Towards wider cloud service applicability by security, privacy and trust measurements

Today large amounts of security and privacy-critical data are transferred, processed and stored in external cloud services. However, with many offerings, you need to be either an ignoramus or a daredevil to surrender such data. For the cautious, trustworthy, sufficient and credible evidence of the actual security, privacy and trust level is a prerequisite for considering cloud services for critical applications. We present results from an expert interview study investigating the needs of security, privacy and trust measurement in the cloud. Furthermore, research directions for metrics development are discussed based on the interviews.