Hybrid Trust Framework for Loss of Control in Cloud Computing

The Cloud Computing (CC) is an Internet-based technology which offers a shared pool of highly available, virtualized, dynamically scalable, and configurable computing resources (e.g., networks, servers, computing power, storage, applications, data, services, etc.). In the CC, the authentication as well as trust and reputation of the cloud users and service provider is a critical issue for the security of the cloud. Lots of articles previously present different trust models, but unfortunately, these trust models are not suitable for all cases as the trust is a non-measurable and subjective parameter that differs person to person. The trust involves many multi-dimensional factors such as evidence, reputation, expectations, feedback, history, risk, motivation, session behaviours, and so on. To addresses the above-mentioned issues, the paper present a novel multi-dimensional trust and reputation calculation model for the cloud computing, in which we integrate multiple trust factors that increase the novelty of the model. Additionally, we dynamically assign a weight for each trust and reputation factor using the Weighted Moving Average and Ordered Weighted Averaging (WMA-OWA) combination algorithm. The proposed model overcome the issues of the previous existing models. The detail presentation and analysis of the model shows that the model is appropriate and accurate for trust calculation in the cloud.

Cloud computing has emerged as a new computing paradigm, with provisioning model generally consisting of cloud service providers (CSPs), network service providers (NSPs), and end users. The associated economics has opened up a new research area; and with the expansion of the cloud computing market, the relationship between CSPs and NSPs, is changing profoundly. In addition to providing the default network services, traditional NSPs, in attempt to compete with CSPs, have started offering cloud services to end users. Though much progress has been made toward addressing competitions among CSPs themselves or among NSPs themselves, few studies have focused on the competition between CSPs and NSPs. In this paper, we investigate the problem of insufficient studies on the competition between CSPs and NSPs by presenting a new economic model to characterize the competition between CSPs and NSPs, and by conducting thorough theoretical analysis as well as numeric experiments to validate the proposed model. We believe, based on results, that the proposed economic model is general and feasible, and thus is applicable to modeling the competition among service providers in cloud computing market.

Online service is used to be as Pay-Per-Use in Cloud computing. Service user need not be in a long time contract with cloud service providers. Service level agreements (SLAs) are understandings marked between a cloud service providers and others, for example, a service user, intermediary operator, or observing operators. Since cloud computing is an ongoing technology giving numerous services to basic business applications and adaptable systems to manage online agreements are significant. SLA maintains the quality-of-service to the cloud user. If service provider fails to maintain the required service SLA is considered to be SLA violated. The main aim is to minimize the SLA violations for maintain the QoS of their cloud users. In this research article, a toolbox is proposed to help the procedure of exchanging of a SLA with the service providers that will enable the cloud client in indicating service quality demands and an algorithm as well as Negotiation model is also proposed to negotiate the request with the service providers to produce a better agreement between service provider and cloud service consumer. Subsequently, the discussed framework can reduce SLA violations as well as negotiation disappointments and have expanded cost-adequacy. Moreover, the suggested SLA toolkit is additionally productive to clients so clients can secure a sensible value repayment for diminished QoS or conceding time. This research shows the assurance level in the cloud service providers can be kept up by as yet conveying the services with no interruption from the client's perspective

Cloud computing is currently the most hyped and popular paradigm in the domain of distributed computing. Multiple vendors are providing infrastructure, platform, and software-related cloud products or solutions, and the number of such vendors is growing rapidly. But the reality is that there is very little in the form of standards in general and interoperability standards in particular. This leads to a challenging situation for cloud service consumers as they need to use solutions provided by multiple cloud vendors in order to fulfill their business requirements, and the lack of standardization leads to lack of interoperability among the solutions provided by varied vendors. Service brokers act as intermediaries between the cloud service providers and consumers. The role of service brokers becomes critical in situations that need integration among multiple systems as they bridge the interoperability gaps among multiple cloud solutions and thus compensate for the lack of standards. They do so by acting as agents adding value on behalf of the service consumers. The usage of such cloud brokers also helps to future-proof the solution as service brokers add a layer of indirection, thus enabling loose coupling among the cloud service consumers and providers. The aim of this chapter is to review the role of cloud service brokers in cloud computing. The review includes consolidation of the definitions and characteristics of cloud service brokers, review of the current brokerage solutions, and interfacing requirements. Also presented are a high-level cloud service broker functional architecture, criteria for selection of a cloud service broker, future trends and review of benefits, and challenges of using cloud service brokers.

Small and medium enterprise systems need to be preserved which is a necessity for our country as the growth is at the grass roots levels. Cloud computing can be a solution to help preserve the small and medium enterprises by promoting their services through the web as they can avoid huge infrastructure costs. However, most of the enterprise practitioners are not technology savvy, and it will be a daunting task to choose the best select service provider from the vast number of cloud service providers present. Hence, in this paper a comprehensive three-pronged technique which will facilitate the easy selection of cloud service providers is proposed. An interval valued fuzzy soft sets algorithm is used to rank the cloud service providers based on the user ratings of the cloud service providers. The information regarding the cloud service providers has been collected to create ontology to match the service providers with user requirements. This suite of tools can be used by the enterprise owners to select the best cloud service provider for their requirements with minimum IT knowledge.

Background: Cloud computing provides access to a large scale of resources. Access control is the indispensable requirement for protecting cloud resource. A cloud service provider is responsible for enforcing access control and they normally rely upon conventional access control mechanisms. Methods: These access control policies, consider the access control primitives in separation which may lead to abuse of access control. These aforesaid problems motivated our research to center around the provision of access control by considering the association among the three access control primitives namely the user making access request, resource upon which access is requested and operation performed by the user on the resource. Hence Ontology Centric Access Control (OCAC) is being proposed in this paper. Findings: This OCAC circulates authorization rules among the primitives of access control say subject, object and action by reducing the various associations among the associations among the access control elements; it is observed that there is less chance for security violation. Ontology is used since it reduces the times of agreement while exchanging the authorization policies across the security domains. For reducing the number of statements and rules in policy base, subsumption property is used. This reduces the space and time complexity. Applications/Improvements: We are applying our work to protect bank data as banks are embracing clouds to store huge data by cutting their IT costs.Keywords: Access Control, Ontology, Cloud Computing, User Ontology, Resource Ontology, Activity Ontology Introduction

Cloud computing is a new concept that refers to a pool of virtual computers resources. Dynamic and scalable internet-based development which is often presented as a service has turned it into a very interesting and significant topic. The service can be a physical machine, virtual machine, software and so on. This study has investigated the problem of building up confidence in cloud environments. To this end, it has designed a model which makes it possible for the users, based on their requirements, to compare a variety of cloud server providers and make their own choice of service provider. The proposed framework enjoys the features of continual availability of trust management service, allocating concessions to cloud service providers, of course, depending on the type of service rendered, utilizing filtering to stop improper storage of ideas, having access to continual service for storing service providers’ information and of allowing transactions to unfamiliar service providers due to risk assessment, and finally storing users’ data in the cloud based on user-defined encoded algorithm. The hopes are that the designed model owing to the above mentioned characteristics can succeed in building trust between users and cloud service providers.

Social networking and growing popularity of cloud services have made everyone to communicate each other in an easiest way. File sharing and distribution are the frequently used services provided by cloud service providers, although these facilities reduce cost of data sharing but at the same time data security and access control is the major problem. Many renowned service providers have faced the challenges to secure data and provide better access control, and we know once the data is leaked we cannot recover the data loss. Thus in order to ensure better security we need for focus on the two major problems, and those are access control and encryption policy. Cipher text policy attribute based encryption is the most effective solution for access control in real time scenarios where owner can actually decide the access rights for the end-user, but it comes with key escrow problem. We are proposing our modified escrow-free key issuing protocol to solve the problem of key escrow and our Modified Attribute Based Encryption scheme to achieve all security requirements to get a robust and secure system. Further we evaluate our model on the basis of results and lastly we conclude the paper.

Enhancement of Security in Cloud Maas and JUJU Using Foxiproxy

Dynamics of service selection and provider pricing game in heterogeneous cloud market

The IT Industry and the wider media are abuzz with the phrase “cloud computing” and most of us have no idea what this latest terminology means. This paper starts by addressing the question – “what is cloud computing, and provides an understanding of the technology?” Cloud computing is related to technologies that has been around for ages, however, what can be done differently with the same technology when integrated with Internet is cloud computing.Individuals who might be considering cloud computing services for personal use will also benefit by the information provided. Web sites like Flickr, FaceBook, YouTube and others are used to store and share personal photos, music and videos for free. Easy as: 1). Register, 2). Upload, 3). Share. Free and easy, there has to be a downside, and there is awareness regarding this.There is information regarding cloud computing for businesses! Businesses, who wish to get on the “flight to the clouds” like their peers to keep their heads above the “cloud” and competition. With cloud service providers, businesses can tap into the IT services that they need, when they need, for as long as they need; without investing in any IT infrastructure. The result is a far more agile and cost-effective IT services and this paper looks at how and why.After looking at the good of cloud computing, the bad, and the ugly is revealed. Not all our experiences on the Internet have been totally positive. A range of security and trust issues exist. Individuals and businesses ask is “how secured are their information once it is with the cloud service providers?” There is analysis on the ownership of data and information stored with the cloud service providers and taxonomy of data that you post on social networking web sites.Finally, anecdotes about cloud computing that support our endeavour to compute in the cloud. Cloud computing is not a hype, it is a reality. Cloud computing is not a fad, it is here to stay. The question is no longer “will cloud computing happen?” but “how you are going to exploit this technology?”Keywordscloud computingvirtual computingcluster computingdistributed computingpervasive computing

Cloud computing is recently everyone uses increasing tendency in distributed and parallel computing environment changes. Cloud is an Internet. It works the largest group of interconnected individual desktop computers or network servers; these are used public cloud or private cloud or hybrid. It’s an active implementation by IT industry resource and remote provisioning scalable and measured documents and decentralized its resources. It is different security issues facing cloud environmental. Cloud computing consists of different services providing. One of the Software as a Service (SaaS) has on many business orientated application. It is shared software and resources and information are available on demand device access in public it allows cost and complexity of service providers to access and operational costs anytime and anywhere uses provide cloud services. Another service is a IaaS is provides protect security customer’s knowledge, functions also secured. Other models Platform as a Service (PaaS) clouds. Security of PaaS clouds forms multitenant access control. Its privacy protected together the service provides and user security. problems., security and threats.

Providing resources to different users or applications is fundamental to cloud computing. This is a challenging problem as a cloud service provider may have insufficient resources to satisfy all user requests. Furthermore, allocating available resources optimally to different applications is also challenging. Resource sharing among different cloud service providers can improve resource availability and resource utilization as certain cloud service providers may have free resources available that can be “rented” by other service providers. However, different cloud service providers can have different objectives or utilities. Therefore, there is a need for a framework that can share and allocate resources in an efficient and effective way, while taking into account the objectives of various service providers that results in a multi-objective optimization problem. In this paper, we present a Cooperative Game Theory (CGT) based framework for resource sharing and allocation among different service providers with varying objectives that form a coalition. We show that the resource sharing problem can be modeled as an N–player canonical cooperative game with non-transferable utility (NTU) and prove that the game is convex for monotonic non-decreasing utilities. We propose an $\mathcal{O}\left( N \right)$ algorithm that provides an allocation from the core, hence guaranteeing Pareto optimality. We evaluate the performance of our proposed resource sharing framework in a number of simulation settings and show that our proposed framework improves user satisfaction and utility of service providers.

Cloud Computing provides higher level services and shared pools of configurable resources with minimal management effort over the internet. Cloud Computing achieves coherence and economic of scale by means of shared resources. The growth of cloud computing depends on the high availability of low cost computers, storage devices and networks as well as hardware virtualization and utility computing. Service Level Agreement (SLA) is a service commitment tool between a cloud service provider and a cloud customer. Using SLA in cloud computing, reduce the chances of disappointing the cloud customer and manage the expectation between the service provider and the customer. The challenge is, it is very difficult to handle all request by the cloud providers at a time during peak hours and to keep up SLA. So when there is an uneven request arrival pattern, the cloud resources may either be underutilized or over-utilized. In order to balance the load, the load balancer plays the major role in cloud computing. The load balancing algorithm equalizes the workload and computing resources in a cloud computing environment. It allows an organization to manage their workload demands by allocating resources among multiple servers and thus it minimizes the response time, minimize the waiting time, maximize the throughput time, maximize the resource utilization and minimize the communication delays of the server by meeting the SLA. The major goal of this study is to review both the existing static and dynamic load balancing algorithms proposed till now and to design and implement a Load balancer that uses a Meta Heuristics approach – Ant Colony Optimization technique to perform balancing the load so that the SLA is met evenly without any issues. Each of the load balancing algorithms is compared with other algorithms theoretically and experimentally one of it is tested with the proposed system using AWS Cloud PaaS (Platform as a Service).

Utility based cloud services can efficiently provide various supportive services to different service providers. Trust negotiations with federated identity management are vital for preserving privacy in open systems such as distributed collaborative systems. However, due to the large amounts of server based communications involved in trust negotiations scalability issues prove to be less cumbersome when offloaded on to the cloud as a utility service. In this view, we propose trust based federated identity management as a cloud based utility service. The main component of this model is the trust establishment between the cloud service provider and the identity providers. We propose novel trust metrics based on the potential vulnerability to be attacked, the available security enforcements and a novel cost metric based on policy dependencies to rank the cooperativeness of identity providers. Practical use of these trust metrics is demonstrated by analyses using simulated data sets, attack history data: published by MIT Lincoln laboratory, real-life attacks and vulnerabilities extracted from Common Vulnerabilities and Exposures (CVE) repository and fuzzy rule based evaluations. The results of the evaluations imply the significance of the proposed trust model to support cloud based utility services to ensure reliable trust negotiations using federated identity management.