A semantic ontology based concept for measuring security compliance of cloud service providers

Other Title(s)

قياس الامتثال الأمني لمقدمي الحوسبة السحابية مبني على مفهوم الأنتولوجي الدلالي

Dissertant

al-Hassan, Mustafa Numan Murad

Thesis advisor

al-Huraybat, Muhammad

Comitee Members

al-Bahadili, Husayn
Naum, Riyad Shakir
Kayid, Ahmad A.

University

Middle East University

Faculty

Faculty of Information Technology

Department

Department of Computer Information Systems

University Country

Jordan

Degree

Master

Degree Date

2013

English Abstract

Cloud computing is Internet-based computing, whereby shared resources, software and information, are provided with computers and devices on-demand.

It also makes security problems more complicate and more important for Cloud Service Provider (CSP) and consumer than before.

International standard organizations issue security-related standards and guidance which can be used in cloud environment such as ISO/IEC 27001.

This thesis explores the possibility to measure security compliance for data breaches threat based semantic similarity measure between the documents of standard compliments and CSP response against data breaches threat.

We developed a model that measures security compliance of CSP with the major international standard organization against data breaches threat.

Our model consists of three stages: (1) Extracting ontology concepts of CC threat (2) Extracting ontology concepts of CSP (3) Matching Process among the both ontology concepts.

The matching process has done by using semantic similarity measure.

Also during our study, we collected and studied many documents and reports that discussed data breaches threat.

Then we classified it into group of (Control Area), identify the items that cover each control area.

Also tested 5 CSPs to measure their security compliance by collection their data related to each control area; then convert it into text file in order extracting ontology concepts.

Our results were promising (0.885 %) Mean Square Error (MSE) between our measure and human judges.

Main Subjects

Information Technology and Computer Science

No. of Pages

75

Table of Contents

Table of contents.

Abstract.

Abstract in Arabic.

Chapter One : Introduction.

Chapter Two : Literature review and related works.

Chapter Three : Data extraction ontology concepts.

Chapter Four : Proposed model and matching process.

Chapter Five : Conclusions and future work.

References.

American Psychological Association (APA)

al-Hassan, Mustafa Numan Murad. (2013). A semantic ontology based concept for measuring security compliance of cloud service providers. (Master's theses Theses and Dissertations Master). Middle East University, Jordan
https://search.emarefa.net/detail/BIM-694296

Modern Language Association (MLA)

al-Hassan, Mustafa Numan Murad. A semantic ontology based concept for measuring security compliance of cloud service providers. (Master's theses Theses and Dissertations Master). Middle East University. (2013).
https://search.emarefa.net/detail/BIM-694296

American Medical Association (AMA)

al-Hassan, Mustafa Numan Murad. (2013). A semantic ontology based concept for measuring security compliance of cloud service providers. (Master's theses Theses and Dissertations Master). Middle East University, Jordan
https://search.emarefa.net/detail/BIM-694296

Language

English

Data Type

Arab Theses

Record ID

BIM-694296