Chapter 22

Tool-based risk assessment of cloud infrastructures as socio-technical systems

Michael Nidda; Marieta Georgieva Ivanovab; Christian W. Probstb; Axel Tannera    a IBM Research, Zürich, Switzerlandb Technical University of Denmark, Kongens Lyngby, Denmark

Abstract

Assessing risk in cloud infrastructures is difficult. Typical cloud infrastructures contain potentially thousands of nodes that are highly interconnected and dynamic. Another important component is the set of human actors who get access to data and computing infrastructure. The cloud infrastructure therefore constitutes a socio-technical system. Attacks on socio-technical systems are still mostly identified through expert brainstorming. However, formal risk assessment for ...

Get The Cloud Security Ecosystem now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.