Data storage auditing service in cloud computing: challenges, methods and opportunities

Cloud computing is a promising computing model that enables convenient and on-demand network access to a shared pool of configurable computing resources. In cloud computing, data owners host their data on cloud servers and data consumers can access the data from cloud servers. This new paradigm of data storage service also introduces new security challenges, because data owners and data servers have different identities and different business interests. Therefore, an independent auditing service is required to make sure that the data is correctly hosted in the Cloud. However, the existing solutions are not specific to the multimedia data. Moreover copyright protection is not provided.

Generally, enterprises store data in internal storage and establish firewalls to protect against intruders attempting to access the data. In cloud computing, data is stored in storage provided by service providers. Information privacy protection involves storing data in encrypted form. The cloud system is responsible for both storage and the encryption or decryption of data, allowing system administrators to access encrypted data and decryption keys. This capability poses a risk to information privacy as it enables unauthorized access to information. This survey discusses Data Storage in Cloud Computing, focusing on the concept of storing encryption and decryption services alongside the storage service. Additionally, the survey examines storage system architecture, security challenges, services, and user application systems to provide a comparison of various cloud models. In addition to the fundamental aspects of data storage and encryption, this survey delves into the evolving landscape of cloud computing, addressing the dynamic nature of storage system architectures. Enterprises increasingly rely on cloud service providers for scalable and flexible storage solutions, prompting a critical examination of the security challenges associated with this paradigm shift. The survey examines how storage services in different cloud models affect user applications and privacy. It stresses the importance of understanding cloud providers' services amidst evolving technology and growing threats. The study delves into trends like edge computing and distributed storage, evaluating their impact on cloud storage security. Overall, it aims to provide a comprehensive overview for enterprises and researchers to make informed decisions on data security in Cloud Computing.

Cloud computing (CC) services can offer substantial cost-effective global operational and relationship benefits if the cooperation between logistics and CC services are resilient. Potential vulnerabilities to cooperation of CC and logistics service providers can occur with respect to vital factors such as security and trust. Extant studies have demonstrated CC benefits as well as few challenges associated with CC services application. However, no extant study has examined the inter-organisational benefits based on cooperative resilience between CC and logistics service providers in terms of both capability and trust vulnerability factors. This study examines the cooperative resilience of logistics and CC service providers based on innovation diffusion theory within a supply chain risk assessment framework. Using structural equation modelling techniques, we investigate the relationship between the vulnerability factor (trust), capability factor (security) and collaboration benefits (relationship and operational) offered by CC service providers based on 236 Chinese logistics service firms’ perceptions of CC adoption. The results indicate Chinese logistics companies perceive security impediments as a major factor affecting cooperative resilience between logistics service and CC service providers.

Cloud computing is a new model for providing computing services, where computing is delivered as a service over the Internet. Cloud computing is a very popular choice among SMEs because computing services are provided at much lower prices compared to their own IT infrastructure. In the cloud computing model, computing services and data storage are outsourced to cloud service providers. Customers do not have full control over applications and their data. Therefore, an added overhead of security risks comes along, and the security of data becomes the primary concern for cloud customers when considering cloud services. This paper explores various deployment models of cloud computing services and IoT (Internet of Things), figures out associated data security issues with them, and suggests a metric-based solution to assess security provided by cloud services.

At present, Cloud computing is becoming a hot topic in the field of research and applications. It moves the application software and databases to the centralized large data centers, where the management of the data and services may not be fully trustworthy. However,this unique paradigm brings about many new security challenges, which have not been well understood. As such, it has become crucial for an archive service to be capable of providing evidence to demonstrate the integrity of data stored in it. This work studies the problem of ensuring the integrity of data storage in Cloud Computing.

Moving data and applications to the cloud implies shifting their control from cloud consumers to the cloud service provider (CSP) indefinitely. Hence, the security and privacy (Saamp;P) of the consumers' assets becomes an important issue. Assessing and comparing potential cloud computing (CC) services, poses an issue for CC adopters to choose Saamp;P options that are sufficient and robust at the same time. In this paper, we describe CC adopters' Saamp;P concerns. We identify a set of attributes that reflect various aspects of cloud Saamp;P in an attempt to alleviate those concerns. We classify the attributes based on their tangibility and their relevance to Saamp;P threats. Every attribute in our list is represented by a set of considerations (i.e. polar questions) to assess its quality. We present a tool that embodies our set of attributes. We aim to enable consumers to assess and compare CC services, in terms of Saamp;P, so that they can make well-educated choices. CSPs can also make use of these attributes to offer better cloud Saamp;P.

Cloud computing and storage services allow clients to move their data center and applications to centralized large data centers and thus avoid the burden of local data storage and maintenance. However, this poses new challenges related to creating secure and reliable data storage over unreliable service providers. In this study, we address the problem of ensuring the integrity of data storage in cloud computing. In particular, we consider methods for reducing the burden of generating a constant amount of metadata at the client side. By exploiting some good attributes of the bilinear group, we can devise a simple and efficient audit service for public verification of untrusted and outsourced storage, which can be important for achieving widespread deployment of cloud computing. Whereas many prior studies on ensuring remote data integrity did not consider the burden of generating verification metadata at the client side, the objective of this study is to resolve this issue. Moreover, our scheme also supports data dynamics and public verifiability. Extensive security and performance analysis shows that the proposed scheme is highly efficient and provably secure.

The significance of the cloud enables the data owners (DOs) to store data remotely in cloud server (CS). The external and internal attacks on the stored data at CS can deliberately remove data. Furthermore, the CS removes the stored data to make empty location for the user's upcoming new data. However, it is a legal expectation of DOs to know whether their data are correctly stored or altered in CS. In this article, we propose a novel privacy-aware and hash-parity-bits-based public auditing (PA-HPPA) framework to secure full data, left half of the data, and the right half of the data, generated by a DO. DO generates two private key pairs with the assistance of a virtual key and a user ID (IP). The virtual key is the sequence number of DO who is registered and provided by the trusted data manager (TDM) while IP is the sequence number of DO working in an organization. Subsequently, DO blinds the categorized data and generates their signatures and hashes. In addition, DO generates the parity bits using xor and assigns to each hard drive (HD) in CS, which assistants to TDM in public auditing. Second, how to identify the error in the stored data and how to securely recover the error/missed data? Extension to the framework, the novel proposed data error identification and secure data recovery produce tags for installed HDs of CS using truth table and recover the altered/missed data via a authenticator, which is produced using xor function. Third, how to protect a valid user from revocation and, in case a user has revoked on merit basis, then how to securely access the stored data of it? This novel work has proposed three conditions to meet the validity of the valid user from revocation and securely generating the public-private key pairs to access the stored data of the revoked user securely from CS. Fourth, there is an efficient novel proposed dynamic operation scheme to insert, update, or delete the stored data at CS without regenerating the signatures, hashes, and tags for the whole stored data in cloud. The security analysis and the performance evaluation of the proposed solutions are provably efficient and secure with reduced communication costs.

Several trends are opening up the era of cloud computing. It moves the application software and databases to the centralized large data centers, where the management of the data and services may not be fully trustworthy. This work studies the problem of ensuring the integrity of data storage in cloud computing. We use RSAs homomorphic property to construct the protocol of provable data possession. In our protocol, we can aggregate multiple Provable Data possession into one, and reduce the overhead of communication. While prior work on ensuring remote data integrity often lacks the specific implementations, this paper achieves an effective proof of storage protocol. Extensive security and performance analysis show that the proposed scheme is highly efficient and provably secure.

Job scheduling system problem is a core and challenging issue in Cloud Computing. How to use Cloud computing resources efficiently and gain the maximum profits with job scheduling. Job scheduling system is one of the Cloud computing service providers’ ultimate goals. In this paper, firstly, by analysis the differentiated QoS requirements of Cloud computing resources users’ jobs, we build the corresponding non-pre-emptive priority M/G/1 queuing model for the jobs.Then, considering Cloud computing service providers’ destination which is to gain the maximum profits by offering Cloud computing resources, we built the system cost function for this queuing model. After that, based on the queuing model and system cost function, considering the goals of both the Cloud Computing service users and providers, we gave the corresponding strategy and algorithm to get the approximate optimistic value of service for each job in the corresponding no-pre-emptive priority M/G/1 queuing model. Finally, we also provide corresponding simulations and numeral results.Analysis and number results show that our approach for job scheduling system can not only guarantee the QoS requirements of the users’ jobs, but also can make the maximum profits for the Cloud computing service providers.While the economic case for cloud computing is compelling, the security challenges it poses are equally striking. In this work we strive to frame the full space of cloud-computing security issues, attempting to separate justified concerns from possible over-reactions. We examine contemporary and historical perspectives from industry, academia, government, and “black hats”. We argue that few cloud computing security issues are fundamentally new or fundamentally intractable; often what appears “new” is so only relative to “traditional”computing of the past several years. Looking back further to the time-sharing era, many of these problems already received attention. On the other hand, we argue that two facets are to some degree new and fundamental to cloud computing: the complexities of multi-party trust considerations, and the ensuing need for mutual audit ability.

Data storage in cloud computing leads to several security issues such as data privacy, integrity, and authentication. Efficiency for the user to upload and download the data in a secure way plays an important role, as users are nowadays performing these actions on all types of devices, including e.g. smartphones. Signing and encryption of the sensitive data before hosting can solve potential security breaches. In this paper, we propose a highly efficient identity based signcryption scheme and add a proxy re-encryption feature to it. This allows users to store signed and encrypted data in the cloud, where the cloud server provider is able to check the authentication but not to derive the content of the message. When another user requests data access, the originator of the message first checks the authorization and then provides the cloud server an encryption key to re-encrypt the stored data, enabling the requesting party to decrypt the resulting ciphertext and to validate the signature. The proposed scheme is based on elliptic curve operations and does not use compute intensive pairing operations, like previous proposals.

Cloud computing and big data: Technologies and applications

Providing security to the stored data on the cloud is one of the important challenges in cloud computing. Encrypted data which is stored on the cloud may be viewed or modified by the cloud service provider. To overcome this problem many techniques have been developed but, those cannot guarantee accurately about the security of the stored data. These modifications of the data by the service provider or by others should also be known to the data owner. For such purpose, data tagging technique can be used to audit the data. Auditing is done by using Third Party Auditor (TPA). TPA stores data information of the data owner and challenges to the cloud server, depending upon the data owner request. With the help of such mechanism, TPA can convince both, data owner and cloud server.

Background: The integration of mobile computing and cloud computing has the potential to revolutionize healthcare delivery by providing ubiquitous access to resources and enabling new service development and delivery models. While cloud computing has been extensively studied in fields such as genomics and molecular medicine, its application in healthcare beyond these domains remains relatively unexplored. This scoping review aims to identify the current state and emerging research topics in cloud computing in healthcare outside of the traditional “OMICS context.” Methods: A comprehensive search was conducted in MEDLINE in July 2013 and December 2014 using keywords related to cloud computing and cloud-based services. The identified journal and conference articles were independently categorized and summarized by two researchers, who subsequently consolidated their findings. Results: A total of 102 publications were analyzed, revealing six main topics in cloud computing in healthcare: telemedicine/teleconsultation, medical imaging, public health and patient self-management, hospital management and information systems, therapy, and secondary use of data. Common features utilized in these applications included broad network access for data sharing and access, as well as rapid elasticity to meet computing demands. While some articles highlighted the cost-effectiveness of pay-per-use cloud services, only 14 articles reported successful implementations, with many publications focusing on conceptual or prototypic projects. Additionally, several articles equated cloud computing with internet-/web-based data sharing, failing to illustrate the unique benefits of the cloud computing paradigm. Conclusions: Although the integration of mobile computing and cloud computing in healthcare is gaining attention, successful implementations in the field are still limited. Many papers use the term “cloud” interchangeably with “virtual machines” or “web-based” without clearly demonstrating the advantages of the cloud paradigm. Data safety and security concerns associated with involving external cloud partners remain significant barriers to adoption in the healthcare domain. As of now, cloud computing is primarily favored for its individual features, such as elasticity, pay-per-use models, and broad network access, rather than as a comprehensive cloud computing paradigm.

Cloud computing is associate inclusive new approach on however computing services square measure made and utilized. Cloud computing is associate accomplishment of assorted styles of services that has attracted several users in today’s state of affairs. The foremost enticing service of cloud computing is information outsourcing, because of this the information homeowners will host any size of information on the cloud server and users will access the information from cloud server once needed. A dynamic outsourced auditing theme that cannot solely defend against any dishonest entity and collision, however conjointly support verifiable dynamic updates to outsourced information. The new epitome of information outsourcing conjointly faces the new security challenges. However, users might not totally trust the cloud service suppliers (CSPs) as a result of typically they may be dishonest. It's tough to work out whether or not the CSPs meet the customer’s expectations for information security. Therefore, to with success maintain the integrity of cloud information, several auditing schemes are projected. Some existing integrity ways will solely serve for statically archived information and a few auditing techniques is used for the dynamically updated information. The analyzed numerous existing information integrity auditing schemes together with their consequences.