Integrating Security Risk Management into Business Process Management for the Cloud - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2014

Integrating Security Risk Management into Business Process Management for the Cloud

Abstract

Security issues are still preventing wider adoption of cloud computing, especially for businesses which are handling sensitive information. Indeed, by outsourcing its information system (IS), a company can lose control over its infrastructure, its software or even its data. Therefore, new methods and tools need to be defined to respond to this challenge. In this paper we propose to integrate Security Risk Management approaches into Business Process Management to effectively treat security issues at the early phases of the Information System construction. We focus on cloud brokers, emerging actors of the cloud delivery model, who enhance and aggregate existing cloud services to match them with their cloud consumers' requirements. Our main goal is to provide them with tools and techniques to increase the global security level of an IS through different risk treatment strategies.

Domains

Web
Fichier principal
Vignette du fichier
CBI2014.pdf (425.53 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01095868 , version 1 (16-12-2014)

Identifiers

Cite

Elio Goettelmann, Nicolas Mayer, Claude Godart. Integrating Security Risk Management into Business Process Management for the Cloud. CBI 2014 (IEEE 16th Conference on Business Informatics), Jul 2014, Genève, Switzerland. pp.86 - 93, ⟨10.1109/CBI.2014.29⟩. ⟨hal-01095868⟩
148 View
601 Download

Altmetric

Share

Gmail Facebook X LinkedIn More