A framework for preserving data security in hybrid cloud environment using trusted multiple cloud service providers

Abstract

Cloud computing is widely accepted nowadays by the industry as well as academic people as a new generation computing paradigm. Cloud computing has become popular because of its characteristic features like on-demand self-service, ubiquitous network access, resource pooling, rapid elasticity, metered service, etc. But, security challenges are still among the biggest obstacles when considering the adoption of cloud services.Most of the cases, it is seen that the merits of the could computing itself are the root causes of the security issues, and hence it is becoming difficult to tackle. Thus, lots of research activities are happening in the area of cloud computing to make cloud a secure place to keep your sensitive or critical data. This paper proposes a framework for preserving data security in a hybrid cloud environment using trusted multiple cloud service providers. A multi-cloud architecture is used to secure the data of the cloud customer, and the framework uses the trust factor for a dynamic and safe selection of the service providers.Index Terms-Cloud, data security, data splitting, hybrid cloud, the trust factor.Brokers can get real-time cloud service performance details, real-time feedback from many cloud users, real time information about the capacity of different cloud service providers, real-time comparison of the ability of different providers who provide same kind of services. Compared to Cloud Auditor, has a clear, complete picture of a cloud computing paradigm. However, as the Cloud Broker is not a certified authority, there is a chance that the broker is biased.

Understanding the challenges and novel architectural models of multi-cloud native applications – a systematic literature review

“…In particular, we present an overview of the body of knowledge found as a result of this review (considering the 88 finally selected primary studies). The primary studies were classified according to the research method used in the study, as defined in Hybrid Cloud (public vs. private) [44][45][46][47][48][49][50][51][52] IoT or physical nodes [53][54][55][56] Different cloud services from different cloud providers [8,17,26,29,31,34,[57][58][59][60][61][62][63][64][65][66][67][68][69][70][71][72][73] Multi-cloud in a broader sense [74][75][76] Federated Cloud Services [17,32,[77][78][79][80][81] Multi-cloud Services Communities [82] opinion pap...…”

“…The second most relevant categorization for multicloud infrastructure focuses on the ownership of the cloud infrastructural services, usually referred as Hybrid Cloud to denotate the differences between public and private resources. In this sense, almost 10% of the studies [44][45][46][47][48][49][50][51][52] used the term multi-cloud to refer to the combination of in-house services, owned by a concrete company (the same as the one deploying the application there) and public services with more than one user (public cloud services). In this respect, [44] refers also to the concept of hybrid cloud, but with a slightly different meaning.…”

“…Moreover, 17% of the papers state that they are based on, or compliant with, existing standards such as OASIS CAMP, OASIS TOSCA or NIST Security control framework. The standards considered by the analysed papers can be divided in two categories,(1) generic purpose standards such as CAMP, TOSCA or CAMEL [45,48,51,72,91] and, (2) security related standards such as security NIST, Oauth, CSA STAR program or SAML/2 [52,60,91,92].…”

“…Some of the ones mentioned in the studies can be applied to multicloud applications but they are not multi cloud or even cloud specific [71,73,95] like ciphertext policy attribute-based encryption. Others can pose specific security challenges related to the multi-cloud nature of the application, like data splitting through trusted cloud services providers [52,68] or secure networking for virtual machines in the cloud [47].…”

“…Loosely coupled [31,32,55,56,63,66,84,85,90,93,94] (Design) Patterns [26,35,47,69,81] Modelling languages [29,40,46,54,64,85,87,97] Cloud federation [39,78,81,82,98] Security by design [44,47,52,68,71,73,80,95,99] Technologies [17, 31, 50-52, 56, 60, 63, 69, 89, 92, 95, 96, 100] Standards [8,17,26,40,45,48 complex challenge to be solved, due to the heterogeneity of the cloud management systems employed by the providers. Thus, multi-provider infrastructure operation under a federation of independent clouds and/or infrastructure components is still a challenge.…”