A Security Risk Assessment Model for Business Process Deployment in the Cloud

Elio Goettelmann (1, 2) , Karim Dahman (1) , Benjamin Gateau (2) , Eric Dubois (2) , Claude Godart (1)

1 SCORE - Services and Cooperation
2 CRP Henri Tudor - Centre de Recherche Public Henri Tudor [Headquarters]

Managing security risks on information systems is essential to guarantee their security while handling costs. However, the complexity of risk assessments is greatly increased when data is spread on multiple environments. In this paper we present a security risk assessment model for distributing business processes in a multi-cloud environment. We aim at offering the full power of cloud computing to composite applications while shielding companies from the complexity related to security risk assesments in the Cloud. We also want to give them the capablility to automatically generate secure and cost-effective applications across multiple clouds. Our approach is based on existing risk assessment methodologies, while using the industry recognized IT standards.

Mots clés: Business Process; Security Risk Management; Cloud

Domaines: Web

Elio Goettelmann, Karim Dahman, Benjamin Gateau, Eric Dubois, Claude Godart. A Security Risk Assessment Model for Business Process Deployment in the Cloud. IEEE International Conference on Services Computing, Jun 2014, Anchorage, AK, United States. pp.307 - 314, ⟨10.1109/SCC.2014.48⟩. ⟨hal-01095874⟩