ArchiMate based Security Risk Assessment as a service: preventing and responding to the cloud of things' risks

Abstract

The Cloud Computing and the Internet of Things (IoT) combination “Cloud of Things” renders the devices' generated data more efficient for the development of intelligent ap- plications. However, due to the data outsourcing, it is confronted to a constant risk. The paper introduces an ArchiMate based Security Risk Assessment as a service model (ASRAaaS) in order to strengths the Cloud of Things' security. This service model integrates two frameworks: preventive and reactive risk analysis. Indeed, the combination of preventive and responsive approaches delivered valuable results. In fact, the Responsive Risk Analysis investigates all the relevant risks earlier, so accordingly before their potential occurrence. This investigation is then tailored as a Model-base, which a mobile agent is responsible for its management. Mobile Agents technology is the key combining the preventive and responsive approaches, shifting thus risk countermeasures decisions from the preventive approach to the responsive one. Our contribution grants security for Cloud of things without influencing its performance.