Entwicklung einer Taxonomie von sicherheitstechnischen Gegenmaßnahmen für IT-Risiken in Cloud-Computing-Systemen

Despite its popularity Cloud Computing is often an issue of dispute regarding the security and privacy of outsourced data and business processes. A lacking knowledge about crucial points like integrity, condentiality and availability discourages potential Cloud-Users from utilizing Cloud-Services for their organisations. Standards which unite essential security relevant concepts with Cloud-typical risks still don't exist. With this background an ontology is modeled, which links Cloud-typical risks with collected measures from popular information security standards and thus enables risk management. Additionally this thesis serves as an overview document, which outlines the ontological relations taxonomically and supplements them with information regarding specific Cloud-Provider measures and known security incidents.