Towards a Quantitative Model of Cloud Computing Risks and Benefits

Юрий Александрович Зеленков

Аннотация


Migrating to the cloud is the main direction of enterprise IT optimization today. Many research papers confirm that cloud computing provides economic benefits, because it enhances flexibility and reduces costs. In other studies, cloud-specific risks are identified and their impact on the customer business is evaluated. However, most often, benefits and risks are considered separately. Model that allows simultaneously evaluate these factors is proposed here. Key factors of tangible and intangible benefits and risks are identified that allows to estimate joint impact of costs and risks on cloud adoption. Simple rules that help to quantify these factors and compute consistent pairwise comparison matrices are also proposed. Usage of proposed method is demonstrated with simple example.

Ключевые слова


облачные вычисления, риски облачных вычислений, преимущества облачных вычислений, мультикритериальное принятие решений

Полный текст:

PDF (English)

Литература


Marston, S., Li, Z., Bandyopadhyay, S., Zhang, J., Ghalsasi, A. Cloud Computing: The Business Perspective // Decision Support Systems. 2011. Vol. 51, No. 1. P. 176-189.

Armbrust, M., Fox, A., Griffith, R., Joseph, A. D., Katz, R., Konwinski, A. A View of Cloud Computing // Communications of the ACM. 2010. Vol. 53, No. 4. P. 50-58.

Karunakaran, S., Krishnaswamy, V., Sundarraj, R. P. Business View of Cloud: Decisions, Models and Opportunities – a Classification and Review of Research // Management Research Review. 2015. Vol. 38, No. 6. P. 582-604.

Triantaphyllou, E. Multi-Criteria Decision Making: A Comparative Study. Kluwer, 2000. 320 p.

Yang, H., Tate, M. A Descriptive Literature Review and Classification of Cloud Computing Research // Communications of the Association for Information Systems. 2012. Vol. 31, No. 1. Paper 2.

Tak, B. C., Urgaonkar, B., Sivasubramaniam, A. To Move or not to Move: The Economics of Cloud Computing // Proceedings of the 3rd USENIX conference on Hot topics in cloud computing. 2011. P. 5-5.

Khajeh-Hosseini, A., Greenwood, D., Smith, J. W., Sommerville, I. The Cloud Adoption Toolkit: Supporting Cloud Adoption Decisions in the Enterprise // Software: Practice and Experience. 2012. Vol. 42, No. 4. P. 447-465.

Williams, B. The Economics of Cloud Computing. Cisco Press, 2011.

Misra, S. C., Mondal, A. Identification of A Company’s Suitability for The Adoption of Cloud Computing and Modelling Its Corresponding Return On Investment // Mathematical and Computer Modelling. 2011. Vol. 53, No. 3. P. 504-521.

Marešová, P. Cost Benefit Analysis Approach for Cloud Computing. // Advanced Computer and Communication Engineering Technology. Springer, 2016, P. 913-923.

Garg, S. K., Versteeg, S., Buyya, R. A Framework for Ranking of Cloud Computing Services // Future Generation Computer Systems. 2013. Vol. 29, No. 4. P. 1012-1023.

Sundarraj, R. P., Venkatraman, S.: On Integrating an IS Success Model and Multicriteria Preference Analysis into a System for Cloud-Computing Investment Decisions // Outlooks and Insights on Group Decision and Negotiation. Springer, 2015. P. 357-368.

Delone, W. H., McLean, E. R. The Delone and Mclean Model of Information Systems Success: A Ten-Year Update // Journal of management information systems. 2003. Vol. 19, No. 4. P. 9-30.

Takabi, H., Joshi, J. B., Ahn, G. J. Security and Privacy Challenges in Cloud Computing Environments // IEEE Security & Privacy. 2010. No. 6. P. 24-31.

Catteddu, D., Hogben, G. Cloud Computing: Benefits, Risks and Recommendations for Information Security. ENISA, 2009. URL: www.enisa.europa.eu/act/rm/files/deliverables/cloud-computing-risk-assessment/at_download/fullReport (accessed: 07.02.2016).

Subashini, S., Kavitha, V. A Survey On Security Issues in Service Delivery Models of Cloud Computing // Journal of Network and Computer Applications. 2011. Vol. 34, No. 1. P. 1-11.

Hashizume, K., Rosado, D. G., Fernández-Medina, E., Fernandez, E. B. An Analysis of Security Issues for Cloud Computing // Journal of Internet Services and Applications. 2013. Vol. 4, No.1. P. 1-13.

Angeles, S. 8 Reasons to Fear Cloud Computing // Business News Daily, 2013. URL: http://www.businessnewsdaily.com/5215-dangers-cloud-computing.html (accessed: 07.02.2016).

Grimes, R. The 5 Cloud Risks You Have to Stop Ignoring // InfoWorld, 2013. URL: http://www.infoworld.com/article/2614369/security/the-5-cloud-risks-you-have-to-stop-ignoring.html (accessed: 07.02.2016).

Martens, B., Teuteberg, F.: Decision-Making in Cloud Computing Environments: A Cost and Risk Based Approach // Information Systems Frontiers. 2012. Vol. 14, No. 4. P. 871-893.

Kantarcioglu, M., Bensoussan, A., Hoe, S. Impact of Security Risks On Cloud Computing Adoption // 49th Annual Allerton Conference on Communication, Control, and Computing. IEEE, 2011. P. 670-674.

Saripalli, P., Pingali, G.: MADMAC: Multiple Attribute Decision Methodology for Adoption of Clouds // 2011 IEEE International Conference on Cloud Computing. IEEE, 2011. P. 316-323.

Savage, S. L. The Flaw of Averages: Why We Underestimate Risk in The Face of Uncertainty. John Wiley & Sons, 2009.

Saaty, T. L. Axiomatic Foundation of the Analytic Hierarchy Process // Management Sciences. 1986. No. 32. P. 841-855.

Aivazyan, S.A., Yenyukov, I.S., Meshalkin, L.D. Applied statistics. Bases of modeling and initial data processing. Financy i statisitca, 1983. 471 p.

Bonham, S. S. Actionable Strategies Through Integrated Performance, Process, Project, And Risk Management. Artech House, 2008.

Hackathorn, R.: Minimizing Action Distance // Data Administration Newsletter, February 1, 2004. URL: www.tdan.com/i025fe04.htm (accessed: 07.02.2016).

Zelenkov Y. Components of Enterprise IT Strategy: Decision-Making Model and Efficiency Measurement // International Journal of Information Systems and Change Management. 2014. Vol. 7, No. 2, P.150–166.

Zelenkov, Y. Business and IT Alignment in Turbulent Business Environment // Business Information Systems Workshops, LNBIP, vol. 228. Springer, 2015. P. 101-112.

Ciborra, C. The Labyrinths of Information: Challenging the Wisdom of System. Oxford University Press, 2002.

Maurer, C. Goodhue, D. A Theoretical Model of the Enterprise System Agility Life Cycle // AMCIS 2010 Proceedings, 2010. Paper 231.

Luftman, J., Kempaiah, R. An Update On Business-IT Alignment: “A Line” Has Been Drawn // MIS Quarterly Executive. 2007. Vol. 6, No. 3. P. 165-177.

Murer, S., Bonati, B., Furrer, F.J. Managed Evolution: A Strategy for Very Large Information Systems. Springer, 2011.

Gordon, L.A., Loeb, M.P. The Economics of Information Security Investment // ACM Transactions on Information and System Security, 2002. Vol. 5, No. 4. P. 438-457.

Matsuura, K. Productivity Space of Information Security in an Extension of the Gordon-Loeb’s Investment Model // M.E. Johnson (ed.), Managing Information Risk and the Economics of Security. Springer, 2009. P. 99 – 119.




DOI: http://dx.doi.org/10.14529/cmse160206