Trusting Cloud Service Providers: Trust Phases and a Taxonomy of Trust Factors

A large and rapidly increasing number of services are offered through the Internet, in the cloud. This enables users to utilize services remotely, without even knowing the service provider. However, before putting their trust in a provider, users need to be able to evaluate how trustworthy a service is. This can be a daunting task, as many factors need to be considered and analyzed. The current paper aims at helping the selection of a service provider by presenting a taxonomy of trust factors and outlining its application in practical scenarios. A brief description of a framework built on this taxonomy is also given.

[1]  Hamideh Afsarmanesh,et al.  Towards Establishing Trust Relationships Among Organizations In Vbes , 2007, Virtual Enterprises and Collaborative Networks.

[2]  Lifeng Wang,et al.  A Novel Trustworthiness Measurement Model for Cloud Service , 2014, 2014 IEEE/ACM 7th International Conference on Utility and Cloud Computing.

[3]  Siani Pearson,et al.  Privacy, Security and Trust in Cloud Computing , 2013 .

[4]  D. H. Mills.  The Logic and Limits of Trust , 1983 .

[5]  MOHANNAD J. ALHANAHNAH,et al.  A Multidimension Taxonomy of Insider Threats in Cloud Computing , 2016, Comput. J..

[6]  Xiaowei Yang,et al.  CloudCmp: comparing public cloud providers , 2010, IMC '10.

[7]  Thomas Gross,et al.  Defense-in-Depth Against Malicious Insiders in the Cloud , 2013, 2013 IEEE International Conference on Cloud Engineering (IC2E).

[8]  Christoph Meinel,et al.  Distributed Trust Management for Validating SLA Choreographies , 2010 .

[9]  Zahir Tari,et al.  Security and Privacy in Cloud Computing: Vision, Trends, and Challenges , 2015, IEEE Cloud Computing.

[10]  Neeraj Suri,et al.  Quantitative Reasoning about Cloud Security Using Service Level Agreements , 2017, IEEE Transactions on Cloud Computing.

[11]  Pia Hurmelinna-Laukkanen,et al.  The role of trust and contracts in the internationalization of technology-intensive Born Globals , 2008 .

[12]  Max Mühlhäuser,et al.  Towards a trust management system for cloud computing marketplaces: using CAIQ as a trust information source , 2014, Secur. Commun. Networks.

[13]  Yang Xiao,et al.  NTRU-based sensor network security: a low-power hardware implementation perspective , 2009, Secur. Commun. Networks.

[14]  Tharam S. Dillon,et al.  A framework for SLA management in cloud computing for informed decision making , 2012, Cluster Computing.

[15]  Nicola Mazzocca,et al.  An AHP-Based Framework for Quality and Security Evaluation , 2009, 2009 International Conference on Computational Science and Engineering.

[16]  Elarbi Badidi.  A Framework for Software-as-a-Service Selection and Provisioning , 2013, ArXiv.

[17]  Schahram Dustdar,et al.  Automatic SLA Matching and Provider Selection in Grid and Cloud Computing Markets , 2012, 2012 ACM/IEEE 13th International Conference on Grid Computing.

[18]  Muttukrishnan Rajarajan,et al.  Trust Model for Cloud Based on Cloud Characteristics , 2013, IFIPTM.

[19]  Jungwoo Ryoo,et al.  A centralized trust model approach for cloud computing , 2014, 2014 23rd Wireless and Optical Communication Conference (WOCC).

[20]  Krishnendu Roy,et al.  An SLA-based Framework for Estimating Trustworthiness of a Cloud , 2012, 2012 IEEE 11th International Conference on Trust, Security and Privacy in Computing and Communications.

[21]  Mehmet A. Orgun,et al.  Cloud Service Selection Based on the Aggregation of User Feedback and Quantitative Performance Assessment , 2013, 2013 IEEE International Conference on Services Computing.

[22]  Sajal K. Das,et al.  SelCSP: A Framework to Facilitate Selection of Cloud Service Providers , 2015, IEEE Transactions on Cloud Computing.

[23]  Rajkumar Buyya,et al.  A framework for ranking of cloud computing services , 2013, Future Gener. Comput. Syst..

[24]  David M. Nicol,et al.  Trust mechanisms for cloud computing , 2013, Journal of Cloud Computing: Advances, Systems and Applications.

[25]  Colin Camerer,et al.  Not So Different After All: A Cross-Discipline View Of Trust , 1998 .