Data Security in Cloud Computing

Abstract: Encryption is essential in preventing unauthorized access to sensitive data in light of the growing concerns about data security in cloud computing. Homomorphic encryption promises to enable secure calculations on encrypted data without the need for decryption, particularly for cloud-based operations. To evaluate the effectiveness and applicability of several homomorphic encryption algorithms for safe cloud computing, we compare and contrast them in this research paper. Partially homomorphic encryption (PHE), somewhat homomorphic encryption (SHE), and fully homomorphic encryption (FHE) are the three basic homomorphic encryption subtypes that we examine. The implications of this study can aid cloud service providers and organizations in selecting the most appropriate homomorphic encryption scheme based on their specific security requirements and performance considerations. The research contributes to the ongoing efforts to enhance data privacy in cloud computing environments, opening new possibilities for secure data processing in an increasingly connected digital world. The exploration of homomorphic encryption schemes in this study opens new avenues for research and development in the field of cryptographic techniques. As technology continues to evolve, so too must our approaches to safeguarding data. This research serves as a catalyst for further innovations in homomorphic encryption algorithms, enabling even more efficient and robust methods for secure data processing in cloud environments and beyond. The insights derived from this research paper not only empower cloud service providers and organizations to make informed decisions about selecting the most appropriate homomorphic encryption scheme but also contribute to the broader mission of fortifying data privacy and security in cloud computing.

Cloud Computing is a way to deal with fabricate the breaking point or incorporate capacities effectively without placing assets into new system, planning new staff, or approving new programming. They have various potential purposes of intrigue and various attempt applications and data are moving to open or half and half cloud. However, regarding some business-fundamental applications, the affiliations, especially considerable attempts, still wouldn't move them to cloud. The market gauge the Cloud Computing shared is as yet far behind the one expected. From the clients' perspective, Cloud Computing security concerns, especially data security and security confirmation issues, remain the basic inhibitor for gathering of Cloud Computing organizations. In this paper, we present a diagram on data security and security protection issues related with Cloud Computing over all periods of data life cycle. Firstly,, we moreover focus a related works and after that we show unpretentious components of Cloud Computing security issues, and a short time later data security and insurance affirmation issues, and a while later we display some present courses of action in cloud. Finally, we look at future work about data security and security affirmation issues in cloud. Keywords: cloud computing; security deployment; privacy protection infrastructure.

All the organization wants to implement the same security parameters as they are already using with their internal data/resources. It is mandatory to understand and find the data protection challenges before outsourcing the data security in cloud computing. In present research we are discussing about the impact of security in cloud computing including all the challenges associated with it.

International Journal of Computer Sciences and Engineering (A UGC Approved and indexed with DOI, ICI and Approved, DPI Digital Library) is one of the leading and growing open access, peer-reviewed, monthly, and scientific research journal for scientists, engineers, research scholars, and academicians, which gains a foothold in Asia and opens to the world, aims to publish original, theoretical and practical advances in Computer Science,Information Technology, Engineering (Software, Mechanical, Civil, Electronics & Electrical), and all interdisciplinary streams of Computing Sciences. It intends to disseminate original, scientific, theoretical or applied research in the field of Computer Sciences and allied fields. It provides a platform for publishing results and research with a strong empirical component. It aims to bridge the significant gap between research and practice by promoting the publication of original, novel, industry-relevant research.

Cloud computing is the present technology which is gaining greater attentions. Nowadays, among all the technologies that includes the network security, data protections, virtualization security, application integrity and identity management, the cloud is the most essential and key aspect. Among all the above mentioned issues, data protection is one of the most important security element because organizations cannot transfer their data to the remote machines as there is no guarantee of data protection by the cloud service providers. Many techniques are already available to protect the data in cloud. Though there are many number of techniques implemented to have focus on security of data but still some challenges persist. Cloud computing solves not only the computing problems but also caters loads of data with software updates etc. The user will be confident in utilising the cloud sources only if there is an appropriate collaboration between cloud client and cloud service provider. The most popular security techniques include SSL (Secure Socket Layer) Encryption, Algorithms like AES, Blowfish, DES, RSA, Cloud Computing, and Data Security. This paper mainly focus on how to analyse and evaluate the most important security encryption algorithms for data protection in cloud computing. Furthermore, this paper also discusses about some of the new security techniques for data protection which will be recommended in order to have improved security in cloud computing. Keywords: Cloud, Data Protection, Security, Asymmetric Algorithms, Symmetric Algorithm.

Cloud computing is defined as the management and provision of resources, software, applications, and information as services over the internet. Numerous organizations are adopting cloud services because of the economy and technology changes. Over the past year, cloud computing has made life easier for other people or organizations by allowing people to have access to information from anywhere in the world through the internet. However, cloud computing introduces a series of security concerns, which data security is a major concern. Data security is basically linked with any security in the cloud. If the network or infrastructure security is compromised, the possibility there is a possibility of data being affected. Data security has three important principles that are Confidentiality, Integrity, and Availability (CIA) that needs to always be maintained. Understanding the security concerns in cloud computing is an important requirement for those who are planning to move to the cloud solution. Thus, this paper aims to investigate and develop a hybrid data security framework to mitigate data security challenges in the cloud, focusing on legal frameworks such as POPIA and GDPR. A survey was conducted to investigate which techniques are more effective in protecting data and the evaluation ensured that CIA triads are covered. The limitation on the existing techniques is that they address only one principle or two, but not all three at the same time. The best technique among the others will be used integrated when designing the proposed framework in order to address CIA. Having more than one security technique to address data security will improve the security in the cloud and will also bring more business to cloud service providers when customers see the security in data enhanced.

Cloud computing offers storage, infrastructure, computing, networking, databases, platform, software, and analytics services over the Internet. It provides numerous benefits including scalability, cost management, broad access to resources, elasticity, resource pooling. Though cloud computing is mature and widely adopted computing model in software as well as non-software industries, it has several issues regarding security as it provides most of the cloud services over the public infrastructure. Denial of service (DOS), malware injection, insecure APIs, data loss, data breaches, hypervisor vulnerabilities, VM escape are a few major issues in cloud computing. In this paper, authors tried to provide a comprehensive analysis of critical security issues in cloud computing. Furthermore, this paper critically analyses the existing solutions to the various security issues in the cloud computing model.

Cloud computing is the new bending curve in the line of Information Technology and computing paradigm. Cloud computing has simultaneously revolutionized business and government sectors by stretching its arms in every possible field, from not only to Information communication technology to medical advancements to a more diverse agriculture field which was untouched by technology for a decade. Cloud computing enlightens path for another dimension of computing which is expected to rise even more than mobile computing, i.e., Internet of Things (IOT) or internet of everything. As new dimensions are being added up to the cloud domain every day this gives a window to hackers and intruders to breach the doors. The security problem is amplified under cloud computing as it introduces new problem domains. One of the major problem domain identified is data security, where security of user’s data is the utmost priority. Providing privacy to the user and the data stored by the user is to be ensured by the cloud service provider. This paper aims at the security model for cloud computing which ensures the data security and integrity of user’s data stored in the cloud using cryptography.

Background/Objectives: The rapid growth of cloud computing has become a remarkable in many sectors including educational sectors. Cloud computing is the essential tool, which can be used to enhance the accessibility of quality education.In realityusers of cloud computing in Saudi Arabia are facing many challenges due to lacks of regulation compliance, security, privacy, and confidentiality. Research in the field of challenges and barriers in cloud computing is very limited; moreover, there is very little information available in this area especially in legal aspects. Methods: This study focuses on the challenges and barriers, which affects cloud computing in higher education in the Kingdom of Saudi Arabia. The study applied a qualitative and quantitative method throughout the discussion and analysis on current issues and challenges in Cloud Computing in educational sectors in Saudi Arabia. Findings: Majority of the respondents agreed that privacy, security and confidentiality are the issues that need immediate attention of lawmaker. These issues and challenges act as a barrier for adoption of cloud computing in education sector in Saudi Arabia. There is no specific privacy protection law in the Kingdom of Saudi Arabia, only effective laws will avoid the challenges and barriers related to the privacy and security issues in cloud computing. Cloud computing provides an opportunity for the educational institutions to share the data with students, professors, and authorized person. Sharing of information needs strict regulations on data confidentiality, security and how well the privacy of the institution is maintained. Application: Different threats are involved when managing the privacy and sharing of data in the cloud. It is significant to determine the causes of issues and carry out a necessary solution to solve the problem. To ensure an appropriate balance between the number and strength of controls and the risks associated with cloud computing solutions, state agencies and organizations should work together. Keywords: Cloud Computing, Confidentially, Educational Sectors, Privacy, Regulations, Security

Generally, enterprises store data in internal storage and establish firewalls to protect against intruders attempting to access the data. In cloud computing, data is stored in storage provided by service providers. Information privacy protection involves storing data in encrypted form. The cloud system is responsible for both storage and the encryption or decryption of data, allowing system administrators to access encrypted data and decryption keys. This capability poses a risk to information privacy as it enables unauthorized access to information. This survey discusses Data Storage in Cloud Computing, focusing on the concept of storing encryption and decryption services alongside the storage service. Additionally, the survey examines storage system architecture, security challenges, services, and user application systems to provide a comparison of various cloud models. In addition to the fundamental aspects of data storage and encryption, this survey delves into the evolving landscape of cloud computing, addressing the dynamic nature of storage system architectures. Enterprises increasingly rely on cloud service providers for scalable and flexible storage solutions, prompting a critical examination of the security challenges associated with this paradigm shift. The survey examines how storage services in different cloud models affect user applications and privacy. It stresses the importance of understanding cloud providers' services amidst evolving technology and growing threats. The study delves into trends like edge computing and distributed storage, evaluating their impact on cloud storage security. Overall, it aims to provide a comprehensive overview for enterprises and researchers to make informed decisions on data security in Cloud Computing.

Cloud computing is the emerging way of computing that is being used by wide range of users. At present 80 % of workload is on cloud. There are many safety risks in cloud computing, “Cloud Security Alliance” (CSA) listed top 7 security threats as Maltreat and Obnoxious utilization of cloud, Uncertain API, Vicious Infiltrators, Distributed mechanism challenges, Information drop, Unidentified Risk Report and Account, Service and Traffic Hijacking. An IT company spends 42 percent of its funds for the security of cloud and 80 percent of the funds will be bounded to attain the solution to security issues. Researchers have proposed no. of solutions to cloud security. Proposed solutions fall under three primary categories, Cryptographic, data storage and data semantics. In this paper we have reviewed the concerns in cloud computing with some of the subsequent proposed models to tackle the security issues in cloud computing.

<p>Cloud computing has spread widely among different organizations due to its advantages, such as cost reduction, resource pooling, broad network access, and ease of administration. It increases the abilities of physical resources by optimizing shared use. Clients’ valuable items (data and applications) are moved outside of regulatory supervision in a shared environment where many clients are grouped together. However, this process poses security concerns, such as sensitive information theft and personally identifiable data leakage. Many researchers have contributed to reducing the problem of data security in cloud computing by developing a variety of technologies to secure cloud data, including encryption. In this study, a set of encryption algorithms (advance encryption standard (AES), data encryption standard (DES), Blowfish, Rivest-Shamir-Adleman (RSA) encryption, and international data encryption algorithm (IDEA) was compared in terms of security, data encipherment capacity, memory usage, and encipherment time to determine the optimal algorithm for securing cloud information from hackers. Results show that RSA and IDEA are less secure than AES, Blowfish, and DES). The AES algorithm encrypts a huge amount of data, takes the least encipherment time, and is faster than other algorithms, and the Blowfish algorithm requires the least amount of memory space.</p>

Cloud computing that provides elastic computing and storage resource on demand has become increasingly important due to the emergence of “big data”. Cloud computing resources are a natural fit for processing big data streams as they allow big data application to run at a scale which is required for handling its complexities (data volume, variety and velocity). With the data no longer under users’ direct control, data security in cloud computing is becoming one of the most concerns in the adoption of cloud computing resources. In order to improve data reliability and availability, storing multiple replicas along with original datasets is a common strategy for cloud service providers. Public data auditing schemes allow users to verify their outsourced data storage without having to retrieve the whole dataset. However, existing data auditing techniques suffers from efficiency and security problems. First, for dynamic datasets with multiple replicas, the communication overhead for update verifications is very large, because each update requires updating of all replicas, where verification for each update requires O(log n ) communication complexity. Second, existing schemes cannot provide public auditing and authentication of block indices at the same time. Without authentication of block indices, the server can build a valid proof based on data blocks other than the blocks client requested to verify. In order to address these problems, in this paper, we present a novel public auditing scheme named MuR-DPA. The new scheme incorporated a novel authenticated data structure (ADS) based on the Merkle hash tree (MHT), which we call MR-MHT. To support full dynamic data updates and authentication of block indices, we included rank and level values in computation of MHT nodes. In contrast to existing schemes, level values of nodes in MR-MHT are assigned in a top-down order, and all replica blocks for each data block are organized into a same replica sub-tree. Such a configuration allows efficient verification of updates for multiple replicas. Compared to existing integrity verification and public auditing schemes, theoretical analysis and experimental results show that the proposed MuR-DPA scheme can not only incur much less communication overhead for both update verification and integrity verification of cloud datasets with multiple replicas, but also provide enhanced security against dishonest cloud service providers.

Objective: The purpose of this paper is to rectify the aspects that leads the acceptance of cloud based E-learning services and why it is plagued by security issues despite its numerous advantages and find out the possible solutions to the problems. So this study highlights the security threats with cloud based e-learning and the precaution acquired recently on those problems. Method: This paper used both theoretical and empirical studies. Empirical study is done by the information congregated using numerous cloud based e-learning solution vendors websites. On the other hand, theoretical study is made by examining several research articles linked to our theme areas. Based on this analysis it identify different security threats in cloud service delivery model through the object to recommend a solution in the procedure of security measures related to the cloud based e-learning. Projected practice certifies data availability and offers solution to secure essential data from the invaders. Findings: The project edupshot of this study is to highlight the vital security threats and concerns occupied on when executing the cloud computing for e-learning systems. We do attempt to exploit the security concerns that e-learners and the end-users of cloud based e-learning solutions desire to acquire it from the cloud based e-learning solution vendors. This study finds diverse security issues in cloud service by an object to advocate a resolution in the form of security dealings linked to the cloud based e-learning. Traditional E-Learning approaches are merged with cloud computing technology to give enormous benefits to the academic users but it compromises on security facets. This study of E-Learning advocate’s users to acquire the data in the cloud via a secured layer using the internet. Cloud based E-Learning is a way to lessen cost and density of data retrieving, which are handled by third party services. Improvements: The study does not explore negative aspects that may deject acceptance of cloud-based services. However, we have just discussed cloud computing and its service and have presented ways by which the present security issues in cloud computing can be resolved.Keywords: Cloud Service, Data Availability, Measures, Security Risk, Solution, Threats

Most cloud users and officialdoms have a great interest in adoption and use cloud services like cloud storage to store their data on cloud environment. With the speedy growing in cloud computing technology, user's data security and privacy in cloud computing technology is the utmost dangerous issues because data owner stores their sensitive data onto remote cloud storage. However, successful retrieval of confidential data and computation on confidential data is hard to succeed by traditional cryptographic algorithm. Hence, to warrant the cloud security we are using the cryptographic algorithms that supports for computation over encrypted data. In this, Homomorphic cryptographic algorithm is one such technique that has interested homomorphic cryptographic algorithm used to secure user data in cloud server. It performs computation on cipher texts data can be operated directly without affecting the confidentiality of the encryption algorithms. We have established a framework for security of data on a cloud storage by using fully homomorphic cryptographic algorithm. Indeed, In this study, we have evaluated complexity of three homomorphic cryptographic algorithm those are SDC FHE, Paillier and RSA with encryption time, decryption time, throughput and memory usage