Security Protocol for Data Transmission in Cloud Computing

Abstract

Security is one of the significant challenges which limit users from taking the full advantage of cloud computing. Accordingly, many users have concerns about saving their sensitive data in insecure place. Therefore, we need a protocol that verifies confidentiality, authenticity, integrity, and non-repudiation of data transmission in the cloud. In this paper we will present a protocol that help to secure data access during transmission. Accordingly, users can send their data to the cloud safely and quickly. Thereby, encourage the users to take the full advantage of the cloud computing services. We used in this paper a private and public key scheme to verify data confidentiality. Additionally, we used a hash function to verify data integrity. Finally, data authenticity and non-repudiation have been verified by applying the digital signature mechanism.

Data Leakage Detection in Cloud Computing Platform

“…Cloud computing has introduce new paradigm in computing and data centre deployment [13], and hosted services on the Internet are often associated with wide-ranging term of cloud computing [14] [27]. Generally cloud services has application programming interface (API) based on SOAP or REST standard for easy interaction with other web application [23].…”

“…The computing resources such as CPU, memory and storage on the cloud are basically shared among multiple hosts or virtual machine [27]; therefore it is important to have a data protection scheme to protect data confidentiality, Table 1 below shows three types of data which need to be protected in the cloud deployment. 1 shows the type of data with its corresponding risk level of confidentiality breach.…”

“…Several studies has been conducted on security threats and data leakage on the cloud [8] [9] [10] [11] [12] [19] [26] [27], but those papers did not investigate data leakage due to vulnerabilities of the hypervisor and dashboard of the cloud management software and demonstrate further a method to detect data leakage on cloud computing platform. The study of [12] [19] highlight the possibility data breaches or loss in cloud computing platform, but it did not demonstrate the mechanism that lead to the data breach and demonstrate a method to detect it.…”

“…The work may able to secure the data on application layer but the work did not investigate and address data leakage due to vulnerabilities of hypervisor and cloud platform software. Moreover, the work of [27] regarding security protocol for data transmission in the cloud is more directed towards securing application while data is in motion, it does not fully address the data leakage issue originating due to cloud platform software. Thus there need a work to investigate and address the data leakage threat due to vulnerabilities of the hypervisor and the cloud platform software.…”

B2EIS-RG: Biometric-based Bucket Encrypting Index Structure with Random Generator

“…Database-as-a-Service (DaaS) allows a third party service provider to host the database for the clients, to store and access the cloud databases with the adequate storage resource and low infrastructure cost [1,2]. The third party provider is in charge of the administrative and maintenance tasks.…”