Stage-oe-small.jpg

Thema4245/en

Aus Aifbportal
Wechseln zu:Navigation, Suche


IT-Certification: Traditional vs. Dynamic Certification - Is there really a difference?



Information on the Thesis

Type of Final Thesis: Bachelor, Master
Supervisor: Heiner Teigeler
Research Group: Critical Information Infrastructures

Archive Number: 4.245
Status of Thesis: Open
Date of start: 2019-04-02

Further Information

Background:

Cloud services are part of an ever-changing environment, resulting from fast technology life cycles and inherent cloud computing characteristics. Hence, ongoing security may no longer be assured throughout long periods, for instance, due to configuration changes or major security incidents. To counteract these issues, we focus on research and development of dynamic certifications for cloud services, which enable auditors to continuously and (semi) automatically audit and monitor crucial parameters of cloud services. Yet, it is still unclear whether a dynamic certification can actually increase customers’ perceived trust or assurance and influence customers’ purchase intention. Therefore, we are planning to conduct an online survey with cloud service providers in which we will integrate different certification presentation. After showing the certification presentation to each survey participating, we ask questions to measure their perceived assurance and trust. This study will hopefully reveal very important and interesting findings regarding the effect of using dynamic certification instead of simple web assurance seals.This thesis will be written in close cooperation with Heiner Teigeler and Sebastian Lins. We will support you in preparing and conducting the survey.


Objective(s):

Plan, design and conduct an online survey with cloud service provider to analyze the effect of dynamic certification on their trust, assurance and purchase intention.


Introductory literature:

Lins, S.; Teigeler, H.; Sunyaev, A. (2016): Towards a Bright Future: Enhancing Diffusion of Continuous Cloud Service Auditing by Third Parties. In: Proceedings of 24th European Conference on Information Systems (ECIS 2016), Istanbul, Turkey, 12-15 June