{"id":"https://openalex.org/W7155549023","doi":"https://doi.org/10.3390/computers15050272","title":"VIRTUOSO: A Multilayer Cloud Security and Risk Management Framework","display_name":"VIRTUOSO: A Multilayer Cloud Security and Risk Management Framework","publication_year":2026,"publication_date":"2026-04-24","ids":{"openalex":"https://openalex.org/W7155549023","doi":"https://doi.org/10.3390/computers15050272"},"language":"en","primary_location":{"id":"doi:10.3390/computers15050272","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers15050272","pdf_url":"https://www.mdpi.com/2073-431X/15/5/272/pdf?version=1777027899","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2073-431X/15/5/272/pdf?version=1777027899","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5031916377","display_name":"Raja Waseem Anwar","orcid":"https://orcid.org/0000-0002-5118-7739"},"institutions":[{"id":"https://openalex.org/I39706905","display_name":"German University of Technology","ror":"https://ror.org/055hq4920","country_code":"OM","type":"education","lineage":["https://openalex.org/I39706905"]}],"countries":["OM"],"is_corresponding":true,"raw_author_name":"Raja Waseem Anwar","raw_affiliation_strings":["Department of Computer Science, German University of Technology in Oman, P.O. Box 1816, Muscat P.C 130, Oman"],"raw_orcid":"https://orcid.org/0000-0002-5118-7739","affiliations":[{"raw_affiliation_string":"Department of Computer Science, German University of Technology in Oman, P.O. Box 1816, Muscat P.C 130, Oman","institution_ids":["https://openalex.org/I39706905"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084189087","display_name":"Flavio Pastore","orcid":null},"institutions":[{"id":"https://openalex.org/I39706905","display_name":"German University of Technology","ror":"https://ror.org/055hq4920","country_code":"OM","type":"education","lineage":["https://openalex.org/I39706905"]}],"countries":["OM"],"is_corresponding":false,"raw_author_name":"Flavio Pastore","raw_affiliation_strings":["Department of Computer Science, German University of Technology in Oman, P.O. Box 1816, Muscat P.C 130, Oman"],"raw_orcid":"https://orcid.org/0000-0001-5343-7837","affiliations":[{"raw_affiliation_string":"Department of Computer Science, German University of Technology in Oman, P.O. Box 1816, Muscat P.C 130, Oman","institution_ids":["https://openalex.org/I39706905"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5020627854","display_name":"Tariq Abdullah","orcid":"https://orcid.org/0000-0003-4189-4007"},"institutions":[{"id":"https://openalex.org/I22128151","display_name":"University of Derby","ror":"https://ror.org/02yhrrk59","country_code":"GB","type":"education","lineage":["https://openalex.org/I22128151"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Tariq Abdullah","raw_affiliation_strings":["College of Science & Engineering, University of Derby, Derby DE22 1GB, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Science & Engineering, University of Derby, Derby DE22 1GB, UK","institution_ids":["https://openalex.org/I22128151"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5031916377"],"corresponding_institution_ids":["https://openalex.org/I39706905"],"apc_list":{"value":1600,"currency":"CHF","value_usd":1782},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1782},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.41309177,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"15","issue":"5","first_page":"272","last_page":"272"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.23360000550746918,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.23360000550746918,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.14970000088214874,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.13750000298023224,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7027000188827515},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5121999979019165},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.4731000065803528},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.41600000858306885},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.41290000081062317},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4124000072479248},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.36570000648498535},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.32409998774528503},{"id":"https://openalex.org/keywords/cover","display_name":"Cover (algebra)","score":0.32330000400543213}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7534999847412109},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7027000188827515},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5121999979019165},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.4731000065803528},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.435699999332428},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.41600000858306885},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.41290000081062317},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4124000072479248},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3873000144958496},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.36570000648498535},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.32409998774528503},{"id":"https://openalex.org/C2780428219","wikidata":"https://www.wikidata.org/wiki/Q16952335","display_name":"Cover (algebra)","level":2,"score":0.32330000400543213},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.32100000977516174},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.319599986076355},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.31060001254081726},{"id":"https://openalex.org/C119898033","wikidata":"https://www.wikidata.org/wiki/Q3433888","display_name":"Ensemble forecasting","level":2,"score":0.30790001153945923},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.29910001158714294},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.29820001125335693},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.295199990272522},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.29499998688697815},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.28949999809265137},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.289000004529953},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2700999975204468},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2628999948501587},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.2554999887943268},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.2531000077724457}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/computers15050272","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers15050272","pdf_url":"https://www.mdpi.com/2073-431X/15/5/272/pdf?version=1777027899","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:b8a8f31e6a8343b28df13fddf47979b9","is_oa":true,"landing_page_url":"https://doaj.org/article/b8a8f31e6a8343b28df13fddf47979b9","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Computers, Vol 15, Iss 5, p 272 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/computers15050272","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers15050272","pdf_url":"https://www.mdpi.com/2073-431X/15/5/272/pdf?version=1777027899","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7155549023.pdf","grobid_xml":"https://content.openalex.org/works/W7155549023.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Despite":[0],"its":[1],"continued":[2],"growth,":[3],"cloud":[4,241],"computing":[5],"remains":[6],"susceptible":[7],"to":[8,55,253],"significant":[9,162,192],"security":[10,29,58,92],"challenges,":[11],"as":[12],"shared":[13],"virtualised":[14],"environments":[15],"pose":[16],"threats":[17,101],"at":[18,224],"multiple":[19],"levels.":[20],"These":[21],"vulnerabilities":[22],"are":[23,189],"caused":[24],"by":[25,167],"a":[26,128,137,150,218,255],"lack":[27],"of":[28,91,130,139,153,201,222],"coverage":[30],"in":[31,238],"the":[32,36,39,46,96,108,125,131,168,198],"responsibility":[33],"model":[34,251],"between":[35],"provider":[37],"and":[38,63,88,136,174,179,207,243],"tenant.":[40],"In":[41],"this":[42,202],"work,":[43],"we":[44,118,232],"propose":[45],"multi-layered":[47],"architecture":[48],"VIRTUOSO":[49,65],"(VIRTual":[50],"Unified":[51],"Operation":[52],"Security":[53,83,98],"Optimiser)":[54],"cover":[56],"these":[57,229],"gaps":[59],"through":[60],"advanced":[61],"automation":[62],"ML.":[64],"has":[66],"four":[67],"layers.":[68],"The":[69,80,105,116,204],"Input":[70],"Layer":[71,84],"extracts":[72],"key":[73],"risk":[74,114],"components":[75],"from":[76,134,143],"collected":[77],"telemetry":[78],"data.":[79],"Deep":[81],"Automation":[82],"provides":[85],"automated":[86],"actions":[87],"continuous":[89],"monitoring":[90],"defences.":[93],"Its":[94],"counterpart,":[95],"Intelligent":[97],"Layer,":[99,110],"predicts":[100],"using":[102],"anomaly":[103],"detection.":[104],"last":[106],"layer,":[107],"Output":[109],"returns":[111],"an":[112,239],"aggregated":[113],"summary.":[115],"datasets":[117],"used":[119],"were":[120],"chosen":[121],"for":[122],"their":[123],"relevance:":[124],"UNSW-NB15":[126,158],"dataset,":[127],"subset":[129],"web-attack":[132,184],"classification":[133],"CSE-CIC-IDS2018,":[135],"sample":[138],"anonymised":[140],"log":[141],"events":[142],"AWS":[144],"CloudTrail.":[145],"Our":[146],"ensemble":[147,187,249],"classifiers":[148],"achieve":[149],"best":[151],"accuracy":[152,220],"95.08%":[154],"\u00b1":[155,181],"0.13%":[156],"on":[157,183],"(RF),":[159],"with":[160,197,246],"statistically":[161,191],"differences":[163,188],"among":[164],"models":[165],"confirmed":[166],"Friedman":[169],"test":[170],"(p":[171,193],"<":[172],"0.004)":[173],"Nemenyi":[175],"post":[176],"hoc":[177],"analysis,":[178],"99.25%":[180],"0.52%":[182],"(CatBoost),":[185],"where":[186],"not":[190],"=":[194,226],"0.093),":[195],"consistent":[196],"high":[199],"separability":[200],"dataset.":[203],"training-test":[205],"gap":[206],"DNN":[208],"curves":[209],"show":[210,217],"no":[211],"overfitting,":[212],"whereas":[213],"our":[214,248],"adversarial":[215],"tests":[216],"maximum":[219],"loss":[221],"8.1%":[223],"\u03b5":[225],"0.02.":[227],"With":[228],"promising":[230],"results,":[231],"can":[233],"assert":[234],"that,":[235],"pending":[236],"verification":[237],"actual":[240],"environment":[242],"potential":[244],"integration":[245],"FL,":[247],"classifier":[250],"appears":[252],"be":[254],"good":[256],"real-world":[257],"prototype.":[258]},"counts_by_year":[],"updated_date":"2026-08-18T07:49:30.821534","created_date":"2026-04-25T00:00:00"}