Chapter 22

Tool-based risk assessment of cloud infrastructures as socio-technical systems

Michael Nidda; Marieta Georgieva Ivanovab; Christian W. Probstb; Axel Tannera    a IBM Research, Zürich, Switzerlandb Technical University of Denmark, Kongens Lyngby, Denmark

Abstract

Assessing risk in cloud infrastructures is difficult. Typical cloud infrastructures contain potentially thousands of nodes that are highly interconnected and dynamic. Another important component is the set of human actors who get access to data and computing infrastructure. The cloud infrastructure therefore constitutes a socio-technical system. Attacks on socio-technical systems are still mostly identified through expert brainstorming. However, formal risk assessment for ...

Get The Cloud Security Ecosystem now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.