Medina: Improving cloud services trustworthiness through continuous audit-based certification

Simple item page
dc.conference.title1st SWForum Workshop on Trustworthy Software and Open Source, TSOS 2021, 23 March 2021 - 25 March 2021en
dc.contributor.authorOrue-Echevarria, Leire
dc.contributor.authorGarcia, J.L.
dc.contributor.authorBanse, C.
dc.contributor.authorAlonso, Juncal
dc.date.accessioned2021-06-23T08:37:30Z
dc.date.available2021-06-23T08:37:30Z
dc.date.issued2021-03
dc.description.abstractOne of the reasons of the still limited adoption of Cloud Computing in the EU is the EU customers' perceived lack of security and transparency in this technology. Cloud service providers (CSPs) usually rely on security certifications as a mean to improve transparency and trustworthiness, however European CSPs still face multiple challenges for certifying their services (e.g., fragmentation in the certification market, and lack of mutual recognition). In this context, the EU Cybersecurity Act (EU CSA) proposes improving customer's trust in the European ICT market through a European certification scheme (EUCS). The proposed cloud security certification scheme conveys new technological challenges including the notion of automated monitoring for the whole supply chain, which needs to be solved in order to bring all the expected benefits to EU cloud providers and customers. In this context, MEDINA proposes a framework for supporting a continuous audit-based certification for CSPs based on EU CSA's scheme for cloud security certification. MEDINA will tackle challenges in areas like security validation/ testing, machine-readable certification language, cloud security performance, and audit evidence management. MEDINA will provide and empirically validate sustainable outcomes in order to benefit EU adopters.en
dc.description.sponsorshipThis work has been partially funded by the European project MEDINA (Horizon 2020 research and innovation Programme, under grant agreement no 952633).en
dc.divisionICT - European Software Instituteen
dc.identifier.issn1613-0073en
dc.identifier.urihttp://hdl.handle.net/11556/1154
dc.journal.titleCEUR Workshop Proceedingsen
dc.language.isoengen
dc.page.final23en
dc.page.initial16en
dc.publisherCEUR-WSen
dc.relation.projectIDinfo:eu-repo/grantAgreement/EC/H2020/952633/EU/Security framework to achieve a continuous audit-based certificationn in compliance with the EU-wide cloud security certification scheme/MEDINAen
dc.rightsAttribution 4.0 International*
dc.rights.accessRightsopen accessen
dc.rights.urihttp://creativecommons.org/licenses/by/4.0/*
dc.subject.keywordsCloud certification schemeen
dc.subject.keywordsCybersecurity Acten
dc.subject.keywordsContinuous auditingen
dc.subject.keywordsContinuous certificationen
dc.subject.keywordsSmart contractsen
dc.subject.keywordsCertification languageen
dc.titleMedina: Improving cloud services trustworthiness through continuous audit-based certificationen
dc.typeconference outputen
dc.volume.number2878en
Files
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
paper3.pdf
Size:
684.59 KB
Format:
Adobe Portable Document Format
Download