Cloud security is today considered the main limit to a widespread adoption of Cloud Computing. In this paradigm, due to the serlf-service on-demand characteristic, all data, servers infrastructures resides on the cloud and charged on a pay-per-use basis.#R##N##R##N#If this implies great advantages from business point of view, because there are no maintenance and start-up costs for infrastructures, there is the perception of a loss of control over the resources, that impacts the security requirements.#R##N##R##N#Academic works and the Cloud community (e.g., work-groups at the European Network and Information Security Agency, ENISA) have identified that specifying security parameters in Service Level Agreements actually enables the establishment of a common semantic in order to model security among users and Cloud Service providers (CSPs).#R##N##R##N#However, despite the state of the art efforts aiming at building and representing Cloud SecLAs there is still a gap on the techniques to reason about them. Moreover a lot of activities are being carrying out to clearly state which are the parameters to be shared, their meanings and how they affect service provisioning.#R##N##R##N#In this paper we propose to build up cloud applications that are able to offer Security level Evaluation over SLA expressed in many different ways. Such applications can be offered as a service by Third Parties in order to help customers to evaluate the offerings from providers.#R##N##R##N#Such application can be used in order to help customers to negotiate security parameters in a Multi-Cloud system and perform Cloud brokering on the basis of a quantitative evaluation of security parameters.
['Valentina Casola', 'Massimiliano Rak', 'Giuseppe Alfieri']
A Cloud Application for Security Service Level Agreement Evaluation