A Software Assurance Evidence Approach to Cloud Security

Cloud computing is increasingly established as a successor technology to data centers in outsourced IT infrastructures and managed operations environments. A key enabler for adoption of cloud services is reliable cloud security. We present an approach to cloud security assurance using model-driven architecture. This approach integrates several current software assurance modelling frameworks as well as standardization efforts for cloud security based on IT governance, risk and compliance management modelling and reporting languages.