Vulnerability Assessment In Cloud Computing

As vulnerabilities keep increasing exponentially every year, the need to efficiently classify, manage, and analyse them also increases. Many of the previous attempts at managing vulnerabilities have not been so successful because of the use of taxonomy approach. Few of the recent approaches have used ontologies for vulnerability management. Ontologies are real world concepts that are modelled using an ontology language. Ontologies are more appropriate for vulnerabilities as vulnerabilities can not be strictly classified into hierarchies (taxonomies) and tend to overlap. Ontologies support both these characteristics of vulnerabilities. Cloud computing is redefining the way computers are used. As more and more users, applications and businesses move to cloud it becomes very important to have proper vulnerability management in cloud. In this paper we present a vulnerability management framework for