SECURITY RISK ASSESSMENT APPARATUS AND ASSESSMENT METHOD IN CLOUD COMPUTING ENVIRONMENT AND METHOD OF RECOMMENDING CLOUD SERVICE PROVIDER BY USING SECURITY RISK ASSESSMENT RESULT

摘要

Disclosed are a security risk assessment apparatus and assessment method in a cloud computing environment, and a method of recommending a cloud service provider by using results of security risk assessment. The security risk assessment apparatus according to one embodiment of the present invention includes: an occurrence probability vector determining unit for determining an occurrence probability vector for a security threat to a cloud service which is determined based on a degree of security accident occurrence in the cloud service; security control item determining unit for determining one or more security control items which is a physical method of performing a security control of the cloud service in accordance with types of the cloud service; a weight value determining unit for determining a weight value for the security control item for each of the determined security control items; a security level value determining unit for determining a security level value for the security control item for each of the determined security control items; and a security risk assessing unit for quantitatively assessing a security risk for a security threat to the cloud service provided by the cloud service provider by using the occurrence probability vector, the one or more security control items, the weight value of security control item, and the security level value.;COPYRIGHT KIPO 2015