{"id":"https://openalex.org/W3187336111","doi":"https://doi.org/10.1109/tcc.2021.3097770","title":"Quantifying Satisfaction of Security Requirements of Cloud Software Systems","display_name":"Quantifying Satisfaction of Security Requirements of Cloud Software Systems","publication_year":2021,"publication_date":"2021-08-10","ids":{"openalex":"https://openalex.org/W3187336111","doi":"https://doi.org/10.1109/tcc.2021.3097770","mag":"3187336111"},"language":"en","primary_location":{"id":"doi:10.1109/tcc.2021.3097770","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcc.2021.3097770","pdf_url":null,"source":{"id":"https://openalex.org/S2492498579","display_name":"IEEE Transactions on Cloud Computing","issn_l":"2168-7161","issn":["2168-7161","2372-0018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cloud Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077355226","display_name":"Armstrong Nhlabatsi","orcid":"https://orcid.org/0000-0002-7081-6115"},"institutions":[{"id":"https://openalex.org/I60342839","display_name":"Qatar University","ror":"https://ror.org/00yhnba62","country_code":"QA","type":"education","lineage":["https://openalex.org/I60342839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Armstrong Nhlabatsi","raw_affiliation_strings":["Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar"],"raw_orcid":"https://orcid.org/0000-0002-7081-6115","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar","institution_ids":["https://openalex.org/I60342839"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108364226","display_name":"Khaled M. Khan","orcid":"https://orcid.org/0000-0002-8848-0760"},"institutions":[{"id":"https://openalex.org/I60342839","display_name":"Qatar University","ror":"https://ror.org/00yhnba62","country_code":"QA","type":"education","lineage":["https://openalex.org/I60342839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Khaled MD Khan","raw_affiliation_strings":["Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar"],"raw_orcid":"https://orcid.org/0000-0002-8848-0760","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar","institution_ids":["https://openalex.org/I60342839"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011163136","display_name":"Jin B. Hong","orcid":"https://orcid.org/0000-0003-1359-3813"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Jin B. Hong","raw_affiliation_strings":["Department of Computer Science and Software Engineering, University of Western Australia, Crawley, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1359-3813","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Software Engineering, University of Western Australia, Crawley, WA, Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019789320","display_name":"Dong Seong Kim","orcid":"https://orcid.org/0000-0003-2605-187X"},"institutions":[{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Dong Seong Kim","raw_affiliation_strings":["School of Information Technology and Electrical Engineering, University of Queensland, St Lucia, QLD, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Technology and Electrical Engineering, University of Queensland, St Lucia, QLD, Australia","institution_ids":["https://openalex.org/I165143802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102733867","display_name":"Rachael Fernandez","orcid":"https://orcid.org/0000-0002-4650-6344"},"institutions":[{"id":"https://openalex.org/I60342839","display_name":"Qatar University","ror":"https://ror.org/00yhnba62","country_code":"QA","type":"education","lineage":["https://openalex.org/I60342839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Rachael Fernandez","raw_affiliation_strings":["Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar","institution_ids":["https://openalex.org/I60342839"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5020600623","display_name":"Noora Fetais","orcid":"https://orcid.org/0000-0003-3609-2659"},"institutions":[{"id":"https://openalex.org/I60342839","display_name":"Qatar University","ror":"https://ror.org/00yhnba62","country_code":"QA","type":"education","lineage":["https://openalex.org/I60342839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Noora Fetais","raw_affiliation_strings":["Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar"],"raw_orcid":"https://orcid.org/0000-0003-3609-2659","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar","institution_ids":["https://openalex.org/I60342839"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6077,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.69551312,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"11","issue":"1","first_page":"426","last_page":"444"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7624021172523499},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.6343553066253662},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.5775498151779175},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.572053074836731},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5486536622047424},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.49297142028808594},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4586595892906189},{"id":"https://openalex.org/keywords/security-engineering","display_name":"Security engineering","score":0.42135417461395264},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.4180663824081421},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.3622914254665375},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3250676095485687},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.24584031105041504}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7624021172523499},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.6343553066253662},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.5775498151779175},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.572053074836731},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5486536622047424},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.49297142028808594},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4586595892906189},{"id":"https://openalex.org/C13159133","wikidata":"https://www.wikidata.org/wiki/Q365674","display_name":"Security engineering","level":5,"score":0.42135417461395264},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.4180663824081421},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.3622914254665375},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3250676095485687},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.24584031105041504},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tcc.2021.3097770","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcc.2021.3097770","pdf_url":null,"source":{"id":"https://openalex.org/S2492498579","display_name":"IEEE Transactions on Cloud Computing","issn_l":"2168-7161","issn":["2168-7161","2372-0018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cloud Computing","raw_type":"journal-article"},{"id":"pmh:oai:pure.atira.dk:publications/8da0d0ce-bfae-4daa-9c66-97e26ed40411","is_oa":false,"landing_page_url":"https://research-repository.uwa.edu.au/en/publications/8da0d0ce-bfae-4daa-9c66-97e26ed40411","pdf_url":null,"source":{"id":"https://openalex.org/S4306402523","display_name":"UWA Profiles and Research Repository (University of Western Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Nhlabatsi , A M , Khan , K M , Hong , J B , Kim , D S D , Fernandez , R & Fetais , N 2023 , ' Quantifying Satisfaction of Security Requirements of Cloud Software Systems ' , IEEE Transactions on Cloud Computing , vol. 11 , no. 1 , pp. 426-444 . https://doi.org/10.1109/TCC.2021.3097770","raw_type":"article"},{"id":"pmh:oai:qspace.qu.edu.qa:10576/52814","is_oa":false,"landing_page_url":"http://hdl.handle.net/10576/52814","pdf_url":null,"source":{"id":"https://openalex.org/S4306400014","display_name":"Qatar University QSpace (Qatar University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I60342839","host_organization_name":"Qatar University","host_organization_lineage":["https://openalex.org/I60342839"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5199999809265137,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G8824043266","display_name":null,"funder_award_id":"NPRP 8-531-1-111","funder_id":"https://openalex.org/F4320332753","funder_display_name":"Qatar National Research Fund"}],"funders":[{"id":"https://openalex.org/F4320332753","display_name":"Qatar National Research Fund","ror":"https://ror.org/01svaqq28"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W1551592336","https://openalex.org/W1922007016","https://openalex.org/W2001236166","https://openalex.org/W2007969951","https://openalex.org/W2021366784","https://openalex.org/W2046795207","https://openalex.org/W2092214024","https://openalex.org/W2105346939","https://openalex.org/W2107930672","https://openalex.org/W2108376255","https://openalex.org/W2109878465","https://openalex.org/W2113435553","https://openalex.org/W2116836841","https://openalex.org/W2131730994","https://openalex.org/W2144634407","https://openalex.org/W2187280856","https://openalex.org/W2275530856","https://openalex.org/W2342723101","https://openalex.org/W2344429718","https://openalex.org/W2465500503","https://openalex.org/W2516894032","https://openalex.org/W2521105011","https://openalex.org/W2524194345","https://openalex.org/W2525479355","https://openalex.org/W2564147261","https://openalex.org/W2576019974","https://openalex.org/W2599777545","https://openalex.org/W2625364733","https://openalex.org/W2754120214","https://openalex.org/W2901939447","https://openalex.org/W2913966487","https://openalex.org/W2914845865","https://openalex.org/W2941527469","https://openalex.org/W6622609713","https://openalex.org/W6640682177","https://openalex.org/W6660073661","https://openalex.org/W6756361930"],"related_works":["https://openalex.org/W4230385779","https://openalex.org/W1811024770","https://openalex.org/W2299494954","https://openalex.org/W88610236","https://openalex.org/W4206910357","https://openalex.org/W2017116761","https://openalex.org/W2907868081","https://openalex.org/W1976635772","https://openalex.org/W2113932201","https://openalex.org/W2056412463"],"abstract_inverted_index":{"The":[0,110],"satisfaction":[1,33,59,129],"of":[2,35,58,60,85,94,100,107,123,131,143],"a":[3,10,15,26,36,64,152,156],"software":[4,76],"requirement":[5,17,38],"is":[6,18,42],"commonly":[7],"stated":[8],"as":[9],"Boolean":[11,28],"value,":[12],"that":[13],"is,":[14],"security":[16,37,61,108,118,132,137,158,168],"either":[19],"satisfied":[20],"(true)":[21],"or":[22],"not":[23,43],"(false).":[24],"However,":[25],"discrete":[27],"value":[29],"to":[30,71,115,126,162],"measure":[31],"the":[32,56,92,98,104,128,135,141,144,149],"level":[34,57,130],"by":[39],"deployed":[40,136],"mechanisms":[41],"very":[44],"useful.":[45],"Rather,":[46],"it":[47],"would":[48],"be":[49],"more":[50,164],"effective":[51,165],"if":[52],"we":[53,147],"could":[54],"quantify":[55,127],"requirements":[62,101,133],"on":[63,79,171],"continuous":[65],"scale.":[66],"We":[67,90],"propose":[68],"an":[69],"approach":[70,112,150],"achieve":[72],"this":[73],"for":[74],"cloud":[75],"systems":[77],"based":[78,170],"relationships":[80],"between":[81],"defense":[82],"strength,":[83],"exploitability":[84],"vulnerabilities,":[86],"and":[87,166],"attack":[88],"severity.":[89],"extend":[91],"concept":[93],"entailment":[95],"relationship":[96],"from":[97],"field":[99],"engineering":[102],"with":[103,134],"satisfiability":[105],"aspects":[106],"requirements.":[109],"proposed":[111,145],"enables":[113],"us":[114],"systematically":[116],"structure":[117],"concepts":[119],"into":[120],"three":[121],"sets":[122],"related":[124],"descriptions":[125],"solutions.":[138],"To":[139],"demonstrate":[140],"feasibility":[142],"approach,":[146],"evaluate":[148],"in":[151],"case":[153],"study.":[154],"As":[155],"result,":[157],"administrators":[159],"are":[160],"able":[161],"deploy":[163],"appropriate":[167],"solutions":[169],"their":[172],"assessment.":[173]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}