ThreatRiskEvaluator: A Tool for Assessing Threat-Specific Security Risks in the Cloud

Armstrong Nhlabatsi; Alaa Hussein; Rachael Fernandez; Noora Fetais; Jin Hong; Dong Seong Kim; Khaled M. Khan

doi:10.1109/CSET.2019.8904894

ThreatRiskEvaluator: A Tool for Assessing Threat-Specific Security Risks in the Cloud

Armstrong Nhlabatsi, Alaa Hussein, Rachael Fernandez, Noora Fetais, Jin Hong, Dong Seong Kim, Khaled M. Khan

Research output: Chapter in Book/Conference paper › Conference paper › peer-review

2 Citations (Scopus)

Abstract

In cloud computing, security risks posed to individual clients are different based on their specific security requirements. In current practice, cloud providers usually apply generic protection mechanisms that may not be effective in addressing specific threats for different clients. In this paper, we describe a tool, called 'ThreatRiskEvaluator' that assesses security risks that are specific and relevant to specific cloud clients. The tool implements a novel risk analysis mechanism that utilizes various security-related properties of the cloud such as vulnerability information, the probability of an attack, as well as client-specific security requirements. The method enables cloud providers to make fine-grained decisions for selecting specific protection mechanisms to tackle specific risks posed to individual clients based on their security needs against specific threats.

Original language	English
Title of host publication	2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019
Place of Publication	USA
Publisher	IEEE, Institute of Electrical and Electronics Engineers
ISBN (Electronic)	9781728145389
DOIs	https://doi.org/10.1109/CSET.2019.8904894
Publication status	Published - 1 Oct 2019
Event	International Conference on Cyber Security for Emerging Technologies, CSET'19 - Doha, Qatar Duration: 27 Oct 2019 → 29 Oct 2019 http://www.qu.edu.qa/conference/CSET-2019

Publication series

Name	2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019

Conference

Conference	International Conference on Cyber Security for Emerging Technologies, CSET'19
Country/Territory	Qatar
City	Doha
Period	27/10/19 → 29/10/19
Internet address	http://www.qu.edu.qa/conference/CSET-2019

Access to Document

10.1109/CSET.2019.8904894

Cite this

Nhlabatsi, A., Hussein, A., Fernandez, R., Fetais, N., Hong, J., Kim, D. S., & Khan, K. M. (2019). ThreatRiskEvaluator: A Tool for Assessing Threat-Specific Security Risks in the Cloud. In 2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019 [8904894] (2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019). IEEE, Institute of Electrical and Electronics Engineers. https://doi.org/10.1109/CSET.2019.8904894

Nhlabatsi, Armstrong ; Hussein, Alaa ; Fernandez, Rachael et al. / ThreatRiskEvaluator : A Tool for Assessing Threat-Specific Security Risks in the Cloud. 2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019. USA : IEEE, Institute of Electrical and Electronics Engineers, 2019. (2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019).

@inproceedings{22d190832351438bb7c1b737840c78cb,

title = "ThreatRiskEvaluator: A Tool for Assessing Threat-Specific Security Risks in the Cloud",

abstract = "In cloud computing, security risks posed to individual clients are different based on their specific security requirements. In current practice, cloud providers usually apply generic protection mechanisms that may not be effective in addressing specific threats for different clients. In this paper, we describe a tool, called 'ThreatRiskEvaluator' that assesses security risks that are specific and relevant to specific cloud clients. The tool implements a novel risk analysis mechanism that utilizes various security-related properties of the cloud such as vulnerability information, the probability of an attack, as well as client-specific security requirements. The method enables cloud providers to make fine-grained decisions for selecting specific protection mechanisms to tackle specific risks posed to individual clients based on their security needs against specific threats.",

keywords = "Cloud computing, risk assessment, security risk, security threats, vulnerability",

author = "Armstrong Nhlabatsi and Alaa Hussein and Rachael Fernandez and Noora Fetais and Jin Hong and Kim, {Dong Seong} and Khan, {Khaled M.}",

year = "2019",

month = oct,

day = "1",

doi = "10.1109/CSET.2019.8904894",

language = "English",

series = "2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019",

publisher = "IEEE, Institute of Electrical and Electronics Engineers",

booktitle = "2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019",

address = "United States",

note = "International Conference on Cyber Security for Emerging Technologies, CSET'19 ; Conference date: 27-10-2019 Through 29-10-2019",

url = "http://www.qu.edu.qa/conference/CSET-2019",

}

Nhlabatsi, A, Hussein, A, Fernandez, R, Fetais, N, Hong, J, Kim, DS & Khan, KM 2019, ThreatRiskEvaluator: A Tool for Assessing Threat-Specific Security Risks in the Cloud. in 2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019., 8904894, 2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019, IEEE, Institute of Electrical and Electronics Engineers, USA, International Conference on Cyber Security for Emerging Technologies, CSET'19, Doha, Qatar, 27/10/19. https://doi.org/10.1109/CSET.2019.8904894

ThreatRiskEvaluator : A Tool for Assessing Threat-Specific Security Risks in the Cloud. / Nhlabatsi, Armstrong; Hussein, Alaa; Fernandez, Rachael et al.

2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019. USA : IEEE, Institute of Electrical and Electronics Engineers, 2019. 8904894 (2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019).

Research output: Chapter in Book/Conference paper › Conference paper › peer-review

TY - GEN

T1 - ThreatRiskEvaluator

T2 - International Conference on Cyber Security for Emerging Technologies, CSET'19

AU - Nhlabatsi, Armstrong

AU - Hussein, Alaa

AU - Fernandez, Rachael

AU - Fetais, Noora

AU - Hong, Jin

AU - Kim, Dong Seong

AU - Khan, Khaled M.

PY - 2019/10/1

Y1 - 2019/10/1

N2 - In cloud computing, security risks posed to individual clients are different based on their specific security requirements. In current practice, cloud providers usually apply generic protection mechanisms that may not be effective in addressing specific threats for different clients. In this paper, we describe a tool, called 'ThreatRiskEvaluator' that assesses security risks that are specific and relevant to specific cloud clients. The tool implements a novel risk analysis mechanism that utilizes various security-related properties of the cloud such as vulnerability information, the probability of an attack, as well as client-specific security requirements. The method enables cloud providers to make fine-grained decisions for selecting specific protection mechanisms to tackle specific risks posed to individual clients based on their security needs against specific threats.

AB - In cloud computing, security risks posed to individual clients are different based on their specific security requirements. In current practice, cloud providers usually apply generic protection mechanisms that may not be effective in addressing specific threats for different clients. In this paper, we describe a tool, called 'ThreatRiskEvaluator' that assesses security risks that are specific and relevant to specific cloud clients. The tool implements a novel risk analysis mechanism that utilizes various security-related properties of the cloud such as vulnerability information, the probability of an attack, as well as client-specific security requirements. The method enables cloud providers to make fine-grained decisions for selecting specific protection mechanisms to tackle specific risks posed to individual clients based on their security needs against specific threats.

KW - Cloud computing

KW - risk assessment

KW - security risk

KW - security threats

KW - vulnerability

UR - http://www.scopus.com/inward/record.url?scp=85076378916&partnerID=8YFLogxK

U2 - 10.1109/CSET.2019.8904894

DO - 10.1109/CSET.2019.8904894

M3 - Conference paper

T3 - 2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019

BT - 2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019

PB - IEEE, Institute of Electrical and Electronics Engineers

CY - USA

Y2 - 27 October 2019 through 29 October 2019

ER -

Nhlabatsi A, Hussein A, Fernandez R, Fetais N, Hong J, Kim DS et al. ThreatRiskEvaluator: A Tool for Assessing Threat-Specific Security Risks in the Cloud. In 2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019. USA: IEEE, Institute of Electrical and Electronics Engineers. 2019. 8904894. (2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019). https://doi.org/10.1109/CSET.2019.8904894

ThreatRiskEvaluator: A Tool for Assessing Threat-Specific Security Risks in the Cloud

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this