the relationships between Cloud providers and customers, by aggregating, integrating and customizing services
in accordance to the customers’ needs. This paper demonstrates how security requirements can be a part of
the Cloud brokering model. We present CloudSurfer, which is a prototype implementation of an independent
Cloud broker that allows the customer to search for services that fulfill a set of security requirements. The
application has been evaluated by representatives from the software industry and academia, and is freely
available for further research.