Abstract:This paper presents an iterative mathematical decision model for organizations to evaluate whether to invest in establishing information technology (IT) infrastructure on‐premises or outsourcing IT services on a multicloud environment. This is because a single cloud cannot cover all types of users’ functional/nonfunctional requirements, in addition to several drawbacks such as resource limitation, vendor lock‐in, and prone to failure. On the other hand, multicloud brings several merits such as vendor lock‐in avoidance, system fault tolerance, cost reduction, and better quality of service. The biggest challenge is in selecting an optimal web service composition in the ever increasing multicloud market in which each provider has its own pricing schemes and delivers variation in the service security level. In this regard, we embed a module in the cloud broker to log service downtime and different attacks to measure the security risk. If security tenets, namely, security service level agreement, such as availability, integrity, and confidentiality for mission‐critical applications, are targeted by cybersecurity attacks, it causes disruption in business continuity, leading to financial losses or even business failure. To address this issue, our decision model extends the cost model by using the cost present value concept and the risk model by using the advanced mean failure cost concept, which are derived from the embedded module to quantify cloud competencies. Then, the cloud economic problem is transformed into a bioptimization problem, which minimizes cost and security risks simultaneously. To deal with the combinatorial problem, we extended a genetic algorithm to find a Pareto set of optimal solutions. To reach a concrete result and to illustrate the effectiveness of the decision model, we conducted different scenarios and a small‐to‐medium business IT development for a 5‐year investment as a case study. The result of different implementation shows that multicloud is a promising and reliable solution against IT on‐premises deployment.

Managed security service distribution model

Security-as-a-Service in Multi-cloud and Federated Cloud Environments.

Integrating Security Services in Cloud Service Stores

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

Cyber Situation Awareness Monitoring and Proactive Response for Enterprises on the Cloud

Security Management Model in Cloud Computing Environment

Collaboration-Based Cloud Computing Security Management Framework

Secure Cloud Storage: A Framework for Data Protection As a Service in the Multi-Cloud Environment

An Automated Security Analysis Framework and Implementation for Cloud

Addressing cloud computing security issues

MPSM: Multi-prospective PaaS Security Model

An iterative mathematical decision model for cloud migration: A cost and security risk approach

Security risks and their management in cloud computing

Toward security as a service: A trusted cloud service architecture with policy customization

Security and Interdependency in a Public Cloud: A Game-Theoretic Approach

Security-Aware Efficient Mass Distributed Storage Approach for Cloud Systems in Big Data

A Cloud Security Framework Based on Trust Model and Mobile Agent

Emergent (In)Security of Multi-Cloud Environments

Securing Data Services: a Security Architecture Design for Private Storage Cloud Based on HDFS

SecDM: Securing Data Migration Between Cloud Storage Systems