Abstract:Vertical industries start taking advantage of computing continuum by hosting their applications or using additional services offered by several Cloud Service Providers. Computing continuum has many advantages for Verticals as it allows to fulfil their quality of service requirements and save costs. This could be achieved due to the distributed, heterogenous and dynamic nature of infrastructure of computing continuum and Vertical's application mobility thus its ability to migrate between different environments. However, this can progress only if in parallel to Vertical's application mobility, the security requirements are dynamically managed and met at the required level in each environment. It is particularly important due to new regulations (e.g. Cyber Resilience Act and Network and Information Security Directive - NIS2) which define new critical industries and introduce for them additional security obligations. Noncompliance with these regulations could lead to penalties. Therefore, Verticals will have to fulfil specific security requirements and be able to deliver proof of compliance. In this paper, we propose to address those needs using emerging concept of Security Service Level Agreement. Following that, we propose a novel Security Service Level Agreement Mediator for cloud applications in mobility which negotiates Security Service Level Agreement with Verticals, continuously fulfils it in computing continuum and delivers proofs of compliance. Based on that, we define main challenges for setting up the Security Service Level Agreement Mediator on the basis of considerations presented in this paper.

Security SLAs for IMS-based Cloud Services

Automatically Enforcing Security SLAs in the Cloud

Service Level Agreements and Security SLA: A Comprehensive Survey

Cost and Risk Aware Support for Cloud SLAs.

A Privacy-Based SLA Violation Detection Model for the Security of Cloud Computing

Risk based SLA management in clouds: A legal perspective

Cloud Service Monitoring System Based on SLA

MN-SLA: A Modular Networking SLA Framework for Cloud Management System

Proxy-Based Web Service Security

Service Level Agreement (SLA) in Utility Computing Systems

A Service Level Agreement-based Web Services Performance

Analysis of SLA Compliance in the Cloud -- An Automated, Model-based Approach

The Optimal Design of Service Level Agreement in IAAS Based on BDIM

SLA-DO: A SLA-Based Data Distribution Strategy on Multiple Cloud Storage Systems

Intelligent Management of SLAs for Composite Web Services

RESEARCH ON SERVICE COMPOSITION-ORIENTED DYNAMIC SLA MANAGEMENT MECHANISM IN CLOUD COMPUTING

Challenges for Continuous, Provable Security Service Level Agreement Management in Computing Continuum

A novel service level agreement model using blockchain and smart contract for cloud manufacturing in industry 4.0

Hybrid Cloud SLAs for Industry 4.0: Bridging the Gap

An Analysis On Availability Commitment And Penalty In Cloud Sla

Cloud SLA negotiation and re‐negotiation: An ontology‐based context‐aware approach