Advanced Cloud Privacy Threat Modeling
This work addresses privacy threats in cloud computing for developers and organizations handling sensitive data, but it is incremental as it builds upon an existing methodology.
The paper tackles the challenge of privacy-preservation for sensitive data in cloud computing by extending the Cloud Privacy Threat Modeling (CPTM) methodology, resulting in a structured approach that facilitates privacy-preserving cloud software development from requirements engineering to design.
Privacy-preservation for sensitive data has become a challenging issue in cloud computing. Threat modeling as a part of requirements engineering in secure software development provides a structured approach for identifying attacks and proposing countermeasures against the exploitation of vulnerabilities in a system . This paper describes an extension of Cloud Privacy Threat Modeling (CPTM) methodology for privacy threat modeling in relation to processing sensitive data in cloud computing environments. It describes the modeling methodology that involved applying Method Engineering to specify characteristics of a cloud privacy threat modeling methodology, different steps in the proposed methodology and corresponding products. We believe that the extended methodology facilitates the application of a privacy-preserving cloud software development approach from requirements engineering to design.