A novel framework to identify cybersecurity challenges and opportunities for organizational digital transformation in the cloud

被引:0
作者
Liang, Xueping [1 ]
Xu, Yilin [1 ]
机构
[1] Florida Int Univ, Dept Informat Syst & Business Analyt, 11200 SW 8th St, Miami, FL 33199 USA
关键词
Cloud security; Design science research; Cybersecurity; Framework; Challenges; Cyberattacks; Opportunities; Digital transformation; COMPUTING RESEARCH; SCIENCE RESEARCH; SECURITY; BLOCKCHAIN; ARCHITECTURE; SCHEME; DESIGN; ISSUES;
D O I
10.1016/j.cose.2025.104339
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
The rise in security threats faced by organizations has resulted in increased attention towards cloud adoption in organizations and cloud security research. To address these concerns, it is crucial to establish trust between application users and cloud services by exploring the gap of cloud security challenges and opportunities in the cybersecurity context. Due to the growing interest in this topic, a comprehensive and updated review of existing literature is much needed. This paper thoroughly examines the current landscape of cloud security, grounded in an extensive systematic literature review of 1,324 research papers, through the lens of a Design Science Research artifact typology rooted in the Information Systems domain. The paper makes significant technological contributions to the field of cloud security, by categorizing findings into four artifact types: constructs, models, methods, and instantiations. These categories are examined across multiple levels of cloud architecture, including data management, identity and access, application and software, host and virtualization, as well as privacy, trust, and compliance. The proposed research framework is adopted to further analyze the challenges that organizations face in securing their cloud-based systems against threats such as data breaches, unauthorized access, and cyberattacks. In addition, the review explores the potential opportunities for enhancing cloud security through the integration of advanced technologies such as blockchain, zero trust, multi-cloud architecture, machine learning and artificial intelligence, in various domains such as healthcare, IoT, and smart cities. By providing a critical analysis of the current state of cloud security, this review paper offers valuable insights into the challenges and opportunities associated with securing cloud-based systems in the cybersecurity era.
引用
收藏
页数:16
相关论文
共 98 条
[71]   A Knowledge Development Perspective on Literature Reviews: Validation of a new Typology in the IS Field [J].
Schryen, Guido ;
Wagner, Gent ;
Benlian, Alexander ;
Pare, Guy .
COMMUNICATIONS OF THE ASSOCIATION FOR INFORMATION SYSTEMS, 2020, 46 :134-186
[72]   Cloud computing research: A review of research themes, frameworks, methods and future research directions [J].
Senyo, Prince Kwame ;
Addae, Erasmus ;
Boateng, Richard .
INTERNATIONAL JOURNAL OF INFORMATION MANAGEMENT, 2018, 38 (01) :128-139
[73]  
Shah H, 2020, INT J ADV COMPUT SC, V11, P402
[74]  
Shakya S, 2022, J ISMAC, V4, P84, DOI 10.36548/jismac.2022.2.002
[75]  
Simmhan YL, 2005, SIGMOD REC, V34, P31, DOI 10.1145/1084805.1084812
[76]   Organizational cloud security and control: a proactive approach [J].
Spanaki, Konstantina ;
Gurguc, Zeynep ;
Mulligan, Catherine ;
Lupu, Emil .
INFORMATION TECHNOLOGY & PEOPLE, 2019, 32 (03) :516-537
[77]  
Sullivan C, 2021, Blockchain and the Public Sector: Theories, Reforms, and Case Studies, P197, DOI [10.1007/978-3-030-, DOI 10.1007/978-3-030]
[78]   Security and Privacy for the Internet of Medical Things Enabled Healthcare Systems: A Survey [J].
Sun, Yingnan ;
Lo, Frank P-W ;
Lo, Benny .
IEEE ACCESS, 2019, 7 :183339-183355
[79]   Low-cost data partitioning and encrypted backup scheme for defending against co-resident attacks [J].
Tian, Junfeng ;
Wang, Zilong ;
Li, Zhen .
EURASIP JOURNAL ON INFORMATION SECURITY, 2020, 2020 (01)
[80]   Continuous auditing and threat detection in multi-cloud infrastructure [J].
Torkura, K. A. ;
Sukmana, Muhammad I. H. ;
Cheng, Feng ;
Meinel, Christoph .
COMPUTERS & SECURITY, 2021, 102