Cloud computing adoption framework: A security framework for business clouds

• We demonstrate CCAF multi-layered security.
• We explain the mappings between CCAF multi-layered architecture and core technologies
• We performed penetration testing and SQL injection on CCAF multi-layered security.
• Results and analysis by CCAF are better than those produced by the other tools.
• CCAF multi-layered security blends with policy, services and business activities.

This article presents a cloud computing adoption framework (CCAF) security suitable for business clouds. CCAF multilayered security is based on the development and integration of three major security technologies: firewall, identity management, and encryption based on the development of enterprise file sync and share technologies. This article presents the vision, related works, and views on security framework. Core technologies have been explained in detail, and experiments were designed to demonstrate the robustness of the CCAF multilayered security. In penetration testing, CCAF multilayered security could detect and block 99.95% viruses and trojans, and could achieve ≥85%≥85% of blocking for 100 h of continuous attack. Detection and blocking took <0.012s/trojan or virus. A full CCAF multilayered security protection could block all SQL (structured query language) injection, providing real protection to data. CCAF multilayered security did not report any false alarm. All FF-measures for CCAF test results were ≥99.75%≥99.75%. The mechanism of blending of CCAF multilayered security with policy, real services, and business activities has been illustrated. Research contributions have been justified and CCAF multilayered security can be beneficial for volume, velocity, and veracity of big data services operated in the cloud.