An Effective Technology for Secured Data Auditing for Cloud Computing using Fuzzy Biometric Method

In cloud storage, the most common concerns for users are data integrity, confidentiality and availability. Recently, many data integrity auditing schemes have been proposed, some of which achieved privacy-preserving public auditing, some of which realised data sharing and group dynamic, and some of which supported data dynamic. However, as far as we know, there does not exist a practical auditing scheme which can simultaneously realise all the functions mentioned above; In addition, all the existing schemes adopt the method of computing message authentication code (MAC) by users to achieve the following data integrity auditing, nevertheless, it is a arduous task to compute MACs for these cloud users with constrained computing and storage capabilities. In this paper, we propose a novel privacy-preserving public auditing scheme for shared data in the cloud, which can also support data dynamic operation and group dynamic. First, we bring proxy signature into the existing auditing scheme. The cloud user can delegate the computation of MACs to a cloud computing server, so that the user's burden would be greatly reduced; second, by introducing a Lagrange interpolating polynomial, our scheme realises the identity privacy-preserving in the precondition of almost no addition of any new computation and less storage space, moreover it makes group dynamic simple; third, we make an index-switch table and combine it with the Merkle hash tree to realise the practical and secure dynamic operations of shared data by group users; fourth, in our scheme, the cloud storage server will add its private key in producing the proof information to protect the data privacy and resist the active attack. Theoretical analysis demonstrates our scheme is provably secure.

According to Cisco Global Cloud Index, cloud storage users will store 1.6 Gigabytes data per month by 2019, compared to 992 megabytes data per month in 2014. With this trend, it has been shown that more and more data will reside in cloud storage and it is expected to grow further. As cloud storage is becoming an option for users for keeping their data online, it comes with security concerns for protecting data from threats. This thesis addresses the need to investigate the security factors that will enable efficient security protection for data in cloud storage and the relationships that exist between the different security factors. Consequently, this research has developed a conceptual framework that supports security in cloud storage. The main contribution of this research is the development of a Cloud Storage Security Framework (CSSF) to support an integrative approach to understanding and evaluating security in cloud storage. The framework enables understanding of the makeup of security in cloud storage and measures the understanding of security in cloud storage. Drawing upon established theories and prior research findings, the framework indicates that security in cloud storage can be determined by nine factors: (1) security policies implementation in cloud storage, security measure that relates to (2) protecting the data accessed in cloud storage; (3) modifications of data stored; (4) accessibility of data stored in cloud storage; (5) non-repudiation to the data stored; (6) authenticity of the original data; (7) reliability of the cloud storage services; (8) accountability of service provision; and (9) auditability of the data accessed and stored in cloud storage. An example of CSSF application has been demonstrated through the development of a measuring instrument called Security Rating Score (SecRaS) and through a series of experiments, SecRaS has been validated and used in a research scenario. The instrument consists of several items generated using goal-question-metric approach. These potential items were evaluated by a series of experiments; the security experts assessed using content validity ratio while the security practitioners took part in the validation study. The validation study completed two experiments that look into the correlation analyses and internal reliability. SecRaS instrument was later applied in a research scenario; the validated instrument was distributed and a number of 218 usable responses were received. Using structural equation modelling, the data has revealed a good fit of the measurement analyses and structural model. The key findings were as follow: the relationships between factors were found to have both direct and indirect effects in the result. While establishing the relationship(s) among the factors, the structural model proposes three types of causal relationships in terms of how the security implementation in cloud storage could be affected by the security factors. This thesis presents a detailed discussion of the CSSF development, confirmation, and application in a research scenario. For security managers, CSSF offers a new paradigm on how stakeholders can make cloud storage security implementation successful in some depth. For security practitioners, the CSSF enables deconstruction of the concept of security in cloud storage into smaller, conceptually distinct and manageable factors to guide the design of security in cloud storage. For researchers, the CSSF provides a common framework in which to conceptualise their research and make it easier to see how the security factors fit into the larger picture.

Cloud storage enables users to remotely store their data and benefit of the demand high quality cloud applications without the difficulty of local hardware and software management. Though the benefits are clear, such a service is also reliable to the users’ physical possession of their outsourced data, which inevitably poses new security risks towards the recovery of the data in cloud. In order to address this new problem and further achieve a secure and useful cloud storage service, we propose in this study a flexible distributed storage integrity mechanism, utilizing the homomorphic token and distributed data. The proposed design allows users to check the cloud storage with very lightweight communication and computation cost. The auditing result not only ensures strong cloud storage correctness guarantee, efficiency, but also simultaneously to access data error localization, i.e., the identification of misbehaving server. Considering the cloud data are dynamic in nature, the proposed design future supports secure and efficient dynamic operations on outsourced data, including block modification, update, deletion and append. The proposed scheme is highly efficient and secure against Byzantine failure, malicious data modification attack and even server colluding attacks.

Public auditing for cloud storage is of critical importance as the users relies on semi-trusted cloud storage service for data sharing which does not guarantee/assure the integrity of the data being stored. With public auditing of clouds, users resort to a third party auditor (TPA) who verify and assure the internal consistency/lack of corruption of their data in cloud storage services. Despite the good work previously done by researchers in auditing while preserving privacy, still available mechanisms do not efficiently conceal users' privacy from TPA during sharing of data and yet supporting data and group dynamics. In this paper, we propose privacypreserving auditing scheme that exploits the ring signature to calculate verifications needed to audit data integrity.In this proposed approach, the identities of the user are kept private from public verifier and dynamic groups are supported -that is a new user can be added into the group and an existing group member can be revoked during data sharing.

Cloud computing is an internet based model which allows the user all the "services on demand".The services provided by cloud are infrastructure, software and platform.Cloud Computing has great potential of providing robust computational power to the society at reduced cost.Despite the tremendous benefits, security is the primary obstacle that prevents the wide adoption of this promising computing model, especially for customers when their confidential data are consumed and produced during the computation.Wang proposed enabling public audit ability and data dynamics for storage security in cloud computing which provides data integrity and dynamic operation but cannot assure confidentiality.Here in this scheme we are providing a new method which provide confidentiality and also manage the storage space in cloud server.In this we are providing confidentiality by using cryptographic algorithm and storage space is managed by using complete binary tree by arranging all the files by their size and checking the integrity using TPA(third party auditor).Thus providing integrity, memory management as well as confidentiality in cloud computing.

Using cloud data clients may transfer data from their computer systems to cloud servers. Hence, user will not have any burden of maintenance and also he gets high quality data storage services. Many security issues are concerned with cloud storage. Cloud service providers or storage servers are not completely trustworthy. The user is concerned about the information stored on cloud are in place or not turns. This paper is based on homomorphic hash algorithm. Further this supports dynamic operations such as insert, update, delete and modify at block level, for data dynamics Merkle Hash Tree is used which helps to find the location of each dynamic operation. Third party auditor checks the user's data for correctness and gives the accuracy of the data that is stored in cloud server. The communication and computation overhead are reduced. Deduplication technique is used to check whether the file that user need to store in cloud storage is already exist at cloud server or not. This framework is effective and secure against replace attack launch by malicious server.

In spite of the growing usage of smart mobile devices, the inherent restrictions like resource scarcity, mobility and frequent disconnections makes it difficult to exploit its full potential. Cloud computing simplifies the deployment of large-scale distributed systems and enables advanced computational power with improved storage capabilities. The evolution of Mobile Cloud Computing (MCC) exploits the services of Cloud Service Providers (CSP) by outsourcing the local data storage and computation to the remote servers and thereby relieving the overhead incurred by mobile clients for data storage and processing. In spite of the relief, the clients no longer have control over their outsourced data which demands the purpose of ensuring the data intactness maintained by the Cloud Storage Server (CSS). The resource constrained mobile devices act as a thin client for the cloud server access and hence the computation for ensuring the proof of correctness for secure data storage becomes an overhead with existing solutions. The proposed auditing protocol introduces a trusted third party auditor (TPA) who will be in charge of verifying the correctness of data stored at cloud storage on behalf of the user without the need for retrieving the entire data. The usage of Bilinear pairing and Merkle Hash Trees guarantees Blockless verification by TPA. The verification process in the proposed method reduces the auditing overhead at the mobile device using short signatures. The proposed auditing protocol saves the mobile client's computational resource, thereby achieving cost-effectiveness to gain trust in the Cloud Storage Service.

Provable data transfer from provable data possession and deletion in cloud storage

<span lang="EN-US">Cloud Computing is the ability to improve the utility or train new human resources without investing in new infrastructure, or add capabilities to existence without the latest software licensing. It expanded the capabilities of Information Technology (IT). From the past few years, cloud computing has developed from a good business concept in the best rising sectors of the IT industry. But more information on individuals and companies was put in the cloud, and concerns began to think about how secure the cloud environment was. Despite cloud surrounding structures, enterprise users still do not want to expand their business in the cloud. Security reduces the growth of cloud computing and continues to spread the market with complexity with data privacy and data protection. The security of cloud computing has constantly been an significant aspect of improved quality of service from cloud service providers. Data storage in the cloud has a problem related to data security. However, cloud computing construct many new security challenges which have not been well examine. In order to ensure that the user's data in the cloud is secure, we have proposed an effective mechanism with a distinctive feature of data integrity and privacy. This paper focusing on problems relating to the cloud data storage techniques and security in virtual environment. We recommend a method for providing data storage and security in cloud using public key Cryptosystem, which uses the concept of the modified RSA algorithm to provide better security for the data stored in the cloud. </span>

Data storage is an important application of cloud computing, where clients can remotely store their data into the cloud. By uploading their data into the cloud, clients can be relieved from the burden of local data storage and maintenance. This new paradigm of data storage service also introduces new security challenges. One of these risks that can attack the cloud computing is the integrity of the data stored in the cloud. In order to overcome the threat of integrity of data, the client must be able to use the assistance of a Third Party Auditor (TPA), in such a way that the TPA verifies the integrity of data stored in cloud with the client's public key on the behalf of the client. The existing schemes with single verifier (TPA) may not scale well for this purpose. In this paper, we propose An Efficient Distributed Verification Protocol (EDVP) to verify the integrity of data in a distributed manner with support of multiple verifiers (Multiple TPAs) instead of single Verifier (TPA). Through the extensive security, performance and experimental results, we show that our scheme is more efficient than single verifier based scheme.

The purpose of this research is to empirically examine the effect of third party auditor and quality service to cloud storage and user trust. This research is causal quantitative and use partial least square and path analysis. The research object is corporation users of cloud computing storage in listed corporation in Indonesia Stock Exchange. The sample size is 368 corporations and the results of the research are as follow: third party auditor has positive effect on both cloud storage security and cloud user trust. Quality of service has positive effect on both cloud storage security and cloud user trust. Cloud storage security has positive effect on cloud user trust.

Cloud computing is a promising technology that provides several advantages to services provider, developers and customers with respect to litheness, scalability at a lower cost. With these technical and cost cutting advantages, several data owners outsourced their data to cloud storage where the data is not only stored but also distribute amongst several users. The promising Cloud computing technology provides convenient access to their data, computing resources on pay-as-you-use basis. This paradigm gives an option of remotely storing their data so as to enjoy powerful application, on-demand network access to computing resources. With these benefits user can decrease the load on local data storage space and reduce the maintenance cost. The main challenging task for the user is to protect the data from unauthorized access, data privacy preservation, modification and deletion of original data. Several methods were used to verify the integrity of outsourced data in cloud storage. This paper presents the Data Privacy preservation model using Third Party Auditing (TPA) which helps to audits the integrity of the data without demanding the local copy of data, and any additional burden. Our system model also uses bilinear aggregate signatures so that TPA can handle multiple client auditing requests concurrently. We conduct the Experiment with diverse methods and the compare the performance of the each method. The results show that the proposed method is secure and more efficient as compare to the existing methods in terms of performances.

Cloud storage is now an important development trend in information technology.To ensure the integrity of data storage in cloud storing, researchers have present some proof of storage schemes.In some cases, the ability to check data possession is delegated by data owners.Hence, the delegable provable data possession and proxy provable data possession are proposed.However the schemes are not secure since the proxy or designated verifier stores some delegation information in cloud storage servers.In this paper, we propose PC-DV POS scheme, which can preserve clients' privacy and designate a verifier by the client signed the data blocks.In particular, we utilize group signatures and key exchange to construct homomorphic authenticators, so that only the designated verifier is able to check the integrity of shared data for users without retrieving the entire data, and cannot reveal the identities of signers on all blocks in shared data.

Cloud storage is a mode of online storage in which data are stored on multiple virtual servers usually hosted by third parties. Cloud service providers manage and operate data storage as services. The major concern in cloud storage is the integrity of outsourced data. Many public auditing schemes which authorize the third party auditor (TPA) to check the integrity of outsourced data have been proposed. However, most of them are based on traditional public key cryptosystems. This paper proposes an efficient certificateless public auditing Scheme (CL‐PAS) in cloud storage. In the process of challenge and auditing, CL‐PAS ensures that malicious cloud servers cannot forge auditing evidences to deceive TPA to pass the verification, and prevents curious TPA from recovering original data from auditing evidences. So it strengthens privacy preserving. Security analysis shows that CL‐PAS scheme meets the predetermined security requirements. The simulation and performance analysis results show that, compared with similar schemes, CL‐PAS scheme has the higher efficiency.

Cloud Storage Forensics