Show simple item record

dc.contributor.authorRios, Erkuden
dc.contributor.authorRak, Massimiliano
dc.contributor.authorIturbe, Eider
dc.contributor.authorMallouli, Wissam
dc.date.accessioned2017-12-19T16:15:00Z
dc.date.available2017-12-19T16:15:00Z
dc.date.issued2017
dc.identifier.issn1613-0073
dc.identifier.urihttp://hdl.handle.net/11556/476
dc.description.abstractMulti-cloud applications, i.e. those that are deployed over multiple independent Cloud providers, pose a number of challenges to the security-aware development and operation. Security assurance in such applications is hard due to the lack of insights of security controls ap- plied by Cloud providers and the need of controlling the security levels of all the components and layers at a time. This paper presents the MUSA approach to Service Level Agreement (SLA)-based continuous security assurance in multi-cloud applications. The paper details the proposed model for capturing the security controls in the o ered application Se- curity SLA and the approach to continuously monitor and asses the controls at operation phase. This new approach enables to easily align development security requirements with controls monitored at operation as well as early react at operation to any possible security incident or SLA violation.en
dc.description.sponsorshipThe MUSA project leading to this paper has received funding from the European Union's Horizon 2020 research and innovation programme under grant agreement No. 644429.en
dc.language.isoengen
dc.publisherCEUR Workshop Proceedingsen
dc.titleSLA-Based Continuous Security Assurance in Multi-Cloud DevOpsen
dc.typeconferenceObjecten
dc.isiNoen
dc.relation.projectIDinfo:eu-repo/grantAgreement/EC/H2020/644429/EU/MUlti-cloud Secure Applications/MUSAen
dc.rights.accessRightsopenAccessen
dc.subject.keywordsMulti-cloud securityen
dc.subject.keywordsMulti-cloud monitoringen
dc.subject.keywordsSecurity assuranceen
dc.subject.keywordsSecurity in DevOpsen
dc.subject.keywordsCloud security controlsen
dc.subject.keywordsCloud security SLAen
dc.page.final68en
dc.page.initial50en
dc.volume.number1977en
dc.conference.titleInternational Workshop on Secure Software Engineering in DevOps and Agile Development. Oslo, Norway, September 14, 2017en
dc.conference.title


Files in this item

Thumbnail

    Show simple item record