Top

Published in:

2019 | OriginalPaper | Chapter

2. Grundlagen zur Zertifizierung von Cloud-Services

Authors : Sebastian Lins, Stephan Schneider, Ali Sunyaev

Published in: Cloud-Service-Zertifizierung

Publisher: Springer Berlin Heidelberg

Activate our intelligent search to find suitable subject content or patents.

search-config

AI-assisted search

Off

Zusammenfassung

In diesem Kapitel werden die Grundlagen zu Cloud-Computing und der Zertifizierung von Cloud-Services kurz erläutert. Es werden die grundlegenden Charakteristiken des Cloud-Computings, die Service- und Bereitstellungsmodelle beschrieben sowie Risiken beim Einsatz von Cloud-Services erörtert. Anschließend wird eine kurze Einführung zur Zertifizierung von Cloud-Services gegeben, in welcher der Nutzen von Zertifizierungen für Cloud-Service-Anbieter und -Kunden dargelegt wird, gefolgt von einer Marktübersicht zu existierenden Cloud-Service-Zertifizierungen.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

previous chapter Einleitung

next chapter Gestaltungsempfehlungen für Cloud-Service-Zertifizierungen

Ackermann T, Miede A, Buxmann P, Steinmetz R (2011) Taxonomy of technological IT outsourcing risks: support for risk identification and quantification. In: Proceedings of the 19th European conference on information systems

Ali M, Khan SU, Vasilakos AV (2015) Security in cloud computing: opportunities and challenges. Inf Sci 305(June):357–383. https://doi.org/10.1016/j.ins.2015.01.025CrossRef

Amazon Web Services (2015) AWS|Amazon Virtual Private Cloud (VPC) – Sichere Private Cloud (VPN). https://aws.amazon.com/de/vpc/. Zugegriffen am 22.06.2016

Annette JR, Banu WA, Chandran PS (2015) Rendering-as-a-service: taxonomy and comparison. Procedia Comput Sci 50:276–281. https://doi.org/10.1016/j.procs.2015.04.048CrossRef

Armbrust M, Fox A, Griffith R, Joseph AD, Katz R, Konwinski A, Lee G, Patterson D, Rabkin A, Stoica I (2010) A view of cloud computing. Commun ACM 53(4):50–58. https://doi.org/10.1145/1721654.1721672CrossRef

Benlian A, Kettinger WJ, Sunyaev A, Winkler TJ (2018) The transformative value of cloud computing: a decoupling, platformization, and recombination theoretical framework. J Manag Inf Syst 35(3):719–739. https://doi.org/10.1080/07421222.2018.1481634CrossRef

Bruhn M (2008) Qualitätsmanagement Für Dienstleistungen: Grundlagen, Konzepte, Methoden, 7. Aufl. Springer, Berlin/Heidelberg

Chen D, Zhao H (2012) Data security and privacy protection issues in cloud computing. In: Proceedings of the 2012 international conference on computer science and electronics engineering

Cloud Security Alliance (2017) The treacherous 12 – top threats to cloud computing + industry insights. https://cloudsecurityalliance.org/group/top-threats/. Zugegriffen am 29.11.2018

Dašić P, Dašić J, Crvenković B (2016) Service models for cloud computing: Search as a Service (SaaS). Int J Eng Technol 8(5):2366–2373. https://doi.org/10.21817/ijet/2016/v8i5/160805034CrossRef

Dillon T, Wu C, Chang E (2010) Cloud computing: issues and challenges. In: Proceedings of the 24th IEEE international conference on advanced information networking and applications

European Network and Security Agency (2012) Cloud computing – benefits, risks and recommendations for information security. https://resilience.enisa.europa.eu/cloud-security-and-resilience/publications/cloud-computing-benefits-risks-and-recommendations-for-information-security. Zugegriffen am 22.06.2016

European Network Information Security Agency (2013) Critical cloud computing: a CIIP perspective on cloud computing services. https://www.enisa.europa.eu/publications/critical-cloud-computing. Zugegriffen am 29.11.2018

Fernandes DB, Soares LB, Gomes J, Freire M, Inácio PM (2014) Security issues in cloud environments: a survey. Int J Inf Secur 13(2):113–170. https://doi.org/10.1007/s10207-013-0208-7CrossRef

Gonzalez N, Miers C, Redígolo F, Simplício M, Carvalho T, Näslund M, Pourzandi M (2012) A quantitative analysis of current security concerns and solutions for cloud computing. J Cloud Comput Adv Syst Appl 1(1):11. https://doi.org/10.1186/2192-113x-1-11CrossRef

Grobauer B, Walloschek T, Stocker E (2011) Understanding cloud computing vulnerabilities. IEEE Secur Priv 9(2):50–57. https://doi.org/10.1109/MSP.2010.115CrossRef

Grozev N, Buyya R (2014) Inter-cloud architectures and application brokering: taxonomy and survey. Softw Pract Exp 44(3):369–390. https://doi.org/10.1002/spe.2168CrossRef

Heiser J, Nicolett M (2008) Assessing the security risks of cloud computing. Gartner Inc. http://s3.amazonaws.com/academia.edu.documents/33355553/Gartner_Security_Risks_of_Cloud.pdf?AWSAccessKeyId=AKIAIWOWYYGZ2Y53UL3A&Expires=1498136359&Signature=GaUtYOBOYbyHlCcc3PFi1rqBMiA%3D&response-content-disposition=inline%3B%20filename%3DAssessing_the_Security_Risks_of_Cloud_Co.pdf. Zugegriffen am 22.06.2017

International Organization for Standardization (2004) Conformity assessment – vocabulary and general principles. ISO/IEC 17000:2004

Jensen M, Gruschka N, Herkenhöner R (2009) A survey of attacks on web services. Comput Sci Res Dev 24(4):185. https://doi.org/10.1007/s00450-009-0092-6CrossRef

Kalloniatis C, Mouratidis H, Islam S (2013) Evaluating cloud deployment scenarios based on security and privacy requirements. Requir Eng 18(4):299–319. https://doi.org/10.1007/s00766-013-0166-7CrossRef

Khan KM, Malluhi Q (2013) Trust in cloud services: providing more controls to clients. Computer 46(7):94–96. https://doi.org/10.1109/MC.2013.254CrossRef

Lang M, Wiesche M, Krcmar H (2016) What are the most important criteria for cloud service provider selection? a Delphi study. In: Proceedings of the 24th European conference on information systems

Lang M, Wiesche M, Krcmar H (2018) Criteria for selecting cloud service providers: a Delphi study of quality-of-service attributes. Inf Manag 55(6):746–758. https://doi.org/10.1016/j.im.2018.03.004CrossRef

Leimeister S, Böhm M, Riedl C, Krcmar H (2010) The business perspective of cloud computing: actors, roles and value networks. In: Proceedings of the 18th European conference on information systems

Lins S, Grochol P, Schneider S, Sunyaev A (2016) Dynamic certification of cloud services: trust, but verify! IEEE Secur Priv 14(2):67–71. https://doi.org/10.1109/MSP.2016.26CrossRef

Lins S, Schneider S, Sunyaev A (2018) Trust is good, control is better: creating secure clouds by continuous auditing. IEEE Trans Cloud Comput 6(3):890–903. https://doi.org/10.1109/tcc.2016.2522411CrossRef

Linthicum DS (2009) Cloud computing and SOA convergence in your enterprise: a step-by-step guide: how to use SaaS, SOA, mashups, and web 2.0 to break down the IT gates, 1. Aufl. Addison-Wesley, Boston

Marston S, Li Z, Bandyopadhyay S, Zhang J, Ghalsasi A (2011) Cloud computing – the business perspective. Decis Support Syst 51(1):176–189. https://doi.org/10.1016/j.dss.2010.12.006CrossRef

McNeish JE, Francescucci A, Hazra U (2016) Investigating consumers’ reluctance to give up local hard drives after adopting the cloud. J Inf Commun Ethics Soc 14(2):152–166. https://doi.org/10.1108/jices-06-2015-0021CrossRef

Mell P, Grance T (2011) SP 800-145. The NIST definition of cloud computing: recommendations of the national institute of standards and technology. https://doi.org/10.6028/NIST.SP.800-145

Neubauer C, Weiss A, Lins S, Sunyaev A (2018) Vergleich Existierender Zertifizierungen Zum Nachweis Vertrauenswürdiger Cloud-Services. In: Krcmar H, Eckert C, Roßnagel A, Sunyaev A, Wiesche M (Hrsg) Management Sicherer Cloud-Services: Entwicklung und Evaluation Dynamischer Zertifikate, 1. Aufl. Springer Fachmedien Wiesbaden, Wiesbaden, S 81–90. https://doi.org/10.1007/978-3-658-19579-3_7CrossRef

NIST Cloud Computing Security Working Group (2013) NIST cloud computing security reference architecture. https://csrc.nist.gov/publications/detail/sp/500-299/draft. Zugegriffen am 29.11.2018

Park S-T, Park E-M, Seo J-H, Li G (2016) Factors affecting the continuous use of cloud service: focused on security risks. Clust Comput 19(1):485–495. https://doi.org/10.1007/s10586-015-0516-yCrossRef

Pearson S (2013) Privacy, security and trust in cloud computing. In: Pearson S, Yee G (Hrsg) Privacy and security for cloud computing, 1. Aufl. Springer London, London, S 3–42. https://doi.org/10.1007/978-1-4471-4189-1_1CrossRef

Repschlaeger J, Erek K, Zarnekow R (2013) Cloud computing adoption: an empirical study of customer preferences among start-up companies. Electron Mark 23(2):115–148. https://doi.org/10.1007/s12525-012-0119-xCrossRef

Schneider S, Lansing J, Gao F, Sunyaev A (2014) A taxonomic perspective on certification schemes: development of a taxonomy for cloud service certification criteria. In: Proceedings of the 47th Hawaii international conference on system sciences

Schneider S, Lansing J, Sunyaev A (2013) Empfehlungen Zur Gestaltung Von Cloud-Service-Zertifizierungen. Ind Manag 29(4):13–17

Schneider S, Sunyaev A (2016) Determinant factors of cloud-sourcing decisions: reflecting on the IT outsourcing literature in the era of cloud computing. J Inf Technol 31(1):1–32. https://doi.org/10.1057/jit.2014.25CrossRef

Sengupta S, Kaulgud V, Sharma VS (2011) Cloud computing security – trends and research directions. In: Proceedings of the 2011 IEEE world congress on services

Sharma DH, Dhote C, Potey MM (2016) Identity and access management as security-as-a-service from clouds. Procedia Comput Sci 79:170–174. https://doi.org/10.1016/j.procs.2016.03.117CrossRef

Singh S, Jeong Y-S, Park JH (2016) A survey on cloud computing security: issues, threats, and solutions. J Netw Comput Appl 75:200–222. https://doi.org/10.1016/j.jnca.2016.09.002CrossRef

Soares J, Carapinha J, Melo M, Monteiro R, Sargento S (2011) Building virtual private clouds with network-aware cloud. In: Proceedings of the 5th international conference on advanced engineering computing and applications in sciences

Subashini S, Kavitha V (2011) A survey on security issues in service delivery models of cloud computing. J Netw Comput Appl 34(1):1–11. https://doi.org/10.1016/j.jnca.2010.07.006CrossRef

Sunyaev A, Schneider S (2013) Cloud services certification. Commun ACM (CACM) 56(2):33–36. https://doi.org/10.1145/2408776.2408789CrossRef

Trenz M, Huntgeburth JC, Veit DJ (2013) The role of uncertainty in cloud computing continuance: antecedents, mitigators, and consequences. In: Proceedings of the 21st European conference on information systems

Trusted Cloud e.V. (2016) Welchen Nutzen Schaffen Standards und Zertifikate? https://www.trusted-cloud.de/de/standards. Zugegriffen am 22.06.2017

Xiao Z, Xiao Y (2013) Security and privacy in cloud computing. IEEE Commun Surv Tutorials 15(2):843–859. https://doi.org/10.1109/SURV.2012.060912.00182CrossRef

Zhou M, Zhang R, Xie W, Qian W, Zhou A (2010) Security and privacy in cloud computing: a survey. In: Proceedings of the sixth international conference on semantics, knowledge and grids

Title: Grundlagen zur Zertifizierung von Cloud-Services
Authors: Sebastian Lins
Stephan Schneider
Ali Sunyaev
Publisher: Springer Berlin Heidelberg
Book: Cloud-Service-Zertifizierung
Print ISBN: 978-3-662-58856-7

Electronic ISBN: 978-3-662-58857-4

Copyright Year: 2019
DOI: https://doi.org/10.1007/978-3-662-58857-4_2

Springer Professional

Zusammenfassung

Please log in to get access to your license.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"

Premium Partner