{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,20]],"date-time":"2026-06-20T05:43:00Z","timestamp":1781934180245,"version":"3.54.5"},"reference-count":34,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2020,7,29]],"date-time":"2020-07-29T00:00:00Z","timestamp":1595980800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2020,7,29]],"date-time":"2020-07-29T00:00:00Z","timestamp":1595980800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Cloud Comp"],"published-print":{"date-parts":[[2020,12]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Cloud computing is a model for on-demand delivery of IT resources (e.g., servers, storage, databases, etc.) over the Internet with pay-as-you-go pricing. Although it provides numerous benefits to cloud service users (CSUs) such as flexibility, elasticity, scalability, and economies of scale, there is a large trust deficit between CSUs and cloud service providers (CSPs) that prevents the widespread adoption of this computing paradigm. While some businesses have slowly started adopting cloud computing with careful considerations, others are still reluctant to migrate toward it due to several data security and privacy issues. Therefore, the creation of a trust model that can evolve to reflect the true assessment of CSPs in terms of either a positive or a negative reputation as well as quantify trust level is of utmost importance to establish trust between CSUs and CSPs. In this paper, we propose a fuzzy-logic based approach that allows the CSUs to determine the most trustworthy CSPs. Specifically, we develop inference rules that will be applied in the fuzzy inference system (FIS) to provide a quantitative security index to the CSUs. One of the main advantages of the FIS is that it considers the uncertainties and ambiguities associated with measuring trust. Moreover, our proposed fuzzy-logic based trust model is not limited to the CSUs as it can be used by the CSPs to promote their services through self-evaluation. To demonstrate the effectiveness of our proposed fuzzy-based trust model, we present case studies where several CSPs are evaluated and ranked based on the security index.<\/jats:p>","DOI":"10.1186\/s13677-020-00192-9","type":"journal-article","created":{"date-parts":[[2020,7,29]],"date-time":"2020-07-29T12:02:39Z","timestamp":1596024159000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":41,"title":["A fuzzy inference system (FIS) to evaluate the security readiness of cloud service providers"],"prefix":"10.1186","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0168-3774","authenticated-orcid":false,"given":"Syed","family":"Rizvi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"John","family":"Mitchell","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Abdul","family":"Razaque","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mohammad R.","family":"Rizvi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Iyonna","family":"Williams","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2020,7,29]]},"reference":[{"key":"192_CR1","doi-asserted-by":"publisher","first-page":"964","DOI":"10.1016\/j.future.2016.11.031","volume":"78","author":"C Stergiou","year":"2018","unstructured":"Stergiou C, Psannis KE, Kim B-G, Gupta B (Jan. 2018) Secure integration of IoT and cloud computing. Futur Gener Comput Syst 78:964\u2013975","journal-title":"Futur Gener Comput Syst"},{"issue":"1","key":"192_CR2","doi-asserted-by":"publisher","first-page":"589","DOI":"10.1007\/s10586-017-0953-x","volume":"21","author":"B Hayat","year":"2017","unstructured":"Hayat B, Kim KH, Kim K-I (2017) A study on fuzzy logic based cloud computing. Clust Comput 21(1):589\u2013603","journal-title":"Clust Comput"},{"key":"192_CR3","first-page":"1","volume":"2019","author":"Y Wang","year":"2019","unstructured":"Wang Y, Wen J, Wang X, Tao B, Zhou W (Jan. 2019) A cloud service trust evaluation model based on combining weights and gray correlation analysis. Security Commun Net 2019:1\u201311","journal-title":"Security Commun Net"},{"key":"192_CR4","doi-asserted-by":"crossref","unstructured":"van der Werff L, Real C, Lynn T (2018) Individual trust and the internet. In: Searle R, Nienaber A, Sitkin SB, editors. Trust. Oxford: Routledge. Available: http:\/\/doras.dcu.ie\/22321\/1\/Individual_Trust_and_the_Internet_Repository.pdf","DOI":"10.4324\/9781315745572-27"},{"key":"192_CR5","doi-asserted-by":"crossref","unstructured":"S\u00f6llner, M.; Pavlou, P. & Leimeister, J. M. (2016): Understanding the development of trust: comparing trust in the IT artifact and Trust in the Provider. In: Academy of management annual meeting (AOM), Anaheim, CA, USA","DOI":"10.5465\/ambpp.2016.10167abstract"},{"issue":"2","key":"192_CR6","first-page":"12","volume":"2","author":"DH Mcknight","year":"2011","unstructured":"Mcknight DH, Carter M, Thatcher JB, Clay PF (2011) Trust in a specific technology: an investigation of its components and measures. ACM Transact Manag Inform Syst 2(2):12","journal-title":"ACM Transact Manag Inform Syst"},{"issue":"4","key":"192_CR7","doi-asserted-by":"publisher","first-page":"673","DOI":"10.1016\/j.chb.2010.01.004","volume":"26","author":"YM Li","year":"2010","unstructured":"Li YM, Yeh YS (2010) Increasing trust in mobile commerce through design aesthetics. Comput Hum Behav 26(4):673\u2013684","journal-title":"Comput Hum Behav"},{"key":"192_CR8","doi-asserted-by":"crossref","unstructured":"Jensen, T., Khan, M. M. H., Albayram, Y., Fahim, M. A. A., Buck, R., & Coman, E. (2019). Anticipated emotions in initial trust evaluations of a drone system based on performance and process information. International Journal of human-computer interaction, 1-10","DOI":"10.1080\/10447318.2019.1642616"},{"key":"192_CR9","doi-asserted-by":"crossref","unstructured":"A. M. Mohammed, E. I. Morsy, and F. A. Omara, \u201cTrust model for cloud service consumers,\u201d 2018 International Conference on Innovative Trends in Computer Engineering (ITCE), 2018","DOI":"10.1109\/ITCE.2018.8316613"},{"key":"192_CR10","unstructured":"Prabu Ragavendiran, S. D, Sowmiya N, Santhiya P. \u201cAnalysis of Trust Score of CSPS by Comparing Service Broker Policies and Load Balancing Policies using Cloud Analyst and Fuzzy Inference System\u201d, INTERNATIONAL JOURNAL OF ENGINEERING RESEARCH & TECHNOLOGY (IJERT) RTICCT \u2013 2019 (Volume 7 \u2013 Issue 01)"},{"key":"192_CR11","doi-asserted-by":"crossref","unstructured":"A. R. Wani, Q. P. Rana, U. Saxena, and N. Pandey, \u201cAnalysis and Detection of DDoS Attacks on Cloud Computing Environment using Machine Learning Techniques,\u201d 2019 Amity International conference on artificial intelligence (AICAI), Apr. 2019","DOI":"10.1109\/AICAI.2019.8701238"},{"key":"192_CR12","doi-asserted-by":"crossref","unstructured":"N. Gregorio, J. Mathanamohan, Q. H. Mahmoud, and M. Altaei, \u201cHacking in the cloud,\u201d Internet Technology Letters, vol. 2, no. 1, 2018","DOI":"10.1002\/itl2.84"},{"key":"192_CR13","doi-asserted-by":"crossref","unstructured":"Cayirci E, Oliveira ASD (2018) Modelling trust and risk for cloud services. J Cloud Comput 7(1)","DOI":"10.1186\/s13677-018-0114-7"},{"key":"192_CR14","doi-asserted-by":"crossref","unstructured":"E. G. Abdallah, M. Zulkernine, Y. X. Gu, and C. Liem, \u201cTRUST-CAP: A Trust Model for Cloud-Based Applications,\u201d 2017 IEEE 41st annual computer software and applications conference (COMPSAC), Jul. 2017","DOI":"10.1109\/COMPSAC.2017.256"},{"key":"192_CR15","doi-asserted-by":"crossref","unstructured":"S. R. Rathi and V. K. Kolekar, \u201cTrust Model for Computing Security of Cloud,\u201d 2018 Fourth international conference on computing communication control and automation (ICCUBEA), Aug. 2018","DOI":"10.1109\/ICCUBEA.2018.8697881"},{"key":"192_CR16","doi-asserted-by":"publisher","unstructured":"Mitchell J, Rizvi S, Ryoo J (2015) \"A Fuzzy-Logic Approach for Evaluating a Cloud Service Provider,\" 2015 1st International Conference on Software Security and Assurance (ICSSA), Suwon. p. 19-24 https:\/\/doi.org\/10.1109\/ICSSA.2015.014","DOI":"10.1109\/ICSSA.2015.014"},{"key":"192_CR17","doi-asserted-by":"crossref","unstructured":"Srivastava R, Daniel AK (2018) Efficient model of cloud trustworthiness for selecting services using fuzzy logic. Adv Intelligent Syst Comput Emerg Technol Data Mining Inform Security:249\u2013260","DOI":"10.1007\/978-981-13-1951-8_23"},{"key":"192_CR18","doi-asserted-by":"crossref","unstructured":"S. R. Rathi and V. K. Kolekar, \u201cTrust Model for Computing Security of Cloud,\u201d 2018 Fourth International Conference on Computing Communication Control and Automation (ICCUBEA), 2018","DOI":"10.1109\/ICCUBEA.2018.8697881"},{"key":"192_CR19","doi-asserted-by":"crossref","unstructured":"B. Farrokhi and S. Nalbandian, \u201cA Survey on Fuzzy Trust Management in Cloud Computing,\u201d 2018 1st International Conference on Advanced Research in Engineering Sciences (ARES), 2018","DOI":"10.1109\/ARESX.2018.8723302"},{"key":"192_CR20","doi-asserted-by":"crossref","unstructured":"Y. Wang, J. Wen, W. Zhou, and F. Luo, \u201cA Novel Dynamic Cloud Service Trust Evaluation Model in Cloud Computing,\u201d 2018 17th IEEE International Conference On Trust, Security And Privacy In Computing And Communications\/ 12th IEEE International Conference On Big Data Science And Engineering (TrustCom\/BigDataSE), 2018","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00012"},{"key":"192_CR21","unstructured":"S. Rizvi, J. Ryoo, J. Kissell, and W. Aiken. A Stakeholder-Oriented Assessment Index for Cloud Security Auditing. The 9thACM International Conference on Ubiquitous Information Management and Communication"},{"key":"192_CR22","unstructured":"Alruwaythi M, Kambhampaty K, Nygard KE (2019) User Behavior and Trust Evaluation in Cloud Computing. Proceedings of 34th International Conference on Computers and Their Applications, vol 58. p.378-386"},{"key":"192_CR23","doi-asserted-by":"crossref","unstructured":"Chen Z, Tian L, Lin C (2018) Trust evaluation model of cloud user based on behavior data. Int J Distributed Sensor Netw 14(5)","DOI":"10.1177\/1550147718776924"},{"key":"192_CR24","doi-asserted-by":"publisher","unstructured":"van der Werff L, Fox G, Masevic I, et al (2019) Building consumer trust in the cloud: an experimental analysis of the cloud trust label approach. J Cloud Comp 8:6 https:\/\/doi.org\/10.1186\/s13677-019-0129-8","DOI":"10.1186\/s13677-019-0129-8"},{"key":"192_CR25","doi-asserted-by":"crossref","unstructured":"Xu J, Du X, Cai W, Zhu C, Chen Y (2019) MeURep: A novel user reputation calculation approach in personalized cloud services. Plos One 14(6)","DOI":"10.1371\/journal.pone.0217933"},{"key":"192_CR26","doi-asserted-by":"publisher","first-page":"012007","DOI":"10.1088\/1742-6596\/1325\/1\/012007","volume":"1325","author":"Y Lu","year":"2019","unstructured":"Lu Y, Fang Y, Qin J (2019) A trust assessment model based on recommendation and dynamic self-adaptive in cloud service. J Phys Conf Ser 1325:012007","journal-title":"J Phys Conf Ser"},{"issue":"1","key":"192_CR27","doi-asserted-by":"publisher","first-page":"59","DOI":"10.1504\/IJES.2016.073753","volume":"8","author":"C Huang","year":"2016","unstructured":"Huang C, He L, Liao X, Dai H, Ji M (2016) Developing a trustworthy computing framework for clouds. Int J Embed Syst 8(1):59\u201368","journal-title":"Int J Embed Syst"},{"issue":"7","key":"192_CR28","doi-asserted-by":"publisher","first-page":"3534","DOI":"10.1007\/s11227-018-2669-y","volume":"75","author":"H Kurdi","year":"2019","unstructured":"Kurdi H, Alfaries A, Al-Anazi A, Alkharji S, Addegaither M, Altoaimy L, Ahmed SH (2019) A lightweight trust management algorithm based on subjective logic for interconnected cloud computing environments. J Supercomput 75(7):3534\u20133554","journal-title":"J Supercomput"},{"key":"192_CR29","doi-asserted-by":"crossref","unstructured":"F. Topaloglu and H. Pehlivan, \u201cComparison of Mamdani type and Sugeno type fuzzy inference systems in wind power plant installations,\u201d 2018 6th International Symposium on Digital Forensic and Security (ISDFS), 2018","DOI":"10.1109\/ISDFS.2018.8355384"},{"issue":"28","key":"192_CR30","doi-asserted-by":"publisher","first-page":"17782","DOI":"10.1016\/j.ijhydene.2017.02.167","volume":"42","author":"AE Hamdaouy","year":"2017","unstructured":"Hamdaouy AE, Salhi I, Belattar A, Doubabi S (2017) Takagi\u2013Sugeno fuzzy modeling for three-phase micro hydropower plant prototype. Int J Hydrog Energy 42(28):17782\u201317792","journal-title":"Int J Hydrog Energy"},{"key":"192_CR31","doi-asserted-by":"crossref","unstructured":"A. Ebrahimnejad and J. L. Verdegay, \u201cFuzzy Set Theory,\u201d in Fuzzy Sets-Based Methods and Techniques for Modern Analytics, vol. 364, pp. 1\u201326","DOI":"10.1007\/978-3-319-73903-8_1"},{"key":"192_CR32","doi-asserted-by":"publisher","first-page":"1308","DOI":"10.1016\/j.procs.2018.05.047","volume":"132","author":"S Thaker","year":"2018","unstructured":"Thaker S, Nagori V (2018) Analysis of Fuzzification process in fuzzy expert system. Proced Comput Sci 132:1308\u20131316","journal-title":"Proced Comput Sci"},{"key":"192_CR33","unstructured":"Vimercati SDCD, Foresti S, Livraga G, Piuri V, Samarati P (2019) A fuzzy-based brokering service for cloud plan selection. IEEE Syst J:1\u20139"},{"key":"192_CR34","doi-asserted-by":"crossref","unstructured":"Chakraverty S, Sahoo DM, Mahato NR (2019) Defuzzification. Springer:117\u2013127","DOI":"10.1007\/978-981-13-7430-2_7"}],"container-title":["Journal of Cloud Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13677-020-00192-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s13677-020-00192-9\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13677-020-00192-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,7,28]],"date-time":"2021-07-28T23:50:06Z","timestamp":1627516206000},"score":1,"resource":{"primary":{"URL":"https:\/\/journalofcloudcomputing.springeropen.com\/articles\/10.1186\/s13677-020-00192-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,7,29]]},"references-count":34,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2020,12]]}},"alternative-id":["192"],"URL":"https:\/\/doi.org\/10.1186\/s13677-020-00192-9","relation":{},"ISSN":["2192-113X"],"issn-type":[{"value":"2192-113X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,7,29]]},"assertion":[{"value":"30 November 2019","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"15 July 2020","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"29 July 2020","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The authors declare that they have no competing interests.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"42"}}