Prioritisation and security defense algorithm for cloud specific vulnerability through scoring and base metric group

Abstract

The emerging trends of cloud computing and its vulnerability causes severe security risks/concerns on its users. In order to cope with these possible risks, appropriate taxonomies of identified vulnerabilities must be in place to handle those vulnerabilities effectively. In this paper we have developed the taxonomy to handle the possible attack vectors on a Cloud environment. Further this attack vector taxonomy will classify the existing vulnerability on Cloud computing and will act as input to our algorithm to build a defense security mechanism. We will implement a clear vision to handle the cloud security challenges that will ensure next generation security for Cloud computing. We have devolved the Metric Value of Attack vector & summarized the important issues related to security in Cloud Computing identified by ENISA, CSA, and NIST from current scenario.

Subject Classification:

• 68M15

Keywords:

• Cloud Computing
• NVD
• Attack Vector (AV)
• CVSS
• NIST
• ENISA
• CSA