{"id":"https://openalex.org/W4399667895","doi":"https://doi.org/10.1145/3661167.3661287","title":"Security Risk Assessment on Cloud: A Systematic Mapping Study","display_name":"Security Risk Assessment on Cloud: A Systematic Mapping Study","publication_year":2024,"publication_date":"2024-06-14","ids":{"openalex":"https://openalex.org/W4399667895","doi":"https://doi.org/10.1145/3661167.3661287"},"language":"en","primary_location":{"id":"doi:10.1145/3661167.3661287","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3661167.3661287","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3661167.3661287","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069624490","display_name":"Giusy Annunziata","orcid":"https://orcid.org/0009-0002-0742-7261"},"institutions":[{"id":"https://openalex.org/I131729948","display_name":"University of Salerno","ror":"https://ror.org/0192m2k53","country_code":"IT","type":"education","lineage":["https://openalex.org/I131729948"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giusy Annunziata","raw_affiliation_strings":["Computer Science, University of Salerno, Italy"],"raw_orcid":"https://orcid.org/0009-0002-0742-7261","affiliations":[{"raw_affiliation_string":"Computer Science, University of Salerno, Italy","institution_ids":["https://openalex.org/I131729948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5099127737","display_name":"Alexandra Sheykina","orcid":"https://orcid.org/0009-0001-9734-3645"},"institutions":[{"id":"https://openalex.org/I131729948","display_name":"University of Salerno","ror":"https://ror.org/0192m2k53","country_code":"IT","type":"education","lineage":["https://openalex.org/I131729948"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Alexandra Sheykina","raw_affiliation_strings":["Computer Science, University of Salerno, Italy"],"raw_orcid":"https://orcid.org/0009-0001-9734-3645","affiliations":[{"raw_affiliation_string":"Computer Science, University of Salerno, Italy","institution_ids":["https://openalex.org/I131729948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033738898","display_name":"Fabio Palomba","orcid":"https://orcid.org/0000-0001-9337-5116"},"institutions":[{"id":"https://openalex.org/I131729948","display_name":"University of Salerno","ror":"https://ror.org/0192m2k53","country_code":"IT","type":"education","lineage":["https://openalex.org/I131729948"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Fabio Palomba","raw_affiliation_strings":["Computer Science, University of Salerno, Italy"],"raw_orcid":"https://orcid.org/0000-0001-9337-5116","affiliations":[{"raw_affiliation_string":"Computer Science, University of Salerno, Italy","institution_ids":["https://openalex.org/I131729948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079088548","display_name":"Andrea De Lucia","orcid":"https://orcid.org/0000-0002-4238-1425"},"institutions":[{"id":"https://openalex.org/I131729948","display_name":"University of Salerno","ror":"https://ror.org/0192m2k53","country_code":"IT","type":"education","lineage":["https://openalex.org/I131729948"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Andrea De Lucia","raw_affiliation_strings":["Computer Science, University of Salerno, Italy"],"raw_orcid":"https://orcid.org/0000-0002-4238-1425","affiliations":[{"raw_affiliation_string":"Computer Science, University of Salerno, Italy","institution_ids":["https://openalex.org/I131729948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014169292","display_name":"Gemma Catolino","orcid":"https://orcid.org/0000-0002-4689-3401"},"institutions":[{"id":"https://openalex.org/I131729948","display_name":"University of Salerno","ror":"https://ror.org/0192m2k53","country_code":"IT","type":"education","lineage":["https://openalex.org/I131729948"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Gemma Catolino","raw_affiliation_strings":["Computer Science, University of Salerno, Italy"],"raw_orcid":"https://orcid.org/0000-0002-4689-3401","affiliations":[{"raw_affiliation_string":"Computer Science, University of Salerno, Italy","institution_ids":["https://openalex.org/I131729948"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053084752","display_name":"Filomena Ferrucci","orcid":"https://orcid.org/0000-0002-0975-8972"},"institutions":[{"id":"https://openalex.org/I131729948","display_name":"University of Salerno","ror":"https://ror.org/0192m2k53","country_code":"IT","type":"education","lineage":["https://openalex.org/I131729948"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Filomena Ferrucci","raw_affiliation_strings":["Computer Science, University of Salerno, Italy"],"raw_orcid":"https://orcid.org/0000-0002-0975-8972","affiliations":[{"raw_affiliation_string":"Computer Science, University of Salerno, Italy","institution_ids":["https://openalex.org/I131729948"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I131729948"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"604","last_page":"613"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7058453559875488},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6206995248794556},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3640616536140442},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.07325610518455505}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7058453559875488},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6206995248794556},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3640616536140442},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.07325610518455505}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3661167.3661287","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3661167.3661287","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3661167.3661287","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3661167.3661287","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.550000011920929,"display_name":"Climate action","id":"https://metadata.un.org/sdg/13"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W4214443","https://openalex.org/W20011912","https://openalex.org/W277493976","https://openalex.org/W1491856479","https://openalex.org/W1976667776","https://openalex.org/W1979916122","https://openalex.org/W1999798506","https://openalex.org/W2116836841","https://openalex.org/W2137660362","https://openalex.org/W2141667802","https://openalex.org/W2158367058","https://openalex.org/W2405455491","https://openalex.org/W2406388510","https://openalex.org/W2529258103","https://openalex.org/W2548420833","https://openalex.org/W2621137766","https://openalex.org/W2766220561","https://openalex.org/W2885428349","https://openalex.org/W2898570314","https://openalex.org/W2901939447","https://openalex.org/W2927845527","https://openalex.org/W2969219538","https://openalex.org/W3016213404","https://openalex.org/W3024291172","https://openalex.org/W3024905778","https://openalex.org/W3035242936","https://openalex.org/W3092975800","https://openalex.org/W3183849271","https://openalex.org/W3195131276","https://openalex.org/W4237019651","https://openalex.org/W4360602576"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W4244478748","https://openalex.org/W4223488648","https://openalex.org/W2134969820","https://openalex.org/W2251605416","https://openalex.org/W2560439919","https://openalex.org/W4389340727","https://openalex.org/W3150465815","https://openalex.org/W1997222214"],"abstract_inverted_index":{"Cloud":[0],"computing":[1],"has":[2],"become":[3],"integral":[4],"to":[5,45,91],"modern":[6],"organizational":[7],"operations,":[8],"offering":[9],"efficiency":[10],"and":[11,20,32,87],"agility.":[12],"However,":[13],"security":[14,72],"challenges":[15],"such":[16],"as":[17],"data":[18],"loss":[19],"downtime":[21],"necessitate":[22],"tailored":[23],"compliance":[24],"solutions.":[25],"Risk":[26],"assessment":[27,74],"is":[28],"crucial":[29],"for":[30,75],"identifying":[31],"mitigating":[33],"cloud-related":[34],"threats,":[35],"yet":[36],"a":[37,51,60,92],"standardized":[38],"approach":[39],"remains":[40],"elusive.":[41],"Our":[42],"study":[43,54],"aims":[44],"fill":[46],"this":[47],"gap":[48],"by":[49],"conducting":[50],"systematic":[52],"mapping":[53],"on":[55],"the":[56,76],"prevailing":[57],"methodologies.":[58],"Through":[59],"meticulous":[61],"analysis":[62],"of":[63,71,95],"21":[64],"scholarly":[65],"papers,":[66],"we":[67],"explore":[68],"various":[69],"aspects":[70],"risk":[73,97],"cloud.":[77],"The":[78],"results":[79],"provide":[80],"valuable":[81],"insights":[82],"into":[83],"delivery":[84],"models,":[85],"standards,":[86],"validation":[88],"practices,":[89],"contributing":[90],"comprehensive":[93],"understanding":[94],"cloud":[96],"assessment.":[98]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}