{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T22:15:25Z","timestamp":1742940925579,"version":"3.40.3"},"publisher-location":"Cham","reference-count":25,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783031008276"},{"type":"electronic","value":"9783031008283"}],"license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022]]},"DOI":"10.1007\/978-3-031-00828-3_25","type":"book-chapter","created":{"date-parts":[[2022,5,3]],"date-time":"2022-05-03T20:04:11Z","timestamp":1651608251000},"page":"252-263","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Assessing Cloud Computing Security Threats in Malaysian Organization Using Fuzzy Delphi Method"],"prefix":"10.1007","author":[{"given":"Nurbaini","family":"Zainuddin","sequence":"first","affiliation":[]},{"given":"Rasimah Che Mohd","family":"Yusuff","sequence":"additional","affiliation":[]},{"given":"Ganthan Narayana","family":"Samy","sequence":"additional","affiliation":[]}],"member":"297","published-online":{"date-parts":[[2022,5,4]]},"reference":[{"key":"25_CR1","doi-asserted-by":"publisher","first-page":"46","DOI":"10.1016\/j.comnet.2018.12.009","volume":"150","author":"JB Hong","year":"2019","unstructured":"Hong, J.B., Nhlabatsi, A., Kim, D.S., Hussein, A., Fetais, N., Khan, K.M.: Systematic identification of threats in the cloud: a survey. Comput. Netw. 150, 46\u201369 (2019). https:\/\/doi.org\/10.1016\/j.comnet.2018.12.009","journal-title":"Comput. Netw."},{"key":"25_CR2","doi-asserted-by":"publisher","unstructured":"Khajeh-Hosseini, A., Sommerville, I., Bogaerts, J., Teregowda, P.: Decision support tools for cloud migration in the enterprise. In: 2011 IEEE 4th International Conference on Cloud Computing, pp. 541\u2013548, July 2011. https:\/\/doi.org\/10.1109\/CLOUD.2011.59","DOI":"10.1109\/CLOUD.2011.59"},{"key":"25_CR3","doi-asserted-by":"publisher","unstructured":"Aleem, A., Ryan Sprott, C.: Let me in the cloud: analysis of the benefit and risk assessment of cloud platform. J. Financ. Crime (2012). https:\/\/doi.org\/10.1108\/13590791311287337","DOI":"10.1108\/13590791311287337"},{"key":"25_CR4","doi-asserted-by":"publisher","first-page":"88","DOI":"10.1016\/j.jnca.2016.11.027","volume":"79","author":"A Singh","year":"2017","unstructured":"Singh, A., Chatterjee, K.: Cloud security issues and challenges: a survey. J. Netw. Comput. Appl. 79, 88\u2013115 (2017). https:\/\/doi.org\/10.1016\/j.jnca.2016.11.027","journal-title":"J. Netw. Comput. Appl."},{"key":"25_CR5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-658-01115-4","volume-title":"IT Security Risk Management","author":"T Ackermann","year":"2013","unstructured":"Ackermann, T.: IT Security Risk Management. Springer Fachmedien Wiesbaden, Wiesbaden (2013)"},{"key":"25_CR6","doi-asserted-by":"publisher","first-page":"57","DOI":"10.1016\/j.aci.2016.03.001","volume":"13","author":"SA Hussain","year":"2017","unstructured":"Hussain, S.A., Fatima, M., Saeed, A., Raza, I., Shahzad, R.K.: Multilevel classification of security concerns in cloud computing. Appl. Comput. Inform. 13, 57\u201365 (2017). https:\/\/doi.org\/10.1016\/j.aci.2016.03.001","journal-title":"Appl. Comput. Inform."},{"issue":"12","key":"25_CR7","doi-asserted-by":"publisher","first-page":"143","DOI":"10.14569\/IJACSA.2013.041221","volume":"4","author":"S Drissi","year":"2013","unstructured":"Drissi, S., Houmani, H., Medromi, H.: Survey: risk assessment for cloud computing. Int. J. Adv. Comput. Sci. Appl. 4(12), 143\u2013148 (2013). https:\/\/doi.org\/10.14569\/IJACSA.2013.041221","journal-title":"Int. J. Adv. Comput. Sci. Appl."},{"issue":"1","key":"25_CR8","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s13677-016-0064-x","volume":"5","author":"E Cayirci","year":"2016","unstructured":"Cayirci, E., Garaga, A., Santana de Oliveira, A., Roudier, Y.: A risk assessment model for selecting cloud service providers. J. Cloud Comput. 5(1), 1\u201312 (2016). https:\/\/doi.org\/10.1186\/s13677-016-0064-x","journal-title":"J. Cloud Comput."},{"issue":"6","key":"25_CR9","doi-asserted-by":"publisher","first-page":"942","DOI":"10.1109\/TSC.2016.2544307","volume":"10","author":"A Sen","year":"2017","unstructured":"Sen, A., Madria, S.: Risk assessment in a sensor cloud framework using attack graphs. IEEE Trans. Serv. Comput. 10(6), 942\u2013955 (2017). https:\/\/doi.org\/10.1109\/TSC.2016.2544307","journal-title":"IEEE Trans. Serv. Comput."},{"key":"25_CR10","unstructured":"Catteddu, D., Hogben, G.: Cloud computing - benefits, risks and recommendations for information security, pp. 1\u20132 (2012)"},{"key":"25_CR11","unstructured":"Michael, J., Field, S.: The Treacherous 12 Cloud Computing Top Threats in 2016, Security, pp. 1\u201334 (2016). http:\/\/www.cloudsecurityalliance.org\/topthreats"},{"key":"25_CR12","doi-asserted-by":"publisher","unstructured":"Saripalli, P., Walters, B.: QUIRC: a quantitative impact and risk assessment framework for cloud security (2010). https:\/\/doi.org\/10.1109\/CLOUD.2010.22","DOI":"10.1109\/CLOUD.2010.22"},{"key":"25_CR13","doi-asserted-by":"publisher","unstructured":"Tanimoto, S., Hiramoto, M., Iwashita, M., Sato, H., Kanai, A.: Risk management on the security problem in cloud computing. In: Proceedings of the - 1st ACIS\/JNU International Conference on Computers, Networks, Systems and Industrial Engineering, CNSI 2011, pp. 147\u2013152 (2011). https:\/\/doi.org\/10.1109\/CNSI.2011.82","DOI":"10.1109\/CNSI.2011.82"},{"key":"25_CR14","doi-asserted-by":"publisher","unstructured":"Albakri, S.H., Shanmgam, B., Samy, G.N., Idris, N.B., Ahmed, A.: A case study for the cloud computing security threats in a governmental organization. In: 1st International Conference on Computer, Communications, and Control Technology, I4CT 2014, no. I4ct, pp. 452\u2013457 (2014). https:\/\/doi.org\/10.1109\/I4CT.2014.6914225","DOI":"10.1109\/I4CT.2014.6914225"},{"key":"25_CR15","doi-asserted-by":"publisher","first-page":"155","DOI":"10.1007\/978-981-287-990-5_13","volume-title":"Advances in Ubiquitous Networking: Proceedings of the UNet\u201915","author":"S Drissi","year":"2016","unstructured":"Drissi, S., Benhadou, S., Medromi, H.: A new shared and comprehensive tool of cloud computing security risk assessment. In: Sabir, E., Medromi, H., Sadik, M. (eds.) Advances in Ubiquitous Networking: Proceedings of the UNet\u201915, pp. 155\u2013167. Springer, Singapore (2016). https:\/\/doi.org\/10.1007\/978-981-287-990-5_13"},{"issue":"3","key":"25_CR16","doi-asserted-by":"publisher","first-page":"1","DOI":"10.3390\/computers8030066","volume":"8","author":"O Akinrolabu","year":"2019","unstructured":"Akinrolabu, O., New, S., Martin, A.: CSCCRA: a novel quantitative risk assessment model for saas cloud service providers. Computers 8(3), 1\u201317 (2019). https:\/\/doi.org\/10.3390\/computers8030066","journal-title":"Computers"},{"key":"25_CR17","doi-asserted-by":"publisher","first-page":"100","DOI":"10.1007\/978-3-642-38323-6_7","volume-title":"Trust Management VII","author":"M Theoharidou","year":"2013","unstructured":"Theoharidou, M., Tsalis, N., Gritzalis, D.: In cloud we trust: risk-assessment-as-a-service. In: Fern\u00e1ndez-Gago, C., Martinelli, F., Pearson, S., Agudo, I. (eds.) Trust Management VII, pp. 100\u2013110. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-38323-6_7"},{"key":"25_CR18","doi-asserted-by":"publisher","unstructured":"Youssef, B.C., Nada, M., Elmehdi, B., Boubker, R.: Intrusion detection in cloud computing based attacks patterns and risk assessment. In: Proceedings of the 2016 3rd International Conference on Systems of Collaboration, SysCo 2016 (2017). https:\/\/doi.org\/10.1109\/SYSCO.2016.7831341","DOI":"10.1109\/SYSCO.2016.7831341"},{"key":"25_CR19","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1016\/j.comnet.2018.01.033","volume":"134","author":"G Stergiopoulos","year":"2018","unstructured":"Stergiopoulos, G., Gritzalis, D., Kouktzoglou, V.: Using formal distributions for threat likelihood estimation in cloud-enabled IT risk assessment. Comput. Netw. 134, 23\u201345 (2018). https:\/\/doi.org\/10.1016\/j.comnet.2018.01.033","journal-title":"Comput. Netw."},{"key":"25_CR20","unstructured":"Houmb, S.H.: Decision Support for Choice of Security Solution: The Aspect-Oriented Risk Driven Development (AORDD) Framework (2007)"},{"key":"25_CR21","doi-asserted-by":"crossref","unstructured":"Zadeh, L.A.: Fuzzy sets and systems. In: Fox, J. (ed.) System Theory. Microwave Research Institute Symposia Series XV, pp. 29\u201337. Polytechnic Press, Brooklyn (1965). Reprinted in Int. J. Gen. Syst. 17, 129\u2013138 (1990)","DOI":"10.1080\/03081079008935104"},{"key":"25_CR22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1007\/3-540-47847-7_10","volume-title":"High Performance Computing","author":"M Garatti","year":"2002","unstructured":"Garatti, M., Costa, R., Reghizzi, S.C., Rohou, E.: The impact of alias analysis on VLIW scheduling. In: Zima, H.P., Joe, K., Sato, M., Seo, Y., Shimasaki, M. (eds.) ISHPC 2002. LNCS, vol. 2327, pp. 93\u2013105. Springer, Heidelberg (2002). https:\/\/doi.org\/10.1007\/3-540-47847-7_10"},{"key":"25_CR23","doi-asserted-by":"publisher","unstructured":"Samantra, C., Datta, S., Shankar Mahapatra, S.: Risk assessment in IT outsourcing using fuzzy decision-making approach: an Indian perspective. Expert Syst. Appl. (2014). https:\/\/doi.org\/10.1016\/j.eswa.2013.12.024","DOI":"10.1016\/j.eswa.2013.12.024"},{"issue":"4","key":"25_CR24","doi-asserted-by":"publisher","first-page":"741","DOI":"10.1016\/j.jcss.2005.11.001","volume":"72","author":"HC Xia","year":"2006","unstructured":"Xia, H.C., Li, D.F., Zhou, J.Y., Wang, J.M.: Fuzzy LINMAP method for multiattribute decision making under fuzzy environments. J. Comput. Syst. Sci. 72(4), 741\u2013759 (2006). https:\/\/doi.org\/10.1016\/j.jcss.2005.11.001","journal-title":"J. Comput. Syst. Sci."},{"key":"25_CR25","series-title":"Communications in Computer and Information Science","doi-asserted-by":"publisher","first-page":"17","DOI":"10.1007\/978-3-642-16120-9_9","volume-title":"Web Application Security","author":"D Catteddu","year":"2010","unstructured":"Catteddu, D.: Cloud computing: benefits, risks and recommendations for information security. In: Serr\u00e3o, C., Aguilera D\u00edaz, V., Cerullo, F. (eds.) IBWAS 2009. CCIS, vol. 72, p. 17. Springer, Heidelberg (2010). https:\/\/doi.org\/10.1007\/978-3-642-16120-9_9"}],"container-title":["Lecture Notes in Networks and Systems","Recent Advances in Soft Computing and Data Mining"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-00828-3_25","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,3]],"date-time":"2022-05-03T20:29:34Z","timestamp":1651609774000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-00828-3_25"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"ISBN":["9783031008276","9783031008283"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-00828-3_25","relation":{},"ISSN":["2367-3370","2367-3389"],"issn-type":[{"type":"print","value":"2367-3370"},{"type":"electronic","value":"2367-3389"}],"subject":[],"published":{"date-parts":[[2022]]},"assertion":[{"value":"4 May 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SCDM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Soft Computing and Data Mining","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 May 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31 May 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"scdm2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/scdm.uthm.edu.my\/scdm2022\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}