{"id":"https://openalex.org/W4381251535","doi":"https://doi.org/10.1007/s10207-023-00709-8","title":"A quantitative framework for security assurance evaluation and selection of cloud services: a case study","display_name":"A quantitative framework for security assurance evaluation and selection of cloud services: a case study","publication_year":2023,"publication_date":"2023-06-19","ids":{"openalex":"https://openalex.org/W4381251535","doi":"https://doi.org/10.1007/s10207-023-00709-8"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-023-00709-8","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-023-00709-8","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-023-00709-8.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10207-023-00709-8.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000342593","display_name":"Ankur Shukla","orcid":"https://orcid.org/0000-0002-6737-2031"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":true,"raw_author_name":"Ankur Shukla","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology (NTNU), Gj\u00f8vik, Norway"],"raw_orcid":"https://orcid.org/0000-0002-6737-2031","affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology (NTNU), Gj\u00f8vik, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035810461","display_name":"Basel Katt","orcid":"https://orcid.org/0000-0002-0177-9496"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Basel Katt","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology (NTNU), Gj\u00f8vik, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology (NTNU), Gj\u00f8vik, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012245263","display_name":"Muhammad Mudassar Yamin","orcid":"https://orcid.org/0000-0001-5264-7613"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Muhammad Mudassar Yamin","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology (NTNU), Gj\u00f8vik, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology (NTNU), Gj\u00f8vik, Norway","institution_ids":["https://openalex.org/I204778367"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5000342593"],"corresponding_institution_ids":["https://openalex.org/I204778367"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":5.714,"has_fulltext":true,"cited_by_count":13,"citation_normalized_percentile":{"value":0.96018739,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"22","issue":"6","first_page":"1621","last_page":"1650"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9909999966621399,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9883999824523926,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.790913462638855},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7179463505744934},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.6417852640151978},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5981372594833374},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.45397308468818665},{"id":"https://openalex.org/keywords/stakeholder","display_name":"Stakeholder","score":0.44243770837783813},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.4388572871685028},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.43089064955711365},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.42164182662963867},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.3543534278869629},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.3046698570251465},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.1481350064277649}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.790913462638855},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7179463505744934},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.6417852640151978},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5981372594833374},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.45397308468818665},{"id":"https://openalex.org/C201305675","wikidata":"https://www.wikidata.org/wiki/Q852998","display_name":"Stakeholder","level":2,"score":0.44243770837783813},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4388572871685028},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.43089064955711365},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.42164182662963867},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3543534278869629},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3046698570251465},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.1481350064277649},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s10207-023-00709-8","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-023-00709-8","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-023-00709-8.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},{"id":"pmh:oai:ntnuopen.ntnu.no:11250/3134687","is_oa":true,"landing_page_url":"https://hdl.handle.net/11250/3134687","pdf_url":null,"source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"1621-1650","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1007/s10207-023-00709-8","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-023-00709-8","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-023-00709-8.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.699999988079071,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320311040","display_name":"Norges Teknisk-Naturvitenskapelige Universitet","ror":"https://ror.org/05xg72x27"},{"id":"https://openalex.org/F4320320885","display_name":"European Research Consortium for Informatics and Mathematics","ror":"https://ror.org/055zrhj18"},{"id":"https://openalex.org/F4320327267","display_name":"St. Olavs Hospital Universitetssykehuset i Trondheim","ror":"https://ror.org/01a4hbq44"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4381251535.pdf"},"referenced_works_count":35,"referenced_works":["https://openalex.org/W94784130","https://openalex.org/W1968165445","https://openalex.org/W2009703420","https://openalex.org/W2016188438","https://openalex.org/W2021908566","https://openalex.org/W2064170720","https://openalex.org/W2068967536","https://openalex.org/W2078992026","https://openalex.org/W2086178534","https://openalex.org/W2088216027","https://openalex.org/W2099828081","https://openalex.org/W2120086576","https://openalex.org/W2169919089","https://openalex.org/W2244683817","https://openalex.org/W2293862527","https://openalex.org/W2337987222","https://openalex.org/W2342723101","https://openalex.org/W2439424930","https://openalex.org/W2465500503","https://openalex.org/W2476979123","https://openalex.org/W2529258103","https://openalex.org/W2611452836","https://openalex.org/W2765385041","https://openalex.org/W2778473028","https://openalex.org/W2884218922","https://openalex.org/W2891164157","https://openalex.org/W2909705103","https://openalex.org/W2965293633","https://openalex.org/W3016445534","https://openalex.org/W3086914522","https://openalex.org/W3128937918","https://openalex.org/W3169260160","https://openalex.org/W3203841480","https://openalex.org/W4241931757","https://openalex.org/W4291002143"],"related_works":["https://openalex.org/W4385451301","https://openalex.org/W3097822214","https://openalex.org/W2356121836","https://openalex.org/W1592622529","https://openalex.org/W147109933","https://openalex.org/W2247050466","https://openalex.org/W2078706642","https://openalex.org/W2113778324","https://openalex.org/W3160956717","https://openalex.org/W1559718447"],"abstract_inverted_index":{"Abstract":[0],"Due":[1],"to":[2,23,72,89,135,161],"the":[3,9,25,30,35,41,84,98,117,137,145,163,167,221],"high":[4],"adoption":[5],"of":[6,11,63,100,140,180,224],"cloud":[7,31,36,47,59,131,141,183,212,225,243],"services,":[8],"protection":[10],"data":[12],"and":[13,33,43,53,66,70,103,107,149,153,169,195,205,227],"information":[14],"is":[15,187],"critical.":[16],"Cloud":[17],"service":[18,37,48,75],"customers":[19],"(CSCs)":[20],"need":[21],"help":[22],"obtain":[24],"authoritative":[26],"assurances":[27],"required":[28],"for":[29,57,81],"services":[32,142,226],"negotiate":[34],"contract":[38],"based":[39,188],"on":[40,189,240],"terms":[42],"conditions":[44],"set":[45],"by":[46,143,177],"providers":[49],"(CSPs).":[50],"Several":[51],"standards":[52,65],"guidelines":[54,67],"are":[55,68,87,95,234],"available":[56],"assessing":[58],"security.":[60],"However,":[61],"most":[62],"these":[64,215],"complex":[69],"time-consuming":[71],"select":[73],"a":[74,105,129,151,211,241],"or":[76],"make":[77],"an":[78],"informed":[79,207],"decision":[80],"CSCs.":[82],"Moreover,":[83,214],"existing":[85],"methods":[86,216,233],"insufficient":[88],"solve":[90],"this":[91,121],"problem":[92],"because":[93],"they":[94],"process-oriented,":[96],"neglect":[97],"importance":[99],"stakeholder":[101],"requirements,":[102],"lack":[104],"comprehensive":[106],"rigid":[108,154],"analytic":[109],"method":[110,134,157,186],"that":[111,158],"can":[112,174],"aid":[113],"decision-makers":[114],"in":[115,166,201,219],"making":[116,206],"right":[118],"decisions.":[119],"In":[120],"paper,":[122],"we":[123],"developed":[124],"two":[125,190],"evaluation":[126],"techniques:":[127],"(i)":[128],"quantitative":[130],"security":[132,138,147,184,193,222],"assurance":[133,185],"assess":[136,170],"level":[139,223],"measuring":[144],"critical":[146],"properties":[148],"(ii)":[150],"novel":[152],"categorical":[155],"analytical":[156],"enables":[159],"CSPs":[160,218],"identify":[162],"major":[164],"problems":[165],"system":[168],"how":[171],"much":[172],"gain":[173],"be":[175],"achieved":[176],"solving":[178],"each":[179],"them.":[181],"The":[182,231],"important":[191],"metrics:":[192],"requirement":[194],"vulnerability":[196],".":[197],"It":[198],"assists":[199],"CSCs":[200],"avoiding":[202],"severe":[203],"mistakes":[204],"decisions":[208],"while":[209],"selecting":[210],"service.":[213],"support":[217],"improving":[220],"meet":[228],"customer":[229],"requirements.":[230],"proposed":[232],"validated":[235],"using":[236],"different":[237],"case":[238],"scenarios":[239],"private":[242],"platform.":[244]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}