Cloud – Trust – a Security Assessment Model for Infrastructure as a Service (IaaS) Clouds

Cloud – Trust – a Security Assessment Model for Infrastructure as a Service (IaaS) Clouds

Abstract—Cloud – Trust – a Security Assessment Model for Infrastructure as a Service (IaaS) Clouds. The vulnerability of Cloud Computing Systems (CCSs) to Advanced Persistent Threats < Final Year Projects 2016 > APTs is a significant concern to government and industry. We present a cloud architecture reference model that incorporates a wide range of security controls and best practices, and a cloud security assessment model – Cloud-Trust – that estimates high level security metrics to quantify the degree of confidentiality and integrity offered by a CCS or cloud service provider (CSP). Cloud-Trust is used to assess the security level of four multi-tenant IaaS cloud architectures equipped with alternative cloud security controls and to show the probability of CCS penetration (high value data compromise) is high if a minimal set of security controls are implemented.