Enterprise Cloud Computing (ECC): Security Model for SMEs Data in The Cloud

Transcription

1 Enterprise Cloud Computing (ECC): Security Model for SMEs Data in The Cloud

2 About Me Name: Rania Fahim El-Gazzar Home country: Egypt Education: Bachelor in Business Administration, Major Management Information Systems Master in Information Systems, topic Agent Based Mobile Event Notification System PhD in Information Systems, currently I am a PhD research fellow in information systems department at University of Agder. Current research interest: Security issues related to Cloud Computing adoption in SMEs.

3 Research Studies on The Cloud( ) Source: Yang et al. (2012)!

4 Enterprise Cloud Computing (ECC) Benefits from ECC for SMEs: Lower IT-related cost: eliminating costs of establishing and maintenance of IT infrastructure. Speed: self-service access to an available pool of shared and scalable computing resources. Better IT support: new applications can be approved and deployed quickly. Agility. Competitive advantage. The Cloud

5 Enterprise Cloud Computing (ECC) Challenges to ECC for SMEs: Security: data privacy and trust issues Vendor lock-in Lack of standards: related to data privacy and SLA as any new computing technology Lack of control: in terms of SMEs don t have skills to control their data in the cloud. Integration with in-house systems SMEs might be reluctant to adopt cloud sevices because they don t have the financial resources and skills needed for secure cloud solutions Enterprise s IT manager IT managers with their managerial and technical skills are trying to make the right decision about Enterprise cloud adoption!

6 Perspectives on Cloud Security Enterprise perspective: Data privacy, trust issues, security solutions with reasonable cost, availability, and reliability Security Cloud vendor perspective: Data Encryption, authentication, authorization, data recovery, network security, and access control

7 Towards Successful Cloud Deployment Technical Capabilities Managerial Capabilities Relational Capabilities (Vendor-Client relationship) Success of Cloud Deployment Scalable IT infrastructure that eases integration with cloud services Capability of IT managers to better decide among cloud services and implement cloud solutions that complement business strategy Trust between the IT manager and cloud vendor

8 Research Objective To identify the security issues related to cloud computing that affect SMEs choice to adopt cloud services as well as the major concerns of data security risks to propose a proper model to secure SMEs data in the cloud.

9 Research Questions What are the cloud-specific security risks associated with cloud computing and the priorities of these risks? What are the data protections and privacy concerns for the SMEs data in the cloud? How data security affects SMEs choice to adopt cloud services? What are the data security policies offered in the cloud? How effective they are? And are they enough to persuade SMEs to move to the cloud?

10 Theoretical Foundation Potential theories to invistigate the problem: Institutional theory Information infrastructures theory Socio-technical theory

11 Methodology Proposed Methodologies: Qualitative: Literature review Case study Design research Quantitative: Measuring security-cost related issues (if a representative sample is available)

12 Expected Contribution Contribution to literature: Study the effect of security improvements on the enterprise choice and cost, as well as the security models implemented previously and how they contributed to securing SMEs data in the cloud. Contribution to practice: A developed security model that: Makes SMEs more confident in their choice of adopting cloud services. Guarantee data confidentiality, integrity, and availability. The security model is applied on a case study and evaluated against security standards determined for the cloud.

13 References Yang, Haibo and Tate, Mary (2012) "A Descriptive Literature Review and Classification of Cloud Computing Research, Communications of the Association for Information Systems: Vol. 31, Article 2. Available at: Oracle Cloud Computing, white paper, Oracle Corp., May Cloud computing: Marketing hype or sound business strategy? white paper, Verizon, September Introduction to Cloud Computing, white paper, Dialogic Corporation, July J. W. Rittinghouse and J. F. Ransome, Cloud Computing: Implementation, Management, and Security, CRC Press, 2009, p Gary Garrison, Sanghyun Kim, and Robin L. Wakefield Success factors for deploying cloud computing. Commun. ACM 55, 9 (September 2012), DOI= /