Secure inter cloud data migration

Khalil, Issa; Hababeh, Ismail; Khreishah, Abdallah

doi:10.1109/iacs.2016.7476087

Cited by 10 publications

(5 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This framework has been proposed by [23] [28], is built on intra-Hadoop security protocol (HDFS), that offers faster response and better security for migrating large size data files. This protocol due to its reduced networking and processing overheads has improved the performance for inter-cloud data migration.…”

Section: Inter-cloud Data Security Approaches and Frameworkmentioning

confidence: 99%

Inter-Cloud Data Security Framework, Compliance And Trust

Akhtar

Rauf

Amjad

et al. 2022

Preprint

View full text Add to dashboard Cite

Prospects of cloud computing as a technology which optimizes resources, reduces complexity and provides cost effective solutions to its consumers is well established. Future of cloud is ‘cloud of clouds’ where cloud service providers (CSPs) collaborate with each other to provide ever scalable solutions to their customers. However, one most restricting factor towards use of cloud by its consumers is their concerns about data security. Most sensitive to any organization is its data, which thus necessitates a trustworthy framework which could give confidence to these organizations to put their sensitive data on cloud. This paper, therefore, proposed a data security framework which is based on data security controls, driven against the possible data related threats emerging from various inter-cloud use cases. It is a very systematic derivation of data security controls, consolidated as a data security framework. Further in this study, is a proposed mechanism, which can enable CSPs to view compliance to data security controls and overall trustworthiness of other CSPs; thus, enabling them to decide level of interaction that they might feel appropriate to undertake depending upon their data security commitments to their consumers. A Data Security Compliance Monitor service is proposed which measures the compliance to data security framework. This service is also connected with Data Trust as a Service, which measures the trustworthiness of a cloud based on its Total Compliance Value, Users’ Feedback Rating, SLA Rating, Cloud Security Auditor Rating and Incidents History Value. CSPs who subscribe to Cloud Trust as a Service would be able to view Trustworthiness of other CSPs, yet they would be bound to provide access to the service to measure theirs as well. This new approach to data security in inter-cloud is a mix of data security controls, their measure of compliance and based on this, a service, which recommends how much trust can be placed on a CSP for handling data. The proposed solution thus promotes use of inter-cloud for data related requirements.

show abstract

Section: Inter-cloud Data Security Approaches and Frameworkmentioning

confidence: 99%

Inter-Cloud Data Security Framework, Compliance And Trust

Akhtar

Rauf

Amjad

et al. 2022

Preprint

View full text Add to dashboard Cite

show abstract

“…With regards to cloud security, [5] enumerated and discussed twelve top cloud computing threats, [1] presented nine data security challenges affecting cloud computing and their solutions, [8] carried out a comprehensive literature review of seventeen categories of cloud security issues and six categories of proposed security models to address these issues, while [11] discussed security issues in inter-cloud migrations and proposed a new model to facilitate and ensure much more secure and efficient inter-cloud migrations.…”

Section: Related Workmentioning

confidence: 99%

“…In the late nineties and early part of this century, most of the IT infrastructure involved in ecommerce were hosted on-premise, the emergence of public cloud computing is changing the hosting arrangement. Cloud computing provides much more flexibility, lower ongoing costs, enhances scalability and elasticity, improves agility, and faster time-to-market [7], however, there are concerns about maintaining security and compliance in public cloud environments such as but not limited to unauthorized access to cloud instances, account hijacking, shared technology vulnerabilities, denial of service, user credentials compromise, data corruption and compromise, and compromise of Application Programming Interfaces (APIs) keys [5], [11].…”

Section: Introductionmentioning

confidence: 99%

Cybersecurity Threat Modelling: A Case Study of An Ecommerce Platform Migration to the Public Cloud

Ola

Egho-Promise²

2020

EJECE

View full text Add to dashboard Cite

The emergence of ecommerce almost three decades ago has completely transformed the approach to purchasing goods and services across various countries in the world. Almost every country in the globe, now have some form of ecommerce operations, this has further been enhanced by the stay at home COVID-19 induced lockdowns. The value and volume of transactions has also increased in transactions. However, there has been security concerns impacting ecommerce operations, which has in part, led to increasing adoption of hosting ecommerce systems in the public cloud. Threat modelling offer mechanisms to enhance the security of information technology (IT) systems. In this paper, we apply different threat modelling techniques to decompose the migration of an on-premise hosted ecommerce system to the public cloud and also evaluate these threat modelling techniques.

show abstract

“…The authors also developed a prototype to illustrate the feasibility of their technique based on HDFS. Other techniques for migrating data securely among different cloud storage can be found in [101][102][103].…”

Section: Mitigation Techniques For Protecting Data At Restmentioning

confidence: 99%

A Study on Security and Privacy Guidelines, Countermeasures, Threats: IoT Data at Rest Perspective

et al. 2019

View full text Add to dashboard Cite

The Internet of Things (IoT) makes our lives much easier, more valuable, and less stressful due to the development of many applications around us including smart cities, smart cars, and smart grids, offering endless services and solutions. Protecting IoT data of such applications at rest either on the objects or in the cloud is an indispensable requirement for achieving a symmetry in the handling and protection of the IoT, as we do with data created by persons and applications. This is because unauthorised access to such data may lead to harmful consequences such as linkage attacks, loss of privacy, and data manipulation. Such undesired implications may jeopardise the existence of IoT applications if protection measures are not taken, and they stem from two main factors. One is that IoT objects have limited capabilities in terms of memory capacity, battery life, and computational power that hamper the direct implementation of conventional Internet security solutions without some modifications (e.g., traditional symmetric algorithms). Another factor is the absence of widely accepted IoT security and privacy guidelines for IoT data at rest and their appropriate countermeasures, which would help IoT stakeholders (e.g., developers, manufacturers) to develop secure IoT systems and therefore enhance IoT security and privacy by design. Toward this end, we first briefly describe the main IoT security goals and identify IoT stakeholders. Moreover, we briefly discuss the most well-known data protection frameworks (e.g., General Data Protection Regulation (GDPR), Health Insurance Portability (HIPAA)). Second, we highlight potential attacks and threats against data at rest and show their violated security goals (e.g., confidentiality and integrity). Third, we review a list of protection measures by which our proposed guidelines can be accomplished. Fourth, we propose a framework of security and privacy guidelines for IoT data at rest that can be utilised to enhance IoT security and privacy by design and establish a symmetry with the protection of user-created data. Our framework also presents the link between the suggested guidelines, mitigation techniques, and attacks. Moreover, we state those IoT stakeholders (e.g., manufacturers, developers) who will benefit most from these guidelines. Finally, we suggest several open issues requiring further investigation in the future, and we also discuss the limitations of our suggested framework.

show abstract

Secure inter cloud data migration

Cited by 10 publications

References 13 publications

Inter-Cloud Data Security Framework, Compliance And Trust

Inter-Cloud Data Security Framework, Compliance And Trust

Cybersecurity Threat Modelling: A Case Study of An Ecommerce Platform Migration to the Public Cloud

A Study on Security and Privacy Guidelines, Countermeasures, Threats: IoT Data at Rest Perspective

Contact Info

Product

Resources

About