2015 Science and Information Conference (SAI), 2015
More and more data is stored in personal cloud storage and it is expected to grow further. As clo... more More and more data is stored in personal cloud storage and it is expected to grow further. As cloud storage is becoming an option for user in keeping their data online, it comes with the security threats and the challenges of protecting their data from unauthorised access. Many security controls have been implemented by cloud storage providers (CSPs) as a security measure but although encryption is known as one of the solution, it cannot be fully implemented due to the need of a robust and costly infrastructure. Therefore, we foresee the need to implement protection based on categorisation of data determined by users. This paper will discuss recent security threats and also the levels of data protection in cloud storage. We propose a security framework that protects data in cloud storage based on the level of protection it needs.
Assessing the security of data stored in cloud storage can be carried out by developing goal-base... more Assessing the security of data stored in cloud storage can be carried out by developing goal-based measurement items. The measurement items can be utilized to construct a security assessment model based on practical needs. The measurement items can assist in acquiring support decision making on the implementation of a security frameworks. This paper discusses the Goal-Question-Metrics (GQM) approach and its application towards constructing measurement items for a security metric. It also attempts to provide practical guidance and example of measurements using GQM. An application of the GQM paradigm towards the development of a security metric is presented. The metrics obtained will assist organizations to meet their requirements for a cloud storage security framework.
Proceedings of the 7th International Conference on Cloud Computing and Services Science, 2017
The purpose of this paper is to explore the important security factors for protecting data in clo... more The purpose of this paper is to explore the important security factors for protecting data in cloud storage from the perspective of security practitioners. The study consist of 43 security variables (or indicator items) from a survey participated by security practitioners in Malaysia. Exploratory factor analysis (EFA) is conducted to understand the clusters of variables (or indicator items) and the interrelationships constructing the security factors (or components). Most of the respondents are from public sector organisations (government and higher education organisations) in Malaysia. The clusters of variables resulting from this analysis can be used as a reference for security practitioners planning to produce security policies to protect data stored in a cloud storage. The top security factors identified from this study are shown in terms of policy implementation and controls in confidentiality, integrity, availability, non-repudiation, authenticity, reliability, accountability and auditability of data services in cloud storage.
Proceedings of the 2nd International Workshop on Emerging Software as a Service and Analytics, 2015
Information Technology (IT) plays an important role in enabling education services be delivered t... more Information Technology (IT) plays an important role in enabling education services be delivered to users. Most education online services in universities have been run on the cloud to provide services to support students, lecturers, researchers and administration staff. These are enabled with the emergence of cloud computing in the world of IT. Cloud computing offers on demand Internet-based computing services. This paper presents an overview of cloud computing adoption in higher education, mainly tertiary institutions and universities. The focus of the paper is the challenges of cloud computing in higher education. It introduces the background to cloud computing and reviews research on adoption challenges in higher education institutions. These challenges are important as they provide an overview of the adoption of cloud in higher education. The authors proposed an integrated reference model based on the challenges in the literature integrated with TAM model to investigate the factors influence the users' attitudes and behaviours toward using cloud education services in universities ICT provision.
International Journal for Information Security Research, 2015
Cloud storage is becoming an option for users in keeping their data online, but it comes with the... more Cloud storage is becoming an option for users in keeping their data online, but it comes with the security requirements and challenges of protecting their data from threats. Many security frameworks have been suggested by existing studies, governing bodies, industry standards etc. as guidelines to be implemented by cloud service providers (CSPs) but the complete set of controls cannot be fully implemented due to several challenges such as decreasing availability, less user convenience, need of a robust infrastructure etc. Therefore, there is a need to investigate the security requirements and threats which will enable efficient security protection to protect data in cloud storage. This paper will discuss security requirements and analyses existing cloud security threats. The threats will be modelled in a cloud storage scenario.
2015 Science and Information Conference (SAI), 2015
More and more data is stored in personal cloud storage and it is expected to grow further. As clo... more More and more data is stored in personal cloud storage and it is expected to grow further. As cloud storage is becoming an option for user in keeping their data online, it comes with the security threats and the challenges of protecting their data from unauthorised access. Many security controls have been implemented by cloud storage providers (CSPs) as a security measure but although encryption is known as one of the solution, it cannot be fully implemented due to the need of a robust and costly infrastructure. Therefore, we foresee the need to implement protection based on categorisation of data determined by users. This paper will discuss recent security threats and also the levels of data protection in cloud storage. We propose a security framework that protects data in cloud storage based on the level of protection it needs.
Assessing the security of data stored in cloud storage can be carried out by developing goal-base... more Assessing the security of data stored in cloud storage can be carried out by developing goal-based measurement items. The measurement items can be utilized to construct a security assessment model based on practical needs. The measurement items can assist in acquiring support decision making on the implementation of a security frameworks. This paper discusses the Goal-Question-Metrics (GQM) approach and its application towards constructing measurement items for a security metric. It also attempts to provide practical guidance and example of measurements using GQM. An application of the GQM paradigm towards the development of a security metric is presented. The metrics obtained will assist organizations to meet their requirements for a cloud storage security framework.
Proceedings of the 7th International Conference on Cloud Computing and Services Science, 2017
The purpose of this paper is to explore the important security factors for protecting data in clo... more The purpose of this paper is to explore the important security factors for protecting data in cloud storage from the perspective of security practitioners. The study consist of 43 security variables (or indicator items) from a survey participated by security practitioners in Malaysia. Exploratory factor analysis (EFA) is conducted to understand the clusters of variables (or indicator items) and the interrelationships constructing the security factors (or components). Most of the respondents are from public sector organisations (government and higher education organisations) in Malaysia. The clusters of variables resulting from this analysis can be used as a reference for security practitioners planning to produce security policies to protect data stored in a cloud storage. The top security factors identified from this study are shown in terms of policy implementation and controls in confidentiality, integrity, availability, non-repudiation, authenticity, reliability, accountability and auditability of data services in cloud storage.
Proceedings of the 2nd International Workshop on Emerging Software as a Service and Analytics, 2015
Information Technology (IT) plays an important role in enabling education services be delivered t... more Information Technology (IT) plays an important role in enabling education services be delivered to users. Most education online services in universities have been run on the cloud to provide services to support students, lecturers, researchers and administration staff. These are enabled with the emergence of cloud computing in the world of IT. Cloud computing offers on demand Internet-based computing services. This paper presents an overview of cloud computing adoption in higher education, mainly tertiary institutions and universities. The focus of the paper is the challenges of cloud computing in higher education. It introduces the background to cloud computing and reviews research on adoption challenges in higher education institutions. These challenges are important as they provide an overview of the adoption of cloud in higher education. The authors proposed an integrated reference model based on the challenges in the literature integrated with TAM model to investigate the factors influence the users' attitudes and behaviours toward using cloud education services in universities ICT provision.
International Journal for Information Security Research, 2015
Cloud storage is becoming an option for users in keeping their data online, but it comes with the... more Cloud storage is becoming an option for users in keeping their data online, but it comes with the security requirements and challenges of protecting their data from threats. Many security frameworks have been suggested by existing studies, governing bodies, industry standards etc. as guidelines to be implemented by cloud service providers (CSPs) but the complete set of controls cannot be fully implemented due to several challenges such as decreasing availability, less user convenience, need of a robust infrastructure etc. Therefore, there is a need to investigate the security requirements and threats which will enable efficient security protection to protect data in cloud storage. This paper will discuss security requirements and analyses existing cloud security threats. The threats will be modelled in a cloud storage scenario.
Uploads
Papers by Fara Yahya