Welcome to the InfoSci Platform

Reference Hub

This research has been cited in:

Article
Tracing CVE Vulnerability Information to CAPEC Attack Patterns Using Natural Language Processing TechniquesInformation10.3390/info12080298
Article
A Comprehensive Survey of IoT- Based Cloud Computing Cyber SecurityOriental journal of computer science and technology10.13005/ojcst15.010203.04
Article
Cloud and Big Data Security System’s Review Principles: A Decisive InvestigationWireless Personal Communications10.1007/s11277-022-09781-0
Article
Cyber Security in IoT-Based Cloud Computing: A Comprehensive SurveyElectronics10.3390/electronics11010016

CSPM: Metamodel for Handling Security and Privacy Knowledge in Cloud Service Development

Tian Xia, Hironori Washizaki, Yoshiaki Fukazawa, Haruhiko Kaiya, Shinpei Ogata, Eduardo B. Fernandez, Takehisa Kato, Hideyuki Kanuka, Takao Okubo, Nobukazu Yoshioka, Atsuo Hazeyama

Source Title: International Journal of Systems and Software Security and Protection (IJSSSP)12(2)

ISSN: 2640-4265|EISSN: 2640-4273|EISBN13: 9781799863816|DOI: 10.4018/IJSSSP.20210101.oa1

Cite Article Cite Article

MLA

Xia, Tian, et al. "CSPM: Metamodel for Handling Security and Privacy Knowledge in Cloud Service Development." IJSSSP vol.12, no.2 2021: pp.68-85. http://doi.org/10.4018/IJSSSP.20210101.oa1

APA

Xia, T., Washizaki, H., Fukazawa, Y., Kaiya, H., Ogata, S., Fernandez, E. B., Kato, T., Kanuka, H., Okubo, T., Yoshioka, N., & Hazeyama, A. (2021). CSPM: Metamodel for Handling Security and Privacy Knowledge in Cloud Service Development. International Journal of Systems and Software Security and Protection (IJSSSP), 12(2), 68-85. http://doi.org/10.4018/IJSSSP.20210101.oa1

Chicago

Xia, Tian, et al. "CSPM: Metamodel for Handling Security and Privacy Knowledge in Cloud Service Development," International Journal of Systems and Software Security and Protection (IJSSSP) 12, no.2: 68-85. http://doi.org/10.4018/IJSSSP.20210101.oa1

Export Reference

Favorite Full-Issue Download

View Full Text HTML

View Full Text PDF

Abstract

Security and privacy in cloud systems are critical. To address security and privacy concerns, many security patterns, privacy patterns, and non-pattern-based knowledge have been reported. However, knowing which pattern or combination of patterns to use in a specific scenario is challenging due to the sheer volume of options and the layered cloud stack. To deal with security and privacy in cloud services, this study proposes the cloud security and privacy metamodel (CSPM). CSPM uses a consistent approach to classify and handle existing security and privacy patterns. In addition, CSPM is used to develop a security and privacy awareness process to develop cloud systems. The effectiveness and practicality of CSPM is demonstrated via several case studies.