Daedalus

<p>Daedalus is a public cloud risk assessment tool and library.  It is intended to allow an analyst to compare the impacts of two or more public cloud providers.  Security of the cloud service is modeled by three classes: preconditions, vulnerabilities, and impacts.  There exists a graph of causal relationships between nodes of the three classes.  An analyst determines which preconditions the cloud provider satisfies and the tool provides scores for each of the impacts.  Decision makers can then use this analysis to determine which public cloud provider best aligns with the needs and risk tolerances of their particular organization.</p>

搜集汇总

背景与挑战

背景概述

Daedalus是一个公共云风险评估工具和库，旨在通过建模前置条件、漏洞和影响之间的因果关系图，帮助分析师比较不同云提供商的安全影响。评估者输入云提供商满足的前置条件，工具输出影响评分，从而支持决策者根据组织风险偏好选择合适的云服务。