A Security Evaluation Framework for Cloud Security Auditing