Survey on Cloud Auditing by Using Integrity Checking Algorithm and Key Validation Mechanism

Providing security to the stored data on the cloud is one of the important challenges in cloud computing. Encrypted data which is stored on the cloud may be viewed or modified by the cloud service provider. To overcome this problem many techniques have been developed but, those cannot guarantee accurately about the security of the stored data. These modifications of the data by the service provider or by others should also be known to the data owner. For such purpose, data tagging technique can be used to audit the data. Auditing is done by using Third Party Auditor (TPA). TPA stores data information of the data owner and challenges to the cloud server, depending upon the data owner request. With the help of such mechanism, TPA can convince both, data owner and cloud server.

Continuous Monitoring and Audit Methodology for Medication Procurement

Cryptanalysis of an integrity checking scheme for cloud data sharing

Efficient integrity verification of replicated data in cloud computing system

With the rapid development of cloud advancement, a data security challenge has emerged. In this paper, a technique based on elliptical cryptography and cuckoo search algorithm is proposed. With this technique, data owners securely store their data files in the cloud server. Initially the user sends a file storage request to store a file in a cloud server provider (CSP). The input file is checked whether it is sensitive or non-sensitive by the user. If the file is sensitive, then it would be split and stored in different virtual machines (VMs), and if the file is non-sensitive, then it would be assigned in a single VM. This approach was used for the first time as per the survey. To add further security, the sensitive data retrieval needs an encryption process that is supported by the proposed algorithm. If the data owner stores the sensitive data to cloud server, the data owner's document is encrypted by the double encryption technique. Here RSA and optimal elliptic curve cryptography (OECC) algorithm is used to encrypt the document with high security. The authors have used cuckoo search algorithm to identify the optimal key in ECC. This paper has proposed a novel cryptography approach for delivering mass distributed storage by which user's original data cannot be directly reached by cloud operators. Hence, this research has proved that the proposed work will give better securable data storage solving the security issues.

Data Portability: Key to Cloud Portability and Interoperability

Cloud storage provides great benefits and advantages like reduction in cost, increased flexibility, elasticity and the efficient use of resources. With these great advantages, there are concerns and problem for cloud users. Some obstacles in using cloud computing services are because of its distributed and untransparent nature. That's why users have no control over their data and information and are not sure of whether or not to trust cloud providers. Therefore, the objective of this research is to examine the influence of customer and provider characteristics on cloud service outcome, impact of Trust on cloud service outcome, and to examine if Trust mediate the relationship of customer characteristics and provider’s characteristics with cloud service outcome. In order to achieve the objectives of this research, the analyses of measurement model, factor analysis, assessment of structure model and regression analysis has been conducted. The Findings of this study shows that the existing threats in cloud service is one of the reason why users are not trusting cloud service providers. These threats which are privacy and security cause unwillingness to use cloud services. This study also found that Trust plays an enormous role for cloud service users and providers because it increases usage, willingness to use among customers, and reputation of cloud service providers. It also found that Outcome is really low if there is no trust in these services. This study will help cloud service providers/developers to know the reasons why some people and organizations are not willing to use their services.

Cloud computing has empowered the individual user by providing seemingly unlimited storage space and availability and accessibility of data anytime and anywhere. Cloud service providers are able to maximize data storage space by incorporating data deduplication into cloud storage. Although data deduplication removes data redundancy and data replication, it also introduces major data privacy and security issues for the user. In this paper, a new privacy-preserving framework that addresses this issue is proposed. Our framework uses an efficient deduplication algorithm to divide a given file into smaller units. These units are then encrypted by the user using the combination of a secure hash function and a block encryption algorithm. An index tree of hash values of these units is also generated and encrypted using an asymmetric search encryption scheme by the user. This index tree will enable the cloud service provider to search through the index and return the requested units. We will show that our proposed framework will allow cloud service and storage providers to employ data deduplication techniques without giving them access to either the users' plaintexts or the users' decryption keys.

Cloud computing is a promising computing model that enables convenient and on-demand network access to a shared pool of configurable computing resources. In cloud computing, data owners host their data on cloud servers and data consumers can access the data from cloud servers. This new paradigm of data storage service also introduces new security challenges, because data owners and data servers have different identities and different business interests. Therefore, an independent auditing service is required to make sure that the data is correctly hosted in the Cloud. However, the existing solutions are not specific to the multimedia data. Moreover copyright protection is not provided.

<p>The development of cloud storage is indispensable for today’s Internet information technology. The superiority of cloud storage is that the ownership of the storage medium and the ownership of the stored data are divided and held by two parties with respective interests - cloud server providers and data users. However, the transmission, storage and utilization of data constantly caused the violation of users’ rights and interests. Data integrity as a countermeasure has been paid growing attention to by researchers. Traditional data integrity protection schemes are based on the cloud server-client architecture, which requires high computational overhead and communication. To address this scenario, this paper proposes an improved data integrity verification scheme that enables local users to perform rapid and efficient data integrity verification of data stored on cloud servers, reduces the volume of communication data during the verification process, and effectively prevents the loss or tampering of data stored in the cloud server.</p> <p> </p>

Cloud storage service is a prominent application for recent years. Several famous cloud service providers (CSPs) offer some free volume to users and provide the file synchronization as a convenient function. However, whether the files stored at a CSP are secure or not is a main concern for users. However, it is reported that some famous CSPs lack sound security protection, like no password verification or the missing of stored files. Therefore, how to ensure the security strength of CSPs is an important issue. Nevertheless, most of current CSPs did not provide convictive security mechanism to beef up their security. For example, most of CSPs only claim that they will encrypt the stored files in their storage servers, but the encryption key are picked by the CSPs themselves. In this paper, a practical third-party auditor (TPA) prototype for cloud storage service is proposed to strengthen the properties of confidentiality, integrity, and availability. Moreover, the TPA cannot realize the content of the stored file during verification. Our scheme also provides a useful function to measure the failure time of the CSP.

Cloud computing is the next phase in the Internet's evolution, providing the means through which computing power, computing infrastructure, applications, business processes can be delivered to businesses and individual as a service wherever and whenever they need. Businesses who use cloud service providers (CSP) tend to have service level agreements (SLA) that act as contract and define the level of expected service from the CSP, including availability, performance and security. Recent research suggests the use of third party auditors (TPA) as a mean to monitor CSPs. This paper shows how CSP may deceit the SLA to reduce their cost and become more competitive, while avoiding detection by TPAs. The paper presents a crowdsourced TPA model to monitor the CSPs and consequently detect any deception.

Cloud computing is a promising computing model that enables convenient and on-demand network access to a shared pool of configurable computing resources. The first offered cloud service is moving data into the cloud: data owners let cloud service providers host their data on cloud servers and data consumers can access the data from the cloud servers. This new paradigm of data storage service also introduces new security challenges, because data owners and data servers have different identities and different business interests. Therefore, an independent auditing service is required to make sure that the data is correctly hosted in the Cloud. In this paper, we investigate this kind of problem and give an extensive survey of storage auditing methods in the literature. First, we give a set of requirements of the auditing protocol for data storage in cloud computing. Then, we introduce some existing auditing schemes and analyze them in terms of security and performance. Finally, some challenging issues are introduced in the design of efficient auditing protocol for data storage in cloud computing.

Cloud storage is the decisive service for the organization, hospitals etc., for storing huge amount of data within their budget. But, Cloud Service Providers (CSPs) are facing the major problem of duplicate and redundant data being accumulated by Data Owners (DO) in the cloud storages. Deduplication is one of the major technique to solve the above problem but faces the major drawback in the form of security flaws. Secure deduplication is a very promising solution proposed by the researchers for addressing this issue. In this paper, problems like revocation of DOs, brute force attack and duplicate faking attack are addressed as part of secure deduplication. The proposed approach is having two protocols, namely, Proof of Identity (PoI) and Proof of Data Integrity (PoDI) which solves the above-mentioned problems. The proposed approach improves the efficiency of secure deduplication, enhances data privacy and addresses Data Owner (DO) revocation problem.

Using cloud data clients may transfer data from their computer systems to cloud servers. Hence, user will not have any burden of maintenance and also he gets high quality data storage services. Many security issues are concerned with cloud storage. Cloud service providers or storage servers are not completely trustworthy. The user is concerned about the information stored on cloud are in place or not turns. This paper is based on homomorphic hash algorithm. Further this supports dynamic operations such as insert, update, delete and modify at block level, for data dynamics Merkle Hash Tree is used which helps to find the location of each dynamic operation. Third party auditor checks the user's data for correctness and gives the accuracy of the data that is stored in cloud server. The communication and computation overhead are reduced. Deduplication technique is used to check whether the file that user need to store in cloud storage is already exist at cloud server or not. This framework is effective and secure against replace attack launch by malicious server.