Design and Implementation of a Privacy Preserved Off-Premises Cloud Storage

Abstract

Despite several cost-effective and flexible characteristics of cloud computing, some clients are reluctant to adopt this paradigm due to emerging security and privacy concerns. Organization such as Healthcare and Payment Card Industry where confidentiality of information is a vital act, are not assertive to trust the security techniques and privacy policies offered by cloud service providers. Malicious attackers have violated the cloud storages to steal, view, manipulate and tamper client's data. Attacks on cloud storages are extremely challenging to detect and mitigate. In order to formulate privacy preserved cloud storage, in this research paper, we propose an improved technique that consists of five contributions such as Resilient role-based access control mechanism, Partial homomorphic cryptography, metadata generation and sound steganography, Efficient third-party auditing service, Data backup and recovery process. We implemented these components using Java Enterprise Edition with Glassfish Server. Finally we evaluated our proposed technique by penetration testing and the results showed that client's data is intact and protected from malicious attackers.

The Extent of Smartphones Users to Adopt the Use of Cloud Storage

“…Nevertheless all these advantages and benefits of the cloud, this promising model still faces several challenges. Firstly, ensuring the security and the privacy of the provided service in the IT environment is equal to those in home (Brohi et al, 2014;Ion et al, 2011). Secondly, the reluctance of adopting the cloud raises concerns penetrating the physical location of the data center and the applied data management law.…”

Enhancing Mobile Cloud Computing Security Using Steganography

“…S. Brohi, M. Bamiah, S. Chuprat and J. Manan provide a solution for data privacy issue [26]. In some organization such as healthcare and payment card industry, have a user's personal data which is very important factor, these organizations can store data on cloud but malicious attackers may steal, view or manipulate client's data.…”

“…In some organization such as healthcare and payment card industry, have a user's personal data which is very important factor, these organizations can store data on cloud but malicious attackers may steal, view or manipulate client's data. To provide privacy to cloud data storage, authors propose an improved technique which consists of five contributions [26]: resilient role-based access control mechanism; partial homomorphic cryptography; efficient thirdparty auditing service; data backup and recovery process.…”

“…Using Partial Homomorphic Cryptography, data inside the file will be homomorphic-ally encrypted during the uploading process and stored on the cloud in the encrypted format [26]. Whenever this file is required, server needs client's private key to decrypt the selected file.…”

“…Whenever this file is required, server needs client's private key to decrypt the selected file. This technique not allows the client to process the data on cloud while it is in the encrypted format [26]. To change the encrypted data, client needs to decrypt the data prior to processing.…”