On incorporating security parameters in service level agreements

Conference code: 148430; Export Date: 11 July 2019; Conference Paper
With development of cloud computing new ways for easy, on-demand, Internet-based access to computing resources have emerged. In such context a Service Level Agreement (SLA) enables contractual agreements between service providers and users. Given an SLA, service users are able to establish trust in that the service outcome corresponds to what they have demanded during the service negotiation process. However, an SLA provides a limited support outside of basic Quality of Service (QoS) parameters, especially when it comes to security. We find security as an important factor to be included in adjusting an SLA according to user defined objectives. Incorporating it in an SLA is challenging due to difficulty to provide complete and quantifiable metrics, thus we propose to focus on a systematic way of addressing security using the security process. In this paper we investigate ways in which security might be incorporated already in the service negotiation process and captured in an SLA. We propose a corresponding process to develop and maintain an SLA that considers both design-, and run-time. To demonstrate the approach we built upon the existing SLAC language and extend its syntax to support security. An example of a service being provided with security guarantees illustrates the concept.

Lisova, ElenaMälardalens högskola,Inbyggda system(Swepub:mdh)ela02 (författare)
Ashjaei, Seyed Mohammad Hossein,1980-Mälardalens högskola,Inbyggda system(Swepub:mdh)mai03 (författare)
Ashgar, Syed UsmanMälardalens högskola,Inbyggda system(Swepub:mdh)i.u. (författare)
Mälardalens högskolaInbyggda system (creator_code:org_t)

Ingår i:CLOSER 2019 - Proceedings of the 9th International Conference on Cloud Computing and Services Science: SciTePress, s. 48-579789897583650

Av författaren/redakt...: Causevic, Aida, ...; Lisova, Elena; Ashjaei, Seyed M ...; Ashgar, Syed Usm ...

Om ämnet

Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.