R. Accorsi, Business process as a service : Chances for remote auditing, Computer Software and Applications Conference Workshops (COMPSACW), 2011 IEEE 35th Annual, pp.398-403, 2011.

R. Aron, K. Eric, S. Clemons, and . Reddi, Just right outsourcing : understanding and managing risk, Journal of Management Information Systems, vol.22, issue.2, pp.37-55, 2005.

. Edward-b-allen, M. Taghi, Y. Khoshgoftaar, and . Chen, Measuring coupling and cohesion of software modules : an information-theory approach, Software Metrics Symposium, pp.124-134, 2001.

Y. Amanatullah and C. Lim, Toward cloud computing reference architecture : Cloud service management perspective, ICT for Smart Society (ICISS), 2013.

, International Conference on, 2013.

A. S3 and O. At,

M. Al-roomi and S. Al-ebrahim, Cloud computing pricing models : a survey, Sabika Buqrais, and Imtiaz Ahmad, vol.6, pp.93-106, 2013.

U. Arnold, New dimensions of outsourcing : a combination of transaction cost economics and the core competencies concept, European Journal of Purchasing & Supply Management, vol.6, issue.1, pp.23-29, 2000.

S. Australia, Handbook : Risk management guidelines, companion to as, Standards Australia Internal Ltd, vol.4360, 2004.

A. Baouab, Gouvernance et supervision décentralisée des choregraphies inter-organisationnelles, 2013.

M. Bentounsi, S. Benbernou, and M. J. Atallah, Privacypreserving business process outsourcing, Web Services (ICWS, p.2012
URL : https://hal.archives-ouvertes.fr/hal-00727717

, IEEE 19th International Conference on, pp.662-663, 2012.

M. Bentounsi, S. Benbernou, S. Cheikh, M. J. Deme, and . Atallah, Anonyfrag : an anonymization-based approach for privacypreserving bpaas, 1st International Workshop on Cloud Intelligence, 2012.
URL : https://hal.archives-ouvertes.fr/hal-00727735

A. Laszlo, C. J. Belady, and . Evangelisti, System partitioning and its measure, Journal of Systems and Software, vol.2, issue.1, pp.23-29, 1981.

B. Barak, O. Goldreich, R. Impagliazzo, S. Rudich, A. Sahai et al., On the (im) possibility of obfuscating programs, Journal of the ACM (JACM), vol.59, issue.2, p.6, 2012.

E. Bell and L. J. Lapadula, Secure computer systems : Mathematical foundations, DTIC Document, 1973.

S. Blazy and S. Riaud, Measuring the robustness of source program obfuscation. Groupement De Recherche CNRS du Génie de la Programmation et du Logiciel, p.203
URL : https://hal.archives-ouvertes.fr/hal-00927427

, BPMN 2.0 Distilled : The Business Process Modeling Notation, 2013.

A. Balakrishnan, C. Schulze-;-rajkumar, C. Buyya, S. Shin-yeo, J. Venugopal et al., Cloud computing and emerging it platforms : Vision, hype, and reality for delivering computing as the 5th utility, Future Generation computer systems, vol.19, issue.6, pp.599-616, 2005.

J. Cappaert, Code obfuscation techniques for software protection. Katholieke Universiteit Leuven, pp.1-112, 2012.

J. Cardoso, How to measure the control-flow complexity of web processes and workflows. Workflow handbook, pp.199-212, 2005.

R. Conforti, M. L. Massimiliano-de-leoni, . Rosa, . Van-der, and . Aalst, Supporting risk-informed decisions during business process execution, International Conference on Advanced Information Systems Engineering, pp.116-132, 2013.

M. Ceccato, M. Di-penta, P. Falcarin, F. Ricca, M. Torchiano et al., A family of experiments to assess the effectiveness and efficiency of source code obfuscation techniques, Empirical Software Engineering, vol.19, issue.4, pp.1040-1074, 2014.

M. Ceccato, M. Di-penta, J. Nagra, P. Falcarin, F. Ricca et al., The effectiveness of source code obfuscation : an experimental assessment, Program Comprehension, 2009. ICPC'09. IEEE 17th International Conference on, pp.178-187, 2009.

V. Chang, ;. Services, and E. , A case study for business integration as a service, Impact of Technology on Goods, Services, and Business Transactions : Impact of Technology on Goods, Services, and Business Transactions, p.229, 2013.

, The Notorious Nine -Cloud Computing Top Threats in 2013, 2013.

J. Cardoso, J. Mendling, G. Neumann, and . Reijers, A discourse on complexity of process models, International Conference on Business Process Management, pp.117-128, 2006.

A. Caetano, J. Silva, and . Tribolet, Business process decomposition. Enterprise Modeling and Informations Systems Architectures, vol.5, 2010.

C. Collberg, C. Thomborson, and D. Low, A taxonomy of obfuscating transformations, 1997.

K. Djemame, D. Armstrong, J. Guitart, and M. Macias, A risk assessment framework for cloud computing, IEEE Transactions on Cloud Computing, vol.4, issue.3, pp.265-278, 2016.

F. Daniel, F. Casati, D. Vincenzo, E. Andrea, U. Mulo et al., Business compliance governance in serviceoriented architectures, 2009 International Conference on Advanced Information Networking and Applications, pp.113-120, 2009.
URL : https://hal.archives-ouvertes.fr/hal-01437841

J. Deyo, Software as a service (saas), 2008.

M. Dumas, M. L. Rosa, J. Mendling, A. Hajo, and . Reijers, Fundamentals of business process management, vol.1, 2013.

F. Evert, L. Duipmans, L. Ferreira-pires, and . Santos, Towards a bpm cloud architecture with data and activity distribution, Enterprise Distributed Object Computing Conference Workshops, pp.165-171, 2012.

L. Evert-ferdinand-duipmans, L. Ferreira-pires, and . Santos, A transformation-based approach to business process management in the cloud, Journal of grid computing, vol.12, issue.2, pp.191-219, 2014.

H. Eberle, T. Unger, and F. Leymann, Process fragments, OTM Confederated International Conferences" On the Move to Meaningful Internet Systems, pp.398-405, 2009.

, European Network and Information Security Agency. Benefits, risks and recommendations for information security, 2009.

W. Fdhila, M. Dumas, and C. Godart, Optimized decentralization of composite web services, Collaborative Computing : Networking, Applications and Worksharing (CollaborateCom), 2010 6th International Conference on, pp.1-10, 2010.
URL : https://hal.archives-ouvertes.fr/inria-00537925

W. Fdhila, Décentralisation optimisée et synchronisation des procédés métiers inter-organisationnels, 2011.

H. Fill, Using obfuscating transformations for supporting the sharing and analysis of conceptual models, 2012.

W. Fdhila, U. Yildiz, and C. Godart, A flexible approach for automatic process decentralization using dependency tables, Web Services, 2009. ICWS 2009. IEEE International Conference on, pp.847-855, 2009.
URL : https://hal.archives-ouvertes.fr/inria-00433293

I. Foster, Y. Zhao, I. Raicu, and S. Lu, Cloud computing and grid computing 360-degree compared, Grid Computing Environments Workshop, pp.1-10, 2008.

E. Goettelmann, A. Ahmed-nacer, S. Youcef, C. Godart-;-elio-goettelmann, K. Dahman et al., Paving the way towards semi-automatic design-time business process model obfuscation, Web Services (ICWS), 2015 IEEE International Conference on, pp.307-314, 2014.
URL : https://hal.archives-ouvertes.fr/hal-01237681

E. Goettelmann, K. Dahman, B. Gateau, and C. Godart, A broker framework for secure and cost-effective business process deployment on multiple clouds, 26. CAiSE 2014 Forum/Doctoral Consortium, 2014.
URL : https://hal.archives-ouvertes.fr/hal-01095880

F. Gens, It cloud services user survey, Top benefits & challenges. IDC eXchange, 2008.

E. Goettelmann, W. Fdhila, and C. Godart, Partitioning and cloud deployment of composite web services under security constraints, Cloud Engineering (IC2E), 2013 IEEE International Conference on, pp.193-200, 2013.
URL : https://hal.archives-ouvertes.fr/hal-00922186

J. and K. Sim, Agent-based cloud service composition, Applied intelligence, vol.38, issue.3, pp.436-464, 2013.

A. Gater and F. Lemos, Daniela Grigori, and Mokrane Bouzeghoub. S-discovery : A behavioral and quality-based service discovery on the cloud, CLOSER, pp.104-109, 2013.

E. Goettelmann, N. Mayer, and C. Godart, A general approach for a trusted deployment of a business process in clouds, The Fifth International Conference on Management of Emergent Digital EcoSystems, pp.92-99, 2013.
URL : https://hal.archives-ouvertes.fr/hal-00922189

M. Gerbl, R. Mcivor, S. Loane, and P. Humphreys, A multi-theory approach to understanding the business process outsourcing decision, Journal of World Business, vol.50, issue.3, pp.505-518, 2015.

E. Goettelmann, Risk-aware Business Process Modelling and Trusted Deployment in the Cloud, 2015.
URL : https://hal.archives-ouvertes.fr/tel-01751996

G. and G. Docs,

M. H. Halstead, Elements of software science, Elsevier, vol.7, 1977.

S. Henry and D. Kafura, Software structure metrics based on information flow, IEEE transactions on Software Engineering, issue.5, pp.510-518, 1981.

M. Hamdaqa and L. Tahvildari, Cloud computing uncovered : a research landscape, Advances in Computers, vol.86, pp.41-85, 2012.

A. Jøsang, R. Ismail, and C. Boyd, A survey of trust and reputation systems for online service provision. Decision support systems, vol.43, pp.618-644, 2007.

M. Jensen, J. Schwenk, N. Gruschka, and L. L. Iacono, On technical security issues in cloud computing, 2009 IEEE International Conference on Cloud Computing, pp.109-116, 2009.

D. Jamil and H. Zaki, Cloud computing security, International Journal of Engineering Science and Technology, vol.3, issue.4, 2011.

E. George and . Kalb, Counting lines of code, confusions, conclusions, and recommendations, Briefing to the 3rd Annual REVIC User's Group Conference, 1990.

K. L. Ryan, . Ko, S. G. Stephen, E. Lee, and . Lee, Business process management (bpm) standards : a survey, Business Process Management Journal, vol.15, issue.5, pp.744-791, 2009.

J. Kenji-e-kushida, J. Murray, and . Zysman, Cloud computing : from scarcity to abundance, Journal of Industry, Competition and Trade, vol.15, issue.1, pp.5-19, 2015.

K. Shiva-prasad-kasiviswanathan, S. Nissim, A. Raskhodnikova, and . Smith, Analyzing graphs with node differential privacy, Theory of Cryptography, pp.457-476, 2013.

E. Donald and . Knuth, The genesis of attribute grammars, Attribute Grammars and Their Applications, pp.1-12, 1990.

K. L. Ryan and . Ko, A computer scientist's introductory guide to business process management (bpm), Crossroads, vol.15, issue.4, p.4, 2009.

J. Robert, R. Kauffman, and . Sougstad, Value-at-risk in it services contracts, System Sciences, 2007. HICSS 2007. 40th Annual Hawaii International Conference on, pp.63-63, 2007.

. Cd-karthic, V. Sujatha, and . Praveenkumar, A dynamic cloud discovery framework for deploying of scientific computing services over a multicloud infrastructure, Journal of Artificial Intelligence, vol.5, issue.4, p.161, 2012.

C. Linn and S. Debray, Obfuscation of executable code to improve resistance to static disassembly, The 10th ACM conference on Computer and communications security, pp.290-299, 2003.

R. Los, D. Gray, D. Shackleford, and B. Sullivan, , 2012.

W. Labda, N. Mehandjiev, and P. Sampaio, Modeling of privacy-aware business processes in bpmn to protect personal data, The 29th Annual ACM Symposium on Applied Computing, pp.1399-1405, 2014.

T. Lynn, N. O'carroll, J. Mooney, M. Helfert, G. Corcoran et al., Towards a framework for defining and categorising business process-as-a-service (bpaas), 21st International Product Development Management Conference. Citations : Not Avail, 2014.

F. Leymann and D. Roller, Production workflow : concepts and techniques, 2000.

R. Lu and S. Sadiq, A survey of comparative business process modeling approaches, International Conference on Business Information Systems, pp.82-94, 2007.

L. Loh and N. Venkatraman, Determinants of information technology outsourcing : a cross-sectional analysis, Journal of management information systems, vol.9, issue.1, pp.7-24, 1992.

C. Mary, . Lacity, P. Leslie, D. F. Willcocks, and . Feeny, The value of selective it sourcing, Sloan management review, vol.37, issue.3, p.13, 1996.

I. Mccarthy and A. Anagnostou, The impact of outsourcing on the transaction costs and boundaries of manufacturing, International journal of production economics, vol.88, issue.1, pp.61-71, 2004.

M. Madou, B. Anckaert, B. D. Bus, K. De-bosschere, J. Cappaert et al., On the effectiveness of source code transformations for binary obfuscation, The International Conference on Software Engineering Research and Practice (SERP06), pp.527-533, 2006.

N. Mayer, Model-based management of information system security risk, 2009.
URL : https://hal.archives-ouvertes.fr/tel-00402996

J. Thomas and . Mccabe, A complexity measure, IEEE Transactions on software Engineering, issue.4, pp.308-320, 1976.

P. Mell and T. Grance, The nist definition of cloud computing, 2011.

. W. Microsoft and . Azure,

S. Marston, Z. Li, S. Bandyopadhyay, J. Zhang, and A. Ghalsasi, Cloud computing-the business perspective. Decision support systems, vol.51, pp.176-189, 2011.

R. Martí and G. Reinelt, The linear ordering problem : exact and heuristic methods in combinatorial optimization, Springer Science & Business Media, vol.175, 2011.

B. Martens, F. Teuteberg, and M. Gräuler, Design and implementation of a community platform for the evaluation and selection of cloud computing services : a market analysis, ECIS, vol.4, p.50, 2011.

B. Martens, M. Walterbusch, and F. Teuteberg, Costing of cloud computing services : A total cost of ownership approach, System Science (HICSS), 2012 45th Hawaii International Conference on, pp.1563-1572, 2012.

A. A. Nacer, E. Goettelmann, S. Youcef, A. Tari, and C. Godart, Business process design by reusing business process fragments from the cloud, Service-Oriented Computing and Applications (SOCA), pp.193-200, 2015.

A. A. Nacer, E. Goettelmann, S. Youcef, A. Tari, and C. Godart, Obfuscating a business process by splitting its logic with fake fragments for securing a multi-cloud deployment, Services (SERVICES), pp.18-25, 2016.
URL : https://hal.archives-ouvertes.fr/hal-01399380

A. A. Nacer, E. Goettelmann, S. Youcef, A. Tari, and C. Godart, A design-time semi-automatic approach for obfuscating a business process model in a trusted multi-cloud deployment : A design-time approach for bp obfuscation, International Journal of Web Services Research (IJWSR), vol.15, issue.4, pp.61-81, 2018.
URL : https://hal.archives-ouvertes.fr/hal-01888396

A. A. Nacer, C. Godart, S. Youcef, and A. Tari, A metric for evaluating the privacy level of a business process logic in a multi-cloud deployment, IEEE 21st International Enterprise Distributed Object Computing Conference, 2017.
URL : https://hal.archives-ouvertes.fr/hal-01620023

, Unified modelling language (uml) 2.5, 2013.

I. Enrique and . Oviedo, Control flow, data flow and program complexity, Software engineering metrics I, pp.52-65, 1993.

F. Douglas and . Parkhill, Challenge of the computer utility, 1966.

W. Lucas-venezian-povoa, . Lopes-de, L. Souza, A. Ferreira-pires, and . Prado, An approach to the decomposition of business processes for execution in the cloud, Computer Systems and Applications (AICCSA), 2014 IEEE/ACS 11th International Conference on, pp.470-477, 2014.

A. Polyvyanyy, L. García-bañuelos, and M. Dumas, Structuring acyclic process models, International Conference on Business Process Management, pp.276-293, 2010.

A. Polyvyanyy, J. Vanhatalo, and H. Völzer, Simplified computation and generalization of the refined process structure tree, In International Workshop on Web Services and Formal Methods, pp.25-41, 2010.

C. Quinton, D. Romero, and L. Duchien, Automated selection and configuration of cloud environments using software product lines principles, IEEE 7th International Conference on, pp.144-151, 2014.
URL : https://hal.archives-ouvertes.fr/hal-00965836

R. and R. Cloud,

M. Rekik, K. Boukadi, and H. Ben-abdallah, Business process outsourcing to the cloud : What activity to outsource ?, Computer Systems and Applications (AICCSA), 2015 IEEE/ACS 12th International Conference of, pp.1-7, 2015.

M. Rekik, K. Boukadi, and H. Ben-abdallah, A comprehensive framework for business process outsourcing to the cloud, Services Computing (SCC), 2016 IEEE International Conference on, pp.179-186, 2016.

G. Rosinosky, S. Youcef, and F. Charoy, Efficient migration-aware algorithms for elastic bpmaas, International Conference on Business Process Management, pp.147-163, 2017.
URL : https://hal.archives-ouvertes.fr/hal-01501705

. Salesforce and . Salesforce,

S. Savvis and . Symphony,

L. Sun, H. Dong, O. K. Farookh-khadeer-hussain, E. Hussain, and . Chang, Cloud service selection : State-of-the-art and future research directions, Journal of Network and Computer Applications, vol.45, pp.134-150, 2014.

V. Stoitsev and P. Grefen, Business process technology and the cloud : Defining a business process cloud platform, Beta Working Paper Series, vol.393, 2012.

S. Subashini and V. Kavitha, A survey on security issues in service delivery models of cloud computing, Journal of network and computer applications, vol.34, issue.1, pp.1-11, 2011.

M. Sharif, A. Lanzi, J. Giffin, and W. Lee, Automatic reverse engineering of malware emulators, 30th IEEE Symposium on, pp.94-109, 2009.

D. Schumm, F. Leymann, Z. Ma, T. Scheibler, and S. Strauch, Integrating compliance into business processes. Multikonferenz Wirtschaftsinformatik, p.421, 2010.

M. Salama, A. Shawish, A. Zeid, and M. Kouta, Integrated qos utility-based model for cloud computing service provider selection, Computer Software and Applications Conference Workshops (COMPSACW), pp.45-50, 2012.

A. Strunk, Qos-aware service composition : A survey, Web Services (ECOWS), 2010 IEEE 8th European Conference on, pp.67-74, 2010.

J. Shao and Y. Wang, A new measure of software complexity based on cognitive weights, Canadian Journal of Electrical and Computer Engineering, vol.28, issue.2, pp.69-74, 2003.

S. Systemps, The Business Process Model, 2004.

. Wil-mp-van-der, A. Aalst, M. Hofstede, and . Weske, Business process management : A survey, International conference on business process management, pp.1-12, 2003.

M. P. Wil, . Van-der-aalst, J. Boudewijn-f-van-dongen, L. Herbst, G. Maruster et al., Workflow mining : a survey of issues and approaches, Data & knowledge engineering, vol.47, issue.2, pp.237-267, 2003.

J. Viega, Cloud computing and the common man, Computer, vol.42, issue.8, pp.106-108, 2009.

J. Vanhatalo, H. Völzer, and J. Koehler, The refined process structure tree, Data & Knowledge Engineering, vol.68, issue.9, pp.793-818, 2009.

J. Vanhatalo, H. Völzer, and F. Leymann, Faster and more focused control-flow analysis for business process models through sese decomposition, International Conference on Service-Oriented Computing, pp.43-55, 2007.

P. Watson, A multi-level security model for partitioning workflows over federated clouds, Journal of Cloud Computing : Advances, Systems and Applications, vol.1, issue.1, p.15, 2012.

K. Wüllenweber, D. Beimborn, T. Weitzel, and W. König, The impact of process standardization on business process outsourcing success, Information Systems Frontiers, vol.10, issue.2, pp.211-224, 2008.

M. Weske, Business process management : concepts, languages, architectures, 2007.

M. Weske, Business process management architectures, Business Process Management, pp.333-371, 2012.

L. Willcocks, J. Hindle, D. Feeny, and M. Lacity, It and business process outsourcing : The knowledge potential. Information systems management, vol.21, pp.7-15, 2004.

M. R. Woodward, M. A. Hennell, and D. Hedley, A measure of control flow complexity in program text, IEEE Transactions on Software Engineering, issue.1, pp.45-50, 1979.

G. Wroblewski, General method of program code obfuscation (draft), 2002.

X. Xiao, G. Wang, and J. Gehrke, Differential privacy via wavelet transforms, IEEE Transactions on Knowledge and Data Engineering, vol.23, issue.8, pp.1200-1214, 2011.

Q. Zhang, L. Cheng, and R. Boutaba, Cloud computing : state-ofthe-art and research challenges, Journal of internet services and applications, vol.1, issue.1, pp.7-18, 2010.

. Zoho, Zoho Productivity Applications

W. Zeng, Y. Zhao, and J. Zeng, Cloud service and service selection algorithm research, The first ACM/SIGEVO Summit on Genetic and Evolutionary Computation, pp.1045-1048, 2009.