A delivery model for enterprise context-aware security as a service in mobile cloud computing / Muaamar Amer Abdulhafedh Al-Kubati

A delivery model for enterprise context-aware security as a service in mobile cloud computing / Muaamar Amer Abdulhafedh Al-Kubati

Enterprise Mobile Cloud Computing (MCC) environments have become typical nowadays especially with practices such as Bring Your Own Device (BYOD). These environments are not only highly complex and dynamic but also have an enormous number of users and devices, thus exposing these enterprises to highe...

Full description

Saved in:
Bibliographic Details
Main Author: Abdulhafedh Al-Kubati, Muaamar Amer
Format: Thesis
Language:English
Published: 2019
Online Access:https://ir.uitm.edu.my/id/eprint/85700/1/85700.pdf
Tags: Add Tag
No Tags, Be the first to tag this record!
id my-uitm-ir.85700
record_format uketd_dc
spelling my-uitm-ir.857002023-11-29T07:47:38Z A delivery model for enterprise context-aware security as a service in mobile cloud computing / Muaamar Amer Abdulhafedh Al-Kubati 2019 Abdulhafedh Al-Kubati, Muaamar Amer Enterprise Mobile Cloud Computing (MCC) environments have become typical nowadays especially with practices such as Bring Your Own Device (BYOD). These environments are not only highly complex and dynamic but also have an enormous number of users and devices, thus exposing these enterprises to higher security risks with possible confidential enterprise data and information residing in their workers’ personal devices. As opposed to the conventional static environments where devices are less dynamic, protecting enterprise MCC environments requires security approaches that are dynamic and fine-grained, especially approaches that are based on contexts such as the state of devices, users or environment. However, constructing MCC applications in enterprise environments with context-aware security is very complex and costly due to the diverse tasks, scalability and effectiveness issues involved. These issues may impede the adoption of context-aware security among enterprises, which may lead to an inadequate response to security risks. To overcome these issues, this thesis aims to simplify the construction of enterprise context-aware security applications in MCC, especially in BYOD environments, by proposing a model to deliver context-aware security as a service called CASECaaS. Accordingly, the research objectives are to design a model to provide context-aware security as a service, and to evaluate the feasibility and effectiveness of the model. Employing design science methodology for both objectives, the model is first designed to abstract the complexity of constructing context-aware security applications and enable enterprises and developers to seamlessly and easily empower their applications with context-aware security by subscribing to a cloud service. The model is divided into four major components: (i) a context-aware cloud backend that is responsible for context management tasks and acts as the backbone of the model, (ii) an enterprise cloud frontend to enable administrators and developers to easily define security contexts, (iii) a developer API that can be easily integrated with enterprise applications and (iv) a mobile client that reads sensor data from mobile devices and sends it to the cloud backend for analysis. The model is then implemented using scrum agile methodology to demonstrate its feasibility and provide concrete artifacts to evaluate its effectiveness. The model is rigorously evaluated using three complimentary methods; namely performance analysis, simulation and case study. The performance analysis showed an acceptable response time of 1 second for 1000 concurrent users on a scalable group of 10 low-end 1GB servers while the simulat ion results showed that the model is scalable and effective to be used in a multi-tenant environment with a large number of tenants and devices with an average response time of 112.6 milliseconds per request for 1000 tenants, each with 1000 devices and 100 security contexts. Thus, the performance analysis and simulation results revealed that the CASECaaS model is both scalable and effective. The case study in a real-world environment with testers on an existing university enterprise mobile application revealed that the model is feasible and can be realistically effective. The two major contributions of this thesis is delivering context-aware security as a service through the CASECaaS model and the CASECaaS prototype. 2019 Thesis https://ir.uitm.edu.my/id/eprint/85700/ https://ir.uitm.edu.my/id/eprint/85700/1/85700.pdf text en public phd doctoral Universiti Teknologi MARA (UiTM) Faculty of Computer & Mathematical Sciences Aljunid, Syed Ahmad
institution Universiti Teknologi MARA
collection UiTM Institutional Repository
language English
advisor Aljunid, Syed Ahmad
description Enterprise Mobile Cloud Computing (MCC) environments have become typical nowadays especially with practices such as Bring Your Own Device (BYOD). These environments are not only highly complex and dynamic but also have an enormous number of users and devices, thus exposing these enterprises to higher security risks with possible confidential enterprise data and information residing in their workers’ personal devices. As opposed to the conventional static environments where devices are less dynamic, protecting enterprise MCC environments requires security approaches that are dynamic and fine-grained, especially approaches that are based on contexts such as the state of devices, users or environment. However, constructing MCC applications in enterprise environments with context-aware security is very complex and costly due to the diverse tasks, scalability and effectiveness issues involved. These issues may impede the adoption of context-aware security among enterprises, which may lead to an inadequate response to security risks. To overcome these issues, this thesis aims to simplify the construction of enterprise context-aware security applications in MCC, especially in BYOD environments, by proposing a model to deliver context-aware security as a service called CASECaaS. Accordingly, the research objectives are to design a model to provide context-aware security as a service, and to evaluate the feasibility and effectiveness of the model. Employing design science methodology for both objectives, the model is first designed to abstract the complexity of constructing context-aware security applications and enable enterprises and developers to seamlessly and easily empower their applications with context-aware security by subscribing to a cloud service. The model is divided into four major components: (i) a context-aware cloud backend that is responsible for context management tasks and acts as the backbone of the model, (ii) an enterprise cloud frontend to enable administrators and developers to easily define security contexts, (iii) a developer API that can be easily integrated with enterprise applications and (iv) a mobile client that reads sensor data from mobile devices and sends it to the cloud backend for analysis. The model is then implemented using scrum agile methodology to demonstrate its feasibility and provide concrete artifacts to evaluate its effectiveness. The model is rigorously evaluated using three complimentary methods; namely performance analysis, simulation and case study. The performance analysis showed an acceptable response time of 1 second for 1000 concurrent users on a scalable group of 10 low-end 1GB servers while the simulat ion results showed that the model is scalable and effective to be used in a multi-tenant environment with a large number of tenants and devices with an average response time of 112.6 milliseconds per request for 1000 tenants, each with 1000 devices and 100 security contexts. Thus, the performance analysis and simulation results revealed that the CASECaaS model is both scalable and effective. The case study in a real-world environment with testers on an existing university enterprise mobile application revealed that the model is feasible and can be realistically effective. The two major contributions of this thesis is delivering context-aware security as a service through the CASECaaS model and the CASECaaS prototype.
format Thesis
qualification_name Doctor of Philosophy (PhD.)
qualification_level Doctorate
author Abdulhafedh Al-Kubati, Muaamar Amer
spellingShingle Abdulhafedh Al-Kubati, Muaamar Amer
A delivery model for enterprise context-aware security as a service in mobile cloud computing / Muaamar Amer Abdulhafedh Al-Kubati
author_facet Abdulhafedh Al-Kubati, Muaamar Amer
author_sort Abdulhafedh Al-Kubati, Muaamar Amer
title A delivery model for enterprise context-aware security as a service in mobile cloud computing / Muaamar Amer Abdulhafedh Al-Kubati
title_short A delivery model for enterprise context-aware security as a service in mobile cloud computing / Muaamar Amer Abdulhafedh Al-Kubati
title_full A delivery model for enterprise context-aware security as a service in mobile cloud computing / Muaamar Amer Abdulhafedh Al-Kubati
title_fullStr A delivery model for enterprise context-aware security as a service in mobile cloud computing / Muaamar Amer Abdulhafedh Al-Kubati
title_full_unstemmed A delivery model for enterprise context-aware security as a service in mobile cloud computing / Muaamar Amer Abdulhafedh Al-Kubati
title_sort delivery model for enterprise context-aware security as a service in mobile cloud computing / muaamar amer abdulhafedh al-kubati
granting_institution Universiti Teknologi MARA (UiTM)
granting_department Faculty of Computer & Mathematical Sciences
publishDate 2019
url https://ir.uitm.edu.my/id/eprint/85700/1/85700.pdf
_version_ 1794192091938553856

Similar Items