 4.

    http://www.heppnetz.de/ontologies/goodrelations/v1.

  5. 5.

    (n 1).

  6. 6.

    https://www.nodebox.net/code/index.php/Linguistics.

References

  1. Androcec, D., Vrcek, N., Seva, J.: Cloud computing ontologies: a systematic review. In: MOPAS 2012: The Third International Conference on Models and Ontology-Based Design of Protocols, Architectures and Services Cloud. IARIA, pp. 9–14 (2012)

    Google Scholar 

  2. Singh, V., Pandey, S.K.: A comparative study of cloud security ontologies. In: Proceedings of 3rd International Conference on Reliability, Infocom Technologies and Optimization. IEEE (2014)

    Google Scholar 

  3. Zhang, M., Ranjan, R., Haller, A., et al.: An ontology-based system for cloud infrastructure services’ discovery. In: 8th International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom). IEEE, Pittsburgh, pp. 524–530 (2012)

    Google Scholar 

  4. Zhu, J.: Survey on ontology mapping. Phys. Procedia 24, 1857–1862 (2012). https://doi.org/10.1016/j.phpro.2012.02.273

    Article  Google Scholar 

  5. Hooi, Y.K., Hassan, M.F., Shariff, A.M.: A survey on ontology mapping techniques. In: Jeong, H.Y., S. Obaidat, M., Yen, N.Y., Park, J.J.(Jong Hyuk) (eds.) Advances in Computer Science and its Applications. LNEE, vol. 279, pp. 829–836. Springer, Heidelberg (2014). https://doi.org/10.1007/978-3-642-41674-3_118

    Chapter  Google Scholar 

  6. Pedrinaci, C., Cardoso, J., Leidig, T.: Linked USDL: a vocabulary for web-scale service trading. In: Presutti, V., d’Amato, C., Gandon, F., d’Aquin, M., Staab, S., Tordai, A. (eds.) ESWC 2014. LNCS, vol. 8465, pp. 68–82. Springer, Cham (2014). https://doi.org/10.1007/978-3-319-07443-6_6

    Chapter  Google Scholar 

  7. Gonzalez, N., Miers, C., Redígolo, F., et al.: A quantitative analysis of current security concerns and solutions for cloud computing. J. Cloud Comput. Adv. Syst. Appl. 1, 11 (2012). https://doi.org/10.1186/2192-113x-1-11

    Article  Google Scholar 

  8. Veloudis, S., Paraskakis, I.: Ontological templates for modelling security policies in cloud environments. In: Proceedings of the 20th Pan-Hellenic Conference on Informatics - PCI 2016. ACM Press, New York (2016)

    Google Scholar 

  9. Garcia, J.M., Fernandez, P., Pedrinaci, C., et al.: Modeling service level agreements with linked USDL agreement. IEEE Trans. Serv. Comput. 10, 52–65 (2017). https://doi.org/10.1109/TSC.2016.2593925

    Article  Google Scholar 

  10. Takahashi, T., Kadobayashi, Y., Fujiwara, H.: Ontological approach toward cybersecurity in cloud computing. In: Proceedings of the 3rd International Conference on Security of Information and Networks - SIN 2010. ACM Press, New York, pp. 100–109 (2010)

    Google Scholar 

  11. Marcus, M.P., Marcinkiewicz, M.A., Santorini, B.: Building a large annotated corpus of English: the Penn treebank. Comput. Linguist. 19, 313–330 (1993)

    Google Scholar 

  12. Manning, C., Surdeanu, M., Bauer, J., et al.: The Stanford CoreNLP natural language processing toolkit. In: Proceedings of 52nd Annual Meeting of the Association for Computational Linguistics: System Demonstrations. Association for Computational Linguistics, Stroudsburg, pp. 55–60 (2014)

    Google Scholar 

Download references

Acknowledgement

This work was partially supported by the project EU 731845 – EU-SEC.

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Martin Labaj .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2019 Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Labaj, M., Rástočný, K., Chudá, D. (2019). Towards Automatic Comparison of Cloud Service Security Certifications. In: Catania, B., Královič, R., Nawrocki, J., Pighizzini, G. (eds) SOFSEM 2019: Theory and Practice of Computer Science. SOFSEM 2019. Lecture Notes in Computer Science(), vol 11376. Springer, Cham. https://doi.org/10.1007/978-3-030-10801-4_24

Download citation

  • DOI: https://doi.org/10.1007/978-3-030-10801-4_24

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-030-10800-7

  • Online ISBN: 978-3-030-10801-4

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics