Security and privacy issues in cloud computing

Abstract

Cloud computing is a state-of-the-art technological innovation providing an extensive list of benefits for almost every business and governmental, small or medium-sized organizations. It has truly revolutionized the computational era by cutting down cost and reducing complexities of infrastructural configurations for computational platforms. This state-of-the-art technology is rapidly being adapted by various large organizations from healthcare to critical infrastructure to carry out their business processes that, otherwise, would require large storage capacity, huge computational power, and expensive hardware.On the other hand, this technological advent also introduces novel ways of information leakage and user classified data security and privacy issues since data is stored and transmitted over the cloud and even across borders. This seems very threatening to the cloud user's community, and they have raised very serious concerns about these issues. Although extensive research efforts have been carried out to address data security and privacy issues in cloud-assisted systems, this still requires many more efforts to counter these issues effectively.The purpose of this special issue was to arrange a venue for cloud researchers around the world to share their state-of-theart research and development that could benefit the cloud community. This helped collect high-quality articles that reported recent research advances regarding security and privacy issues in cloud computing, covering various topics of interest. We received 26 articles, and each article was rigorously reviewed by at least three experts. Finally, we selected 11 articles for publication. The brief descriptions of the selected articles are presented below.The paper entitled BService resizing for quick DDoS mitigation in cloud computing environment^by Gaurav Somani, Manoj Singh Gaur, Dheeraj Sanghi, Mauro Conti, and Rajkumar Buyya presents important metrics to evaluate the performance of a DDoS mitigation process in the cloud computing environment [1]. The authors propose a novel framework consisting of an affinity-based victim-service resizing algorithm to provide performance isolation and a TCPtuning technique to quickly free the attack connections, hence minimizing the attack cooling down period. Extensive real attack experiments show a significant improvement in the performance of the DDoS mitigation service, providing quick attack mitigation.The paper entitled BAn empirical study on acceptance of secure healthcare service in Malaysia, Pakistan, and Saudi Arabia: a mobile cloud computing perspective^by Rooh ul Amin, Irum Inayat, Basit Shahzad, Kashif Saleem, and Li Aijun conducted an empirical study to investigate the behavioral intention of healthcare organizations' staff towards the usage of cloud-based healthcare services to carry out their daily jobs in Malaysia, Pakistan, and Saudi Arabia [2]. The results showed that social influence was the least influencing predictor in determining the dependent variable and that the years of experience pos...

Three factor authentication system with modified ECC based secured data transfer: untrusted cloud environment

“…The username is set to the 128bit length field. After that, split the augmented data into blocks utilizing a 64bit username that is derived as of the current block, centred on the square root of the initial eight prime numbers (2)(3)(4)(5)(6)(7)(8)(9)(10)(11)(12)(13)(14)(15)(16)(17)(18)(19). Next, update the 512-bit buffer utilizing a round constant centred on the cube root of the initial 80 prime numbers .…”

“…The defense of data in every one of these six steps is necessary. The privacy of the data whilst sharing by means of the internet is made certain via numerous access control mechanisms [11], say PAP, CHAP, extensible authentication protocol together with cryptographic methods. PAP is susceptible to being read as of the point-to-point protocol (PPP) data packets swapped betwixt the authentication server and the consumer's machine.…”

On the Security of the Sensor Cloud Security Library (SCSlib)

“…• Availability ensures that data and services are always available for its users at any time, at any place • Confidentiality means that user's data are only available to authorized users, which keeps their data secret • Integrity assures that data has not been changed during storage and transmission over the network • Authenticity is a core security requirement in cloud computing systems, which requires mutual trust between the parties (Abbas and Khan, 2014;Abbas et al, 2017). In addition, it is important for authenticity to validate that both parties involved are who they claim to be • Accountability assures that no entity can deny its participation in a data transfer between them…”

Cloud Computing Environment with Security Issues

“…In order to, conceptual technique to develop a technique which can assess the real level of security assessment. Security development techniques are tremendously desirable for internal structure of cloud, design and other feature of cloud [1]. Cloud computing is an original computing model that will intersect the large-scale compute resources to successfully put together, and to compute resources as a service to users.…”

“…al. Highlights the concept of cloud computing [1]. Some of the concepts are looking for examples of long-term Dr. Brijesh Kumar Bhardwaj, Associate Professor, Department of MCA, Dr. R. M. L. Avadh University, Ayodhya, India applications in this paper, which is known to be urban how using cloud compute and they never give to hand the increasing world to benefit from the up-and-benefit Can Incoming technology.…”