Optimized Public Auditing and Data Dynamics for Data Storage Security in Cloud Computing

Singh, Anirudha Pratap; Pasupuleti, Syam Kumar

doi:10.1016/j.procs.2016.07.286

Cited by 22 publications

(10 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The authors in [50] focused on the issue of data integrity verification by a third-party auditor for client data that resides on a cloud storage server (CSS). The study suggested a protocol for dynamic data updates using the modified Chameleon Authentication Tree (MCAT).…”

Section: Solutions At Data Levelmentioning

confidence: 99%

Secure Cloud Infrastructure: A Survey on Issues, Current Solutions, and Open Challenges

et al. 2021

View full text Add to dashboard Cite

Cloud computing is currently becoming a well-known buzzword in which business titans, such as Microsoft, Amazon, and Google, among others, are at the forefront in developing and providing sophisticated cloud computing systems to their users in a cost-effective manner. Security is the biggest concern for cloud computing and is a major obstacle to users adopting cloud computing systems. Maintaining the security of cloud computing is important, especially for the infrastructure. Several research works have been conducted in the cloud infrastructure security area; however, some gaps have not been completely addressed, while new challenges continue to arise. This paper presents a comprehensive survey of the security issues at different cloud infrastructure levels (e.g., application, network, host, and data). It investigates the most prominent issues that may affect the cloud computing business model with regard to infrastructure. It further discusses the current solutions proposed in the literature to mitigate the different security issues at each level. To assist in solving the issues, the challenges that are still unsolved are summarized. Based on the exploration of the current challenges, some cloud features such as flexibility, elasticity and the multi-tenancy are found to pose new challenges at each infrastructure level. More specifically, the multi-tenancy is found to have the most impact at all infrastructure levels, as it can lead to several security problems such as unavailability, abuse, data loss and privacy breach. This survey concludes by giving some recommendations for future research.

show abstract

Section: Solutions At Data Levelmentioning

confidence: 99%

Secure Cloud Infrastructure: A Survey on Issues, Current Solutions, and Open Challenges

et al. 2021

View full text Add to dashboard Cite

show abstract

“…Li et al 21 proposed a mechanism name “OPoR,” which outsources and offloads the heavy computation of the tag generation to the cloud audit server and eliminates the involvement of users in the auditing and in the preprocessing phases. The research 22 optimized an existing third‐party auditing protocol and make it resistant to replace, replay‐ and forge attacks launched by malicious insiders at cloud storage server. However, the above work assumes that TPA is honest or semihonest, this is obviously undesirable under different trust models in edge computing scenarios.…”

Section: Related Workmentioning

confidence: 99%

Trusted audit with untrusted auditors: A decentralized data integrity Crowdauditing approach based on blockchain

Chen

Zhou

et al. 2021

Int J of Intelligent Sys

View full text Add to dashboard Cite

Edge computing emerges as an alternative to cloud computing in the scenarios where the end devices require lower latency and faster access speeds. Edge nodes are deployed at the proximity of the end devices to reduce response time. On the other hand, the edge nodes are usually owned by small organizations that have limited operations and maintenance capabilities. Data on the edge may be easily damaged, due to external attacks or internal hardware failures. Therefore, it is essential to verify data integrity in edge computing. However, edge environment requires a different trust model compared with other computing and storage paradigm. Besides, compared with cloud storage, edge storage is decentralized and storage service participants may pose greater internal and external threats. This paper proposes a blockchain‐based intelligent crowdsourcing audit approach (Crowdauditing) to achieve on‐chain and off‐chain credibility of audit results. The model relies on an untrusted auditor committee from the crowd to audit data integrity and uses smart contracts as the core of the intelligent system to ensure the reliability of result submission, the accuracy of the result judgment, and reasonable punishments and rewards. Specifically, an unbiased selection algorithm is proposed to achieve fairness during the auditor committee construction. An innovative two‐stage submission strategy is proposed to ensure that the auditor committee can reach a consensus on the off‐chain audit results. An incentive mechanism is carefully designed to force auditors providing audit services honestly to maximize their own rewards. Moreover, we modeled that as a game of n players, which proves the reliability of the result. Finally, we implement a prototype of Crowdauditing based on smart contracts. The extensive experimental results demonstrate the effectiveness of Crowdauditing.

show abstract

“…Another strategy for the stated security problems has been proposed by A. P. Singh and S. K. Pasupuleti (2016) [19]. They have developed their approach based on two sequential ways of data auditing.…”

Section: Literature Reviewsmentioning

confidence: 99%

A New Hybrid Automated Security Framework to Cloud Storage System

2021

View full text Add to dashboard Cite

The need for cloud storage grows day after day due to its reliable and scalable nature. The storage and maintenance of user data at a remote location are severe issues due to the difficulty of ensuring data privacy and confidentiality. Some security issues within current cloud systems are managed by a cloud third party (CTP), who may turn into an untrustworthy insider part. This paper presents an automated Encryption/Decryption System for Cloud Data Storage (AEDS) based on hybrid cryptography algorithms to improve data security and ensure confidentiality without interference from CTP. Three encryption approaches are implemented to achieve high performance and efficiency: Automated Sequential Cryptography (ASC), Automated Random Cryptography (ARC), and Improved Automated Random Cryptography (IARC) for data blocks. In the IARC approach, we have presented a novel encryption strategy by converting the static S-box in the AES algorithm to a dynamic S-box. Furthermore, the algorithms RSA and Twofish are used to encrypt the generated keys to enhance privacy issues. We have evaluated our approaches with other existing symmetrical key algorithms such as DES, 3DES, and RC2. Although the two proposed ARC and ASC approaches are more complicated, they take less time than DES, DES3, and RC2 in processing the data and obtaining better performance in data throughput and confidentiality. ARC outperformed all of the other algorithms in the comparison. The ARC’s encrypting process has saved time compared with other algorithms, where its encryption time has been recorded as 22.58 s for a 500 MB file size, while the DES, 3DES, and RC2 have completed the encryption process in 44.43, 135.65, and 66.91 s, respectively, for the same file size. Nevertheless, when the file sizes increased to 2.2 GB, the ASC proved its efficiency in completing the encryption process in less time.

show abstract

Optimized Public Auditing and Data Dynamics for Data Storage Security in Cloud Computing

Cited by 22 publications

References 8 publications

Secure Cloud Infrastructure: A Survey on Issues, Current Solutions, and Open Challenges

Secure Cloud Infrastructure: A Survey on Issues, Current Solutions, and Open Challenges

Trusted audit with untrusted auditors: A decentralized data integrity Crowdauditing approach based on blockchain

A New Hybrid Automated Security Framework to Cloud Storage System

Contact Info

Product

Resources

About