Portal de Periódicos da CAPES

Risk Assessment for Cloud-Based IT Systems

2011; IGI Global; Volume: 3; Issue: 2 Linguagem: Inglês

10.4018/jghpc.2011040101

1938-0267

Yuyu Chou, Jan Oetting,

IoT and Edge/Fog Computing

The use of Cloud Computing services is an attractive option to improve IT systems to achieve rapidly and elastically provisioned capability, and also to offer economic benefits. However, companies see security as a major concern in migrating to the Cloud. To bring clarity in Cloud security, this paper presents a systematic approach to manage the risks and analyzes the full range of risk in Cloud Computing solutions. Furthermore, as a study case, Google App Engine Platform is assessed based on ISO/IEC 27002 and OWASP Top 10 Risk List in this paper. Knowing the risks of Cloud solutions, companies can execute well-informed decisions on going into the Cloud and build their Cloud solutions in a secure way, relying on a robust e-trust relationship.