Secure Document Service for Cloud Computing

Xu, Jun; Huang, Ru-Cheng; Huang, Wan-Ming; Yang, Geng

doi:10.1007/978-3-642-10665-1_49

Cited by 14 publications

(5 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Xu et al [4] have addressed the issues of confidentiality and authentication of data in cloud environment. The major threats are data interception during transmission from client site to cloud and authorized access to documents stored in the cloud.…”

Section: Secure Data Transmissionmentioning

confidence: 99%

Data and Application Security in Cloud

Barnwal

Ghosh

2014

Bio-Inspiring Cyber Security and Cloud Services: Trends and Innovations

View full text Add to dashboard Cite

Cloud computing is an emerging technological paradigm, which provides computing resources as utility. Like other day-to-day utilities, cloud computing follows pay-as-you-use model, where users are charged according to the usage without regard to where the services are hosted or how they are delivered. Today, majority of companies follow an IT infrastructure-driven business model. With the growing demand, rise in customer base and market place competitions, companies prefer focusing on respective business policies and services they offer, rather than IT management overheads. Therefore, there is a high probability that the future of present day business model may shift to clouds where non-IT companies no longer have to procure, manage, and maintain IT resources. They will host applications and data to the servers, which are deployed by cloud providers, possibly in geographically dispersed locations. However, security is a major challenge before outsourcing any IT needs of business. As cloud provides a multi-tenant virtual computing environment, where competitive businesses may co-exist, hosting of sensitive information for mission-critical applications is of utmost concern. This chapter reviews the recent works reported specifically in the area of data and application security relevant to cloud computing. Some works which use biologically inspired phenomenon to manage security and load balancing in cloud environment, have also been studied. The aim of this chapter is to provide an insight into the present state-of-the-art cloud security problems, proposed solutions, and identify future research directions as well as scopes in various security issues.

show abstract

Section: Secure Data Transmissionmentioning

confidence: 99%

Data and Application Security in Cloud

Barnwal

Ghosh

2014

Bio-Inspiring Cyber Security and Cloud Services: Trends and Innovations

View full text Add to dashboard Cite

show abstract

“…Prior work has also explored decoupling document content from format and structure for more secure cloud storage and processing [23]. For example, HTML documents can be encoded in a format that separates their tree structures from the textual content of elements and attributes.…”

Section: Related Workmentioning

confidence: 99%

AnonymousCloud: A Data Ownership Privacy Provider Framework in Cloud Computing

Khan

Hamlen

2012

2012 IEEE 11th International Conference on Trust, Security and Privacy in Computing and Communications

View full text Add to dashboard Cite

Abstract-A means of reliably concealing ownership of cloud data without impeding computation over the data is presented and evaluated. This facilitates information privacy enforcement in cloud environments by withholding data ownership information from cloud nodes that compute using the data. As a result, nodes that have access to private data in unencrypted form do not know who owns it, what role their computations play in the larger computational task, or to whom their computation results are ultimately delivered. To provide this data ownership privacy, the cloud's distributed computing resources are leveraged to implement an anonymizing circuit based on Tor, through which users submit private data and jobs. A tunable parameter k controls a trade-off between the degree of anonymity and the computational overhead imposed by the system. Anonymous authentication based on publickey cryptography safely links jobs and data to customers for billing purposes without revealing these associations to untrusted computation nodes. Simulation results demonstrate the potency of the system in presence of attackers.

show abstract

“…The exclusion of existing users is performed by propagating new keys after re-encryption of the data. Xu [6] proposes the separation of content and format as a base for storing data secure on the cloud. The data is encrypted by public/private keys making collaborative key handling obsolete.…”

Section: Related Workmentioning

confidence: 99%

Versatile Key Management for Secure Cloud Storage

Graf

Lang

Hohenadel

et al. 2012

2012 IEEE 31st Symposium on Reliable Distributed Systems

View full text Add to dashboard Cite

Not only does storing data in the cloud utilize specialized infrastructures facilitating immense scalability and high availability, but it also offers a convenient way to share any information with user-defined third-parties. However, storing data on the infrastructure of commercial third party providers, demands trust and confidence. Simple approaches, like merely encrypting the data by providing encryption keys, which at most consist of a shared secret supporting rudimentary data sharing, do not support evolving sets of accessing clients to common data. Based on approaches from the area of stream-encryption, we propose an adaption for enabling scalable and flexible key management within heterogeneous environments like cloud scenarios. Representing access-rights as a graph, we distinguish between the keys used for encrypting hierarchical data and the encrypted updates on the keys enabling flexible join-/leaveoperations of clients. This distinction allows us to utilize the high availability of the cloud as updating mechanism without harming confidentiality. Our graph-based key management results in an adaption of nodes related to the changed key. The updates on the keys again continuously create an overhead related to the number of these updated nodes. The proposed scalable approach utilizes cloud-based infrastructures for confidential data and key sharing in collaborative workflows supporting variable client-sets.

show abstract

Secure Document Service for Cloud Computing

Cited by 14 publications

References 7 publications

Data and Application Security in Cloud

Data and Application Security in Cloud

AnonymousCloud: A Data Ownership Privacy Provider Framework in Cloud Computing

Versatile Key Management for Secure Cloud Storage

Contact Info

Product

Resources

About