Abstract
In order to be responsible stewards of other people’s data, cloud providers must be accountable for their data handling practices. The potential long provider chains in cloud computing introduce additional accountability challenges, with many stakeholders involved. Symmetry is very important in any requirements’ elicitation activity, since input from diverse stakeholders needs to be balanced. This article ventures to answer the question “How can one create an accountable cloud service?” by examining requirements which must be fulfilled to achieve an accountability-based approach, based on interaction with over 300 stakeholders.
Highlights
The inception of the computer era was led by corporate giants, and was for a large part reserved for large enterprises that could afford to pay for computer infrastructure
We have extended the well-known NIST cloud supply chain taxonomy [4] to create the following cloud accountability taxonomy composed of 7 main roles: 1
In total 289 requirements have been identified [20]. 153 of these requirements stem from the elicitation events, while the rest of the requirements have been identified as part of other research activities in the A4Cloud project. 51 of the requirements are directly targeted towards tools or languages developed as part of the A4Cloud project
Summary
The inception of the computer era was led by corporate giants, and was for a large part reserved for large enterprises that could afford to pay for computer infrastructure As such, it could hardly be considered symmetric; small actors were generally excluded from reaping the benefits of early computing. Cloud computing is exposing both customers and providers to new challenges (e.g., in terms of data management), which require a shift in the way Information and Communication Technology (ICT) is deployed in business contexts. We have extended the well-known NIST cloud supply chain taxonomy [4] to create the following cloud accountability taxonomy composed of 7 main roles: Cloud Subject: An individual whose data are processed by a cloud provider, either directly or indirectly.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.