Exploring a New Security Framework for Cloud Storage Using Capabilities

Abstract

Abstract-We are seeing the deployment of new types of networks such as sensor networks for environmental and infrastructural monitoring, social networks such as facebook, and e-Health networks for patient monitoring. These networks are producing large amounts of data that need to be stored, processed and analysed. Cloud technology is being used to meet these challenges. However, a key issue is how to provide security for data stored in the Cloud. This paper addresses this issue in two ways. It first proposes a new security framework for Cloud security which deals with all the major system entities. Secondly, it introduces a Capability ID system based on modified IPv6 addressing which can be used to implement a security framework for Cloud storage. The paper then shows how these techniques are being used to build an e-Health system for patient monitoring.

Using Goal-Question-Metric (GQM) Approach to Assess Security in Cloud Storage

“…Several frameworks have addressed cloud security in general (Brock and Goscinski 2010;Firesmith 2004;Takabi et al 2010;Zissis and Lekkas 2012), and cloud storage in particular (Mapp et al 2014). Researchers have also applied security components as specific objectives.…”

“…A systems integrity approach will review the architecture of a system and its implementation. A system designed and maintained with important aspects, which include contingency planning for power failures and disaster recovery, is also part of a system integrity (Firesmith 2004;Mapp et al 2014). …”

“…To create a digital signature, a hash is created across the data. A hash is sometimes referred to as a message that ensures the data is coming from an authentic source (Mapp et al 2014). When ownership of a digital signature secret key is bound to a specific user, it demonstrates that the data was sent by a valid user.…”

“…Mapp et al (2014) suggested a security framework using capabilities that are required to provide the operational reliability and flexibility needed in cloud environments. The proposed functions are developed into mechanisms using a capability-based approach.…”

“…These industry-accepted standards, guidelines and best practice are reviewed and mapped against the security requirements discussed in the previous section (Brock and Goscinski 2010;Firesmith 2004;Mapp et al 2014;Takabi et al 2010;Zissis and Lekkas 2012). The Cloud Control Matrix (CCM) has been used as a reference document to crosscheck with other standards.…”