Metamodel for Security and Privacy Knowledge in 1 Cloud Service Development 1 2

Requirements for cloud services include security and privacy. Although many security 22 patterns, privacy patterns, and non-pattern-based knowledge have been reported, knowing which 23 pattern or combination of patterns to use in a specific scenario is challenging due to the sheer 24 volume of options and the layered cloud stack. To deal with security and privacy in cloud services, 25 this study proposes the Cloud Security and Privacy Metamodel (CSPM). CSPM uses a consistent 26 approach to classify and support existing security and privacy patterns. In addition, CSPM is used 27 to develop a security and privacy awareness process to develop cloud systems. The effectiveness 28 and practicality of CSPM is demonstrated via several case studies. 29