A Security Framework to Protect Data in Cloud Storage

<span lang="EN-US">Cloud Computing is the ability to improve the utility or train new human resources without investing in new infrastructure, or add capabilities to existence without the latest software licensing. It expanded the capabilities of Information Technology (IT). From the past few years, cloud computing has developed from a good business concept in the best rising sectors of the IT industry. But more information on individuals and companies was put in the cloud, and concerns began to think about how secure the cloud environment was. Despite cloud surrounding structures, enterprise users still do not want to expand their business in the cloud. Security reduces the growth of cloud computing and continues to spread the market with complexity with data privacy and data protection. The security of cloud computing has constantly been an significant aspect of improved quality of service from cloud service providers. Data storage in the cloud has a problem related to data security. However, cloud computing construct many new security challenges which have not been well examine. In order to ensure that the user's data in the cloud is secure, we have proposed an effective mechanism with a distinctive feature of data integrity and privacy. This paper focusing on problems relating to the cloud data storage techniques and security in virtual environment. We recommend a method for providing data storage and security in cloud using public key Cryptosystem, which uses the concept of the modified RSA algorithm to provide better security for the data stored in the cloud. </span>

The demand for cloud computing is increasing rapidly because of the advantages it provides to the customers like, pay as you use, self-serving, elastic, sharing of resources, ease of use, and accessibility. Due to the increase in the usage of the technology, there exists a high chance of compromising the security of the data being stored on the cloud. The major hindrance in the usage of the technology is the security concerns which accompany it. This increases the demand for a robust security mechanism to protect the data on the cloud. So as to overcome this drawback of cloud computing, encrypting the data to be stored on the cloud is one of the solutions. As part of this paper, a security mechanism to improve the security of data in cloud storage is suggested. The security mechanism used is inspired by the bio-inspired genetic algorithm. The inspiration behind the proposed security model is an amalgamation of genetic algorithm and attribute based encryption. As per the methodology proposed the data need to be encrypted before being stored on the cloud. This way the cloud service provider is unaware of the data being stored and even if the data is compromised to some third party, there is no information leakage.

Modern technological advances have given rise to the popularity and success of cloud in organizations and industries because it provides data storage facility and computing services at minimal cost. Data security is one of the important requirements for outsourced data in a cloud storage environment. It also brings new security vulnerabilities for assuring the data confidentiality, data integrity and data access control. Data security of a cloud system depends heavily on the cloud service provider, data owner and cloud users. So, there needs to be some methodology to monitor security vulnerabilities and providing data security in cloud environment. Now a day’s providing data security in cloud storage is one of the most critical tasks. For the past few years many works have been done to assure data security but they are failed in providing data security such as information leakage, secret-key management, cloud-user authentication, breach of data confidentiality, because of collusion attack and lots of computational activities (because of large number of secret keys).In this paper, we used threshold cryptography technique for providing data security in cloud storage system. Proposed approach addresses the data security issues in cloud system more efficiently. In this Threshold cryptography technique data owner create users in groups based on place or location, project, and department, data owner allocates single secret key to each group of users for decryption of data and every users in the group shares parts or pieces of the secret key. Proposed methodology also uses data access control list to control the data access. Proposed approach provides data security more efficiently, it also increases the performance of the system and also it minimizes the number of secret keys.

With the rapid adoption of cloud computing across industries, securing cloud storage has become a paramount concern for organizations that rely on cloud-based systems to manage sensitive data.Traditional security approaches often struggle with the complex and evolving nature of cyber threats, leading to vulnerabilities that malicious actors can exploit.In response to these challenges, this paper proposes a hybrid approach that integrates machine learning and blockchain technologies to create a robust, secure cloud storage solution.The suggested system employs machine learning algorithms to identify potential threats and assess anomalies in real-time.By constantly monitoring cloud storage environments, these models can spot and predict potential security issues, enabling proactive measures to reduce risks.At the same time, blockchain technology is applied to maintain data integrity, ensure transparency, and provide decentralized access control.The immutable nature of blockchain records provides a tamper-proof mechanism for storing access logs and transaction histories, enhancing the overall trustworthiness of the cloud storage system.This hybrid approach addresses key security challenges by combining the strengths of machine learning and blockchain.Machine learning's capacity to adapt and learn from emerging threats works hand in hand with blockchain's secure and transparent approach to data management.By integrating these technologies, the system not only protects against unauthorized access and data breaches but also improves the scalability and efficiency of cloud operations.Extensive testing and evaluation of the proposed framework demonstrate significant improvements in threat detection accuracy, data integrity assurance, and access control over traditional security methods.The results suggest that this hybrid approach is a viable solution for enhancing cloud storage security in various applications, ranging from enterprise data management to IoT ecosystems.This study advances cloud security technologies by providing a scalable, robust, and future-ready solution for protecting cloud environment.

In cloud storage the data clients can remotely store their data and use on-demand high- quality applications. Data outsourcing users are reassured from the trouble of data storage and maintenance when users put their data in huge size on the cloud, the data integrity protection is a challenging one which enabling public audit for cloud data storage security. Users can ask an external inspection of third party to check the integrity of the out sourced data. However, in such a scheme, the malicious cloud might still forge valid authenticators later than the key-revelation time period if it obtains the current secret key of Data Client. In this paper, propose a prototype named Robust Key Revelation of public auditing for secure cloud storage, in which the security of cloud storage auditing not only earlier than but also later than the key revelation can be preserved. Formalized the definition and the security model of this new kind of cloud storage auditing and design a concrete scheme. In this proposed prototype, the key revelation in one-time period doesn’t affect the security of cloud storage auditing in other time periods. The accurate security proof and the experimental results demonstrate that this proposed prototype achieves desirable security and efficiency with the time intervals. Keywords: Secure Cloud Storage, Robust Key Revelation, Security, Data Client, and Public Auditing.

With the development and application of cloud computing, cloud storage is becoming more and more popular with many organizations, but traditional principal-minor structure for cloud storage is at risk of single point of failure. Moreover, it has brought safety risk. Cloud storage security has become the key problem of restricting the development of cloud computing. The paper has a deep research of cloud storage structure and cloud storage security, proposes a entity authentication protocol for P2P cloud storage based on ternary Huffman Merkle hash tree (HuffMHT).This method using the concept of ternary HuffMHT can obtain an effective safe strategy. At the same time, symmetrical key algorithm and public key algorithm are just combined to reduce the authentication delay effectively and increase the network lifetime and enhances the security of the networks. Moreover, signatures of knowledge is used in this paper, which notes number of hash is reduced, the power which notes consume is debased, the network load is decreased. The performance of the system is discussed, and the encryption method has high efficiency and high security.

The new development trends including Internet of Things (IoT), smart city, enterprises digital transformation and world's digital economy are at the top of the tide. The continuous growth of data storage pressure drives the rapid development of the entire storage market on account of massive data generated. By providing data storage and management, cloud storage system becomes an indispensable part of the new era. Currently, the governments, enterprises and individual users are actively migrating their data to the cloud. Such a huge amount of data can create magnanimous wealth. However, this increases the possible risk, for instance, unauthorized access, data leakage, sensitive information disclosure and privacy disclosure. Although there are some studies on data security and privacy protection, there is still a lack of systematic surveys on the subject in cloud storage system. In this paper, we make a comprehensive review of the literatures on data security and privacy issues, data encryption technology, and applicable countermeasures in cloud storage system. Specifically, we first make an overview of cloud storage, including definition, classification, architecture and applications. Secondly, we give a detailed analysis on challenges and requirements of data security and privacy protection in cloud storage system. Thirdly, data encryption technologies and protection methods are summarized. Finally, we discuss several open research topics of data security for cloud storage.

Cloud computing provides a scalable platform for large amount of data and processes that work on various applications and services by means of on-demand service. The storage services offered by clouds have become a new profit growth by providing a comparable cheaper, scalable, location-independent platform for managing users’ data. The client uses the cloud storage and enjoys the high end applications and services from a shared group of configurable computing resources using cloud services. It reduces the difficulty of local data storage and maintenance. But it gives severe security issues toward users’ outsourced data. Data Redundancy promotes the data reliability in Cloud Storage. At the same time, it increases storage space, Bandwidth and Security threats due to some server vulnerability. Data Deduplication helps to improve storage utilization. Backup is also less which means less Hardware and Backup media. But it has lots of security issues. Data reliability is a very risky issue in a Deduplication storage system because there is single copy for each file stored in the server which is shared by all the data owners. If such a shared file/chunk was missing, large amount of data becomes unreachable. The main aim of this work is to implement Deduplication System without sacrificing Security in cloud storage. It combines both Deduplication and convergent key cryptography with reduced overhead.

Increasing the utilization of internet technology gave birth to the new challenges in the protection of privacy and personal data, especially with the increasing collection practices, the utilization and dissemination of one's personal data. Regulatory instruments and failed to become one of the trigger mechanism of the weak protection of privacy and personal data in particular in the use of cloud storage technology. Cloud storage is a technology which uses the internet and a central server that much to keep or manage user data. Cloud storage allows users to use the application without the install so that personal files can be accessed anywhere and at any time through internet access. This technology enables efficiency by concentrating storage, data processing and memory. However, on the other hand, cloud storage has raised new legal issues, namely how the personal data of users of cloud storage are protected from a variety of disclosure and distribution by cloud storage service providers to third parties.

The Cloud computing technology is a concept of providing online multiple resources in the scalable and reliable method. The user will access cloud service as per their requirement of computing level. There is no capital expenditure involved in computing resources for cloud user. The users have to pay as per their storage, network and service usage. The cloud computing have some highlighted issues like compliance, cross border data storage issues, multi-tenant and down time issues. The most important issues are related to storage of data in cloud. Data confidentiality, data integrity, data authentication and regulations on data protection are major problems that affect user’s business. This paper discusses about encryption and decryption data security issues in cloud and its safety measures and comes out with a novel research work of cloud data security model.

With the idea of new developing technologies and the rapid change in our technical environment, there is a need for smarter, more efficient technology to keep up with the needs of today's world. Thus, the idea of smart cities has come into being. The purpose of this chapter is to promote the idea of building a smart city and providing a framework for future development of the same. We are moving towards a more futuristic world where everything is connected and done over the internet, which will create more network dependency. The problem with the concept of smart cities is the need for better technologies to improve the system of data transfer to address the problem of trust in the system, as massive amounts of people's private data is at stake with bad actors trying to hack the system to gain access to it. There is also the problem of the massive amounts of data produced in smart cities, so there is a need to provide a framework to efficiently store all the data. These problems can be solved with the help of technologies such as blockchain and cloud computing. Cloud computing can be seen as a way of sharing resources offering compute, storage, databases, and network services that can be used on a larger scale. Cloud computing stores massive amounts of data, it can also be used to share and transfer data between networks in a cloud, it is cost-effective, and you can also retrieve lost data or backup data when needed. Despite cloud computing being so great, it also has its own drawbacks. The problem of security in cloud storage is ever-increasing; since cloud storage, centralized systems have been a major target for hackers and data breaches, and the data in the cloud can be tampered with and accessed by unauthorized users. If data is being transferred through the cloud it can be intercepted during transmission because of the problem of encryption. These problems can be solved as well as the system being improved and made faster with the help of blockchain. Blockchain is a database or ledger that is shared across a network. The ledger is encrypted so that only people who are authorized can access the data. Blockchain will decentralize the data stored, which will improve the security of the data immensely. If a hacker targets a single block in a node, it will not have much effect and will continue to function. Block chain works by breaking the data into smaller chunks, and the chunks are distributed in a way that even if the network is down the data will still be available. While a file is being shared it is broken into smaller pieces and sent in a way that the file transfer is quicker. The files are encrypted using a cryptographic hash table and each individual shard or part of the file is also encrypted, making the security even tighter. With the help of blockchain, the storage of files will become much cheaper and more secure. A framework is provided to manage and secure the data acquired from IoT devices through encryption using Advanced Encryption Standard (AES) algorithm and storing the data in a private or public cloud depending on the data; and then decrypting the data and sending it to the users who requested the data or for further analysis. This chapter provides a framework for a smart city storage and security model and can be used as a prototype model for future development in the field.

Security of cloud storage has drawn more and more concerns. In the searchable encryption, many previous solutions can let people retrieve the documents containing single keyword or conjunctive keywords by storing encrypted documents with data indexes. However, searching documents with a phrase or consecutive keywords is still a remained open problem. In this paper, using the relative positions, we propose an efficient scheme LPSSE with symmetric searchable encryption that can support encrypted phrase searches in cloud storage. Our scheme is based on non-adaptive security definition by R. Curtmola and with lower costs of transmission and storage than existing systems. Furthermore, we combine some components of currently efficient search engines and our functions to complete a prototype. The experiment results also show that our scheme LPSSE is available and efficient.

Physical location of data in cloud storage is an increasingly urgent problem. In a short time, it has evolved from the concern of a few regulated businesses to an important consideration for many cloud storage users. One of the characteristics of cloud storage is fluid transfer of data both within and among the data centres of a cloud provider. However, this has weakened the guarantees with respect to control over data replicas, protection of data in transit and physical location of data. This paper addresses the lack of reliable solutions for data placement control in cloud storage systems. We analyse the currently available solutions and identify their shortcomings. Furthermore, we describe a high-level architecture for a trusted, geolocation-based mechanism for data placement control in distributed cloud storage systems, which are the basis of an on-going work to define the detailed protocol and a prototype of such a solution. This mechanism aims to provide granular control over the capabilities of tenants to access data placed on geographically dispersed storage units comprising the cloud storage.

Using cloud data clients may transfer data from their computer systems to cloud servers. Hence, user will not have any burden of maintenance and also he gets high quality data storage services. Many security issues are concerned with cloud storage. Cloud service providers or storage servers are not completely trustworthy. The user is concerned about the information stored on cloud are in place or not turns. This paper is based on homomorphic hash algorithm. Further this supports dynamic operations such as insert, update, delete and modify at block level, for data dynamics Merkle Hash Tree is used which helps to find the location of each dynamic operation. Third party auditor checks the user's data for correctness and gives the accuracy of the data that is stored in cloud server. The communication and computation overhead are reduced. Deduplication technique is used to check whether the file that user need to store in cloud storage is already exist at cloud server or not. This framework is effective and secure against replace attack launch by malicious server.

The purpose of this research is to empirically examine the effect of third party auditor and quality service to cloud storage and user trust. This research is causal quantitative and use partial least square and path analysis. The research object is corporation users of cloud computing storage in listed corporation in Indonesia Stock Exchange. The sample size is 368 corporations and the results of the research are as follow: third party auditor has positive effect on both cloud storage security and cloud user trust. Quality of service has positive effect on both cloud storage security and cloud user trust. Cloud storage security has positive effect on cloud user trust.