Page 1029 - Cloud computing: From paradigm to operation

Security 7

3.1.15 software as a service (SaaS) [b-ITU-T Y.3500]: Cloud service category in which the cloud capabilities
type provided to the cloud service customer is an application capabilities type.
3.1.16 tenant [b-ITU-T Y.3500]: One or more cloud service users sharing access to a set of physical and
virtual resources.
3.1.17 threat [b-ISO/IEC 27000]: Potential cause of an unwanted incident, which may result in harm to a
system or organization.
3.1.18 vulnerability [b-NIST-SP-800-30]: Weakness in an information system, system security procedures,
internal controls, or implementation that could be exploited by a threat source.

3.2 Terms defined in this Recommendation
None.

4 Abbreviations and acronyms

This Recommendation uses the following abbreviations and acronyms:
ACL Access Control List

API Application Programming Interface
BIA Business Impact Analysis
CCTV Closed Circuit Television

CPU Central Processing Unit
CSC Cloud Service Customer
CSN Cloud Service Partner

CSP Cloud Service Provider
DB Database
DDoS Distributed Denial of Service

DLP Data Leakage Prevention
DoS Denial of Service

IAM Identity and Access Management
IaaS Infrastructure as a Service
ICT Information and Communication Technology

IdM Identity Management
IDS Intrusion Detection System

IP Internet Protocol
IPS Intrusion Prevention System
ISP Internet Service Provider

IT Information Technology
JIT Just In Time
LDAP Lightweight Directory Access Protocol

NaaS Network as a Service
OS Operating System
PaaS Platform as a Service

1021