by Immanuel Kunz (FhG) | Oct 22, 2023 | Publications
FhG, XLAB, CNR , NIXU and TECNALIA have prepared a joint whitepaper entitled ‘Continuous Life-Cycle Management of Cloud Security Certifications’. Cloud computing has witnessed rapid growth in adoption over the last decade, with prominent public cloud vendors...
by Immanuel Kunz (FhG) | Jan 10, 2023 | MEDINA Framework
In this blogpost, we cover an issue that may seem not directly related to the goals of the MEDINA project, but which is at the heart of certification automation: When applying automated tools for certification tasks, these tools must be trusted. To be able to trust a...
by Immanuel Kunz (FhG) | Dec 10, 2022 | MEDINA Solution
As a Research and Innovation Action, the MEDINA project aims at developing new approaches to support the automated certification of cloud services. A big challenge in the security assessment of cloud services is to connect and aggregate the isolated assessment results...
by Immanuel Kunz (FhG) | Aug 23, 2022 | MEDINA Framework, MEDINA Solution
MEDINA supports Cloud Service Providers and Auditors in the certification process at various stages, including collection, assessment, storage, and management of evidences. Apart from this, we aim at automating the derivation of a certification decision based on the...
by Immanuel Kunz (FhG) | May 6, 2022 | MEDINA Framework, MEDINA Solution
MEDINA integrates different types of evidence collection tools to enable a comprehensive assessment of a cloud service’s security level. This is important for several reasons: First, security certification catalogs cover different layers including the infrastructure,...