A Design of Authority Management Protocol for Secure Storage Access Control in Cloud Environment

Abstract

With the enhancements in existing major industries, cloud computing-based converging services have been created, as well as value-added industries. A variety of converging services are now provided, from personalized services up to industrial services. In Korea, they have become the driving force behind existing industries throughout the whole economy, but mainly in finance, mobile systems, social computing, and home services, based on cloud services. However, not only denial of service (DOS) and distributed DOS (DDOS) attacks have occurred, but also attack techniques targeting core data in storage servers. Even security threats that are hardly detected, such as multiple attacks on a certain target, APT, and backdoor penetration have also occurred. To supplement defenses against these, in this article, a protocol for authority management is designed to provide users with safe storage services. This protocol was studied in cases of integration between a cloud environment and big data-based technology, security threats, and their requirements. Also studied were amalgamation examples and their requirements in technology-based cloud environments and big data. With the protocol suggested, based on this, security was analyzed for attack techniques that occur in the existing cloud environment, as well as big data-based techniques, in order to find improvements in session key development of approximately 55%.

Enhancement of Security Monitoring Model for a Safe Internet of Things (IoT) Environment

“…Devices connected to IoT network should be able to detect and respond to hacking attacks in the IoT service environment, which consists of gateways with different security functions. Monitoring and management technology of the network is needed to prevent distributed denial-of-service attacks (DDoS) by object bots infected with malicious codes [6]. IoT Platform Security: IoT service also needs to provide mutual authentication and access control between components (services and devices, users), and privacy (data, location, ID) protection.…”