Extension of CYSEMOL for cloud computing information security assessment

Abstract

The emerging cloud computing paradigm enables countless possibilities for cost saving, rapid growing architectures with a pay-as-you-go model. However, it also brings drawbacks typical for any emerging technology – immaturity of security management is one of them. Automated information security assessment systems – a relatively new subject on its’ own – offers solutions for ensuring security and modeling of security breaches as a preventive action. This paper presents an approach to cloud security evaluation model that is later implemented to an advanced enterprise architecture analysis system – Cyber Security Modeling Language (CySeMoL) for automatic multi-perspective cloud security information risk assessment.