A survey on security issues of federated identity in the cloud computing

Ghazizadeh, Eghbal; Zamani, Mazdak; Manan, Jamalul-lail Ab; Pashang, Abolghasem

doi:10.1109/cloudcom.2012.6427513

Cited by 37 publications

(17 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Li et al [2011a] propose the design of a hierarchical architecture for cloud computing that employs identity-based cryptography to support both data confidentiality and user authentication. Ghazizadeh et al [2012] analyze security issues that could affect federated identity and single signon in the cloud, and present some models that could be used to counteract identity theft in federated environments. propose the use of Merkle trees [Carminati 2009] to provide authentication for IRIS, an authenticated cloud-based file system.…”

Section: Authenticationmentioning

confidence: 99%

From Security to Assurance in the Cloud

et al. 2015

View full text Add to dashboard Cite

The cloud computing paradigm has become a mainstream solution for the deployment of business processes and applications. In the public cloud vision, infrastructure, platform, and software services are provisioned to tenants (i.e., customers and service providers) on a pay-as-you-go basis. Cloud tenants can use cloud resources at lower prices, and higher performance and flexibility, than traditional on-premises resources, without having to care about infrastructure management. Still, cloud tenants remain concerned with the cloud's level of service and the nonfunctional properties their applications can count on. In the last few years, the research community has been focusing on the nonfunctional aspects of the cloud paradigm, among which cloud security stands out. Several approaches to security have been described and summarized in general surveys on cloud security techniques. The survey in this article focuses on the interface between cloud security and cloud security assurance. First, we provide an overview of the state of the art on cloud security. Then, we introduce the notion of cloud security assurance and analyze its growing impact on cloud security approaches. Finally, we present some recommendations for the development of next-generation cloud security and assurance solutions.

show abstract

Section: Authenticationmentioning

confidence: 99%

From Security to Assurance in the Cloud

et al. 2015

View full text Add to dashboard Cite

show abstract

“…If an attacker could fake or steal these credentials, the cloud system will suffer from spoofing attacks [2]. In MCC, the problem is even severe because mobile devices often lack computing power to execute complex security algorithms.…”

Section: Related Workmentioning

confidence: 99%

Key Based Mutual Authentication (KBMA) Mechanism for Secured Access in MobiCloud Environment

Donald¹,

Arockiam²

2016

MATEC Web of Conferences

View full text Add to dashboard Cite

Abstract. Mobile Cloud Computing (MCC) fuels innovation in MobileComputing and opens new pathways between mobile devices and infrastructures. There are several issues in MCC environment as it integrates various technologies. Among all issues, security lies on the top where many users are not willing to adopt the cloud services. This paper focuses on the authentication. The objective of this paper is to provide a mechanism for authenticating all the entities involved in accessing the cloud services. A mechanism called Key Based Mutual Authentication (KBMA) is proposed which is divided into two processes namely registration and authentication. Registration is a one-time process where the users are registered for accessing the cloud services by giving the desired unique information. Authentication process is carried out mutually to verify the identities of Device and Cloud Service Provider (CSP). Scyther tool is used for analysing the vulnerability in terms of attacks. The result claims show that the proposed mechanism is resilient against various attacks.

show abstract

“…In order to answer these questions, several security based FIM systems have been designed and implemented. But, to the best of our knowledge, none of those systems offer a holistic solution covering self-service, privacy and real-time synchronization features for Cloud computing environments [4]. In addition to this, most of the existing software applications are bundled with proprietary identity management services and authentication mechanisms.…”

Section: Introductionmentioning

confidence: 98%

Secure Identity Management System for Federated Cloud Environment

Habiba¹,

Masood²,

Shibli³

2015

Software Engineering, Artificial Intelligence, Networking and Parallel/Distributed Computing

View full text Add to dashboard Cite

Abstract. Federated Identity Management (FIM) systems are well-known for achieving reliable and effective collaboration among various organizations. Despite numerous benefits, these systems have certain critical weaknesses such as lack of security and privacy while disseminating identity credentials (Personally Identifiable Information (PII)) across multiple federated Cloud environments. In addition to this, FIM systems have limitations in terms of interoperability and lack compliance to international standards, since most of the systems are reliant on proprietary protocols for the exchange of identity information. In this regard, we propose a secure identity management system for federated Cloud environments that not only ensures the secure management of identity credentials, but preserves the privacy of Cloud Service Consumers (CSC) also. Furthermore, implementation of the proposed system involves state-of-the-art international standards (SCIM, SAML, REST and XACML) to ensure secure, quick and easy sharing & management of identity credentials in to, out of and around the Cloud. Further, we have performed rigorous evaluation of the proposed system using standard evaluation tools such as Scyther and JUnit. The results of our evaluation certify that the presented work ensures the desired features and level of security as expected from a secure identity management system for federated Cloud environment.

show abstract

A survey on security issues of federated identity in the cloud computing

Cited by 37 publications

References 3 publications

From Security to Assurance in the Cloud

From Security to Assurance in the Cloud

Key Based Mutual Authentication (KBMA) Mechanism for Secured Access in MobiCloud Environment

Secure Identity Management System for Federated Cloud Environment

Contact Info

Product

Resources

About