Business process outsourcing to the cloud: Balancing costs with security risks

Amina Ahmed Nacer (1, 2) , Claude Godart (2) , Guillaume Rosinosky (2) , Abdelkamel Tari (1) , Samir Youcef (2)

1 UB - Université Abderrahmane Mira [Université de Béjaïa] = University Abderrahmane Mira [University of Béjaïa]
2 COAST - Web Scale Trustworthy Collaborative Service Systems

The cloud computing introduced security risks which make companies reluctant to adopt it. Some means exist for reducing these risks while deploying a business process (BP) in the cloud. Among them, a technique largely used is to split the BP model in a choreography of BP fragments so that a cloud has only a partial view of the model. Unfortunately, reducing security risks with this approach implies the increase of BP fragments and of hosting clouds, and corollary the increase of costs. To overcome this issue, we present two heuristics managing separation/co-location constraints for risk versus cost optimization: the first optimizes the risk while respecting a cost threshold, the second optimizes the cost while respecting a risk threshold. These heuristics are experimented with a risk model, whose characteristics is to use only client-side data, and a more traditional cost model. Finally, the heuristics are validated against an exact optimization solution.

Domaines: Informatique [cs]

Amina Ahmed Nacer, Claude Godart, Guillaume Rosinosky, Abdelkamel Tari, Samir Youcef. Business process outsourcing to the cloud: Balancing costs with security risks. Computers in Industry, 2019, 104, pp.59-74. ⟨10.1016/j.compind.2018.10.003⟩. ⟨hal-01888396⟩