Abstract
Cloud computing represents an information technology (IT) provisioning model in which IT resources are consumed as a service. They are no longer installed and run on premises of consuming organizations, but at cloud providers. Cloud computing poses unique security and privacy challenges because of its architectural features and because cloud providers are separate legal entities serving multiple customers. Trusting a cloud provider represents a critical barrier to adopt cloud computing. Although trust is difficult to assess, customers need to be assured that cloud services are provided as promised. This article describes what measures selected cloud providers communicate to increase their customers’ trust in their organization and services. We conducted a document analysis of whitepapers and Web sites of four globally operating cloud providers, described and categorized trust measures, which we discussed with four Swiss cloud providers. The results show a list of 28 trust measures assigned to 14 focus areas.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
Buyya, R., Yeo, C.S., Venugopal, S., Broberg, J., Brandic, I.: Cloud Computing and Emerging IT Platforms: Vision, Hype, and Reality for Delivering Computing as the 5th Utility. Future Generation Computer Systems 25, 17 (2009)
Mell, P., Grance, T.: The NIST Definition of Cloud Computing. National Institute of Standards and Technology (2011)
Takabi, H., Joshi, J.B.D., Ahn, G.-J.: Security and Privacy Challenges in Cloud Computing Environments. IEEE Security & Privacy Magazine 8, 24–31 (2010)
Forbes (2014). http://www.forbes.com/sites/tjmccue/2014/01/29/cloud-computing-united-states-businesses-will-spend-13-billion-on-it/
Bartels, A., Rymer, J.R., Staten, J., Kark, K., Clark, J., Whittaker, D.: The Public Cloud Market Is Now In Hypergrowth (2014). https://www.forrester.com/The+Public+Cloud+Market+Is+Now+In+Hypergrowth/fulltext/-/E-RES113365?intcmp=blog:forrlink
Nofer, M., Hinz, O., Muntermann, J., Roßnagel, H.: The Economic Impact of Privacy Violations and Security Breaches. Business & Information Systems Engineering 6, 339–348 (2014)
Ko, R.K.L., Jagadpramana, P., Mowbray, M., Pearson, S., Kirchberg, M., Liang, Q., Lee, B.S.: Trustcloud: a framework for accountability and trust in cloud computing. In: Proceedings of the 2011 IEEE World Congress on Services (SERVICES), pp. 584–588 (2011)
Kaufman, L.M.: Data Security in the World of Cloud Computing. IEEE Security and Privacy 7, 61–64 (2009)
Bachlechner, D., Thalmann, S., Maier, R.: Security and Compliance Challenges in Complex IT Outsourcing Arrangements: A Multi-stakeholder Perspective. Computers and Security 40, 38–59 (2014)
Robinson, S.L.: Trust and Breach of the Psychological Contract. Administrative Science Quarterly 41, 574–599 (1996)
Rotter, J.B.: Interpersonal Trust, Trustworthiness, and Gullibility. American Psychologist 35, 1–7 (1980)
Morgan, R.M., Hunt, S.D.: The Commitment-Trust Theory of Relationship Marketing. Journal of Marketing 58, 20–38 (1994)
Kong, W.C., Hung, Y.T.C.: Modeling initial and repeat online trust in B2C e-commerce. In: Proceedings of the 39th Annual Hawaii International Conference on System Sciences (HICSS 2006) (2006)
Durkan, P., Durkin, M., Gillen, J.: Exploring Efforts to Engender On-line Trust. Entrepreneurial Behaviour and Research 9, 93–110 (2003)
Walters, G.J.: Privacy and Security: An Ethical Analysis. Computers and Society 31, 8–23 (2001)
Corritore, C.L., Kracher, B., Wiedenbeck, S.: On-line Trust: Concepts, Evolving Themes, a Model. International Journal of Human Computer Studies 58, 737–758 (2003)
Huang, J., Nicol, D.: A Formal-Semantics-based Calculus of Trust. IEEE Internet Computing 14, 38–46 (2010)
Gambetta, D.: Can We Trust Trust? In: Gambetta, D. (ed.) Trust: Making and Breaking Cooperative Relations 213–237 (2000)
Mayer, R.C., Davis, J.H., Schoorman, F.D.: An Integrative Model of Organizational Trust. Academy of Management Review 20, 709–734 (1995)
Lee, M.K.O., Turban, E.: A Trust Model for Consumer Internet Shopping. International Journal of Electronic Commerce 6, 75–91 (2001)
Deutsch, M.: The Effect of Motivational Orientation upon Trust and Suspicion. Human Relations 13, 123–139 (1960)
Ratnasingham, P.: The Importance of Trust in Electronic Commerce. Internet Research 8, 313–321 (1998)
McKnight, D.H., Chervany, N.L.: Conceptualizing trust: a typology and e-commerce customer relationships model. In: Proceedings of the 34th Annual Hawaii International Conference on System Sciences (HICSS 2001) (2001)
Kim, D.J., Ferrin, D.L., Rao, H.R.: A Trust-Based Consumer Decision-Making Model in Electronic Commerce: The Role of Trust, Perceived Risk, and their Antecedents. Decision Support Systems 44, 544–564 (2008)
Bhattacherjee, A.: Individual Trust in Online Firms: Scale Development and Initial Test. Journal of Management Information Systems 19, 211–241 (2002)
Gefen, D.: Reflections on the Dimensions of Trust and Trustworthiness among Online Consumers. ACM SIGMIS Database 33, 38–53 (2002)
Armbrust, B., Griffith, R., Joseph, A.D., Katz, R., Konwinski, A., Lee, G., Patterson, D., Rabkin, A.: A View of Cloud Computing. Communications of the ACM 53, 50–58 (2010)
Durkee, D.: Why Cloud Computing will never be Free. Communications of the ACM 53, 62–69 (2010)
Ganesan, S.: Determinants of Long-term Orientation in Buyer-Seller Relationships. Journal of Marketing 58, 1–19 (1994)
Urban, G.L., Amyx, C., Lorenzon, A.: Online Trust: State of the Art, New Frontiers, and Research Potential. Journal of Interactive Marketing 23, 179–190 (2009)
Khan, K.M., Malluhi, Q.: Establishing Trust in Cloud Computing. IT Professional 12, 20–27 (2010)
Firdhous, M., Ghazali, O., Hassan, S.: Trust Management in Cloud Computing: A Critical Review. International Journal on Advances in ICT for Emerging Regions 4, 24–36 (2012)
Zissis, D., Lekkas, D.: Addressing Cloud Computing Security Issues. Future Generation Computer Systems 28, 583–592 (2012)
Talkin’Cloud (2014). http://talkincloud.com/TC100/talkin-cloud-100-2014-edition-ranked-1-25
Sandelowski, M., Holditch-David, D., Harris, B.G.: Using Qualitative and Quantitative Methods: The Transition to Parenthood of Infertile Couples, pp. 301-323. Sage Publications, London (1992)
Holsti, O.R.: Content Analysis for the Social Sciences and Humanities. Addison-Wesley Pub. Co. (1969)
Klenke, K.: Qualitative Research in the Study of Leadership. Emerald Group Publishing, Bingley (2008)
Google: How Google handles your data (2014). https://support.google.com/googleforwork/answer/6057301?hl=us
Microsoft: Protecting Data and Privacy in the Cloud (2014). http://azure.microsoft.com/en-us/support/trust-center/resources/
salesforce.com: Secure, private, and trustworthy: enterprise cloud computing with Force.com (2010). http://www.salesforce.com/assets/pdf/misc/WP_Forcedotcom-Security.pdf
Microsoft: Microsoft Azure Privacy Statement (2014). http://www.microsoft.compPrivacy/principles.aspx
salesforce.com: Salesforce Privacy Statement (2014). http://www.salesforce.com/company/privacy/full_privacy.jsp
Amazon.com: Amazon Web Services: Overview of Security Processes (2014). http://media.amazonwebservices.com/pdf/AWS_Security_Whitepaper.pdf
Microsoft: Windows Azure Privacy Overview (2014). http://azure.microsoft.com/en-us/support/trust-center/resources/
Amazon.com: AWS Customer Agreement (2012). http://aws.amazon.com/de/agreement/
Google: Google’s Approach to IT Security - A Google Whitepaper (2012). https://cloud.google.com/files/Google-CommonSecurity-WhitePaper-v1.4.pdf
salesforce.com: Salesforce Security, Privacy and Architecture Documentation (2014). https://help.salesforce.com/apex/HTViewSolution?urlname=Salesforce-Services-Trust-and-Compliance-Documentation&language=en_US
Microsoft: Security, Privacy, and Compliance in Microsoft Azure (2014). http://azure.microsoft.com/en-us/support/trust-center/resources/
Amazon.com: AWS Case Study: HTC (2014). http://aws.amazon.com/solutions/case-studies/htc/
salesforce.com: Salesforce Case Study: Stanley Black and Decker (2014). http://www.salesforce.com/customers/
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2015 Springer International Publishing Switzerland
About this paper
Cite this paper
Gantner, J., Demetz, L., Maier, R. (2015). All You Need is Trust – An Analysis of Trust Measures Communicated by Cloud Providers. In: Debruyne, C., et al. On the Move to Meaningful Internet Systems: OTM 2015 Conferences. OTM 2015. Lecture Notes in Computer Science(), vol 9415. Springer, Cham. https://doi.org/10.1007/978-3-319-26148-5_38
Download citation
DOI: https://doi.org/10.1007/978-3-319-26148-5_38
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-319-26147-8
Online ISBN: 978-3-319-26148-5
eBook Packages: Computer ScienceComputer Science (R0)