Cloud Auditing Research Articles

An intelligent optimized secure blockchain mechanism for cloud auditing

The cloud auditing model was attractive for the cloud storage system to check the integrity of the stored user files. Hence, to maximize the security concern, federated learning and the blockchain were introduced. But, in some cases, security issues arose because of the extensive unstructured data and attack vulnerability. So, to avoid security problems and offer better protection in a cloud environment, a novel Optimized Buffalo-based Homomorphic SHA Blockchain (OBHSB) is proposed. In this model for accessing the cloud storage data with the critical matching method, if any of the unauthenticated users are trying to access the file initially, the system checks the key matching parameter. The proposed model was developed to provide better security in big data presented in the cloud environment. Hence, federated learning was adopted to create the cloud auditing phase in the distributed cloud environment. Therefore, it gives flexibility in training all data types: audio, text, and images. Moreover, the prime performance parameters were calculated and compared with other traditional approaches to justify the efficiency of the proposed model. The attack was considered an event in this research. The performance rate of the proposed model was validated in the performance analysis. Subsequently, the case study was developed in this research to explain the working procedure of the proposed design, and the result of the proposed model was discussed.

Efficient public auditing scheme for non-administrator group with secure user revocation

Cloud auditing, as an important part of cloud computing, ensures file security for users. To this end, many academic authors have conducted an enormous amount of research on cloud auditing. Unfortunately, existing schemes usually involve administrators who have greater power, and malicious administrators may abuse their authority. Thus, a large number of schemes have been designed to ensure users’ authority, such as implementing non-administrator groups. Whereas, it is difficult to achieve efficient user revocation in groups without administrators. This paper aims at solving the aforementioned problem. In particular, an efficient public auditing scheme is proposed with malicious users revocation and re-signature generation under the non-administrators model. First, the signature generation is executed by t users based on the threshold secret technique. Then, the proxy is responsible for aggregating t users’ partial keys and signatures. Moreover, the cloud, proxy and qualified users will collaborate to generate a new partial signature through proxy re-signature when a malicious user appears. Last, we give formal security analyses and conduct a number of experiments.

Auditing of Outsourced Data Integrity - A Taxonomy

Introduction: Cloud has gained a huge number of consumers in today's environment due to its broad range of services. On the cloud server, data owners can store any type of data, and users can access it whenever they need it. Methods: Numerous challenges come with the ease of use of outsourced data. The accuracy and secrecy of data outsourced come at stake. Users have a low level of trust in cloud service providers since they can be deceptive at times. A cloud audit is an examination conducted by a data owner to assess and document the performance of their cloud vendor. Results: The goal of a cloud vendor audit is to determine how well they follow a set of predetermined controls. Conclusion: In the article, the authors present various schemes of cloud auditing, their categorizations, and merits and demerits along with the future directions of research in the domain.

Cloud auditing and authentication scheme for establishing privacy preservation

Cloud auditing and authentication scheme for establishing privacy preservation

The Impact of Cloud-Based Enterprise Resource Planning System on Blockchain Adoption, with the Presence of Cloud Auditing as an Intermediary Variable in Jordanian Commercial Banks

The study aimed to determine the impact of a cloud-based Enterprise Resource Planning (ERP) system on the adoption of blockchain technology, with the presence of cloud auditing as an intermediary variable, in Jordanian commercial banks. The study utilized a descriptive-analytical approach to describe and analyze the phenomenon under investigation, which revolves around cloud-based ERP systems and their influence on blockchain technology adoption, along with the mediating role of cloud auditing. The study's population consisted of Jordanian commercial banks listed on the Amman Stock Exchange, with a total of 12 banks by the end of the year 2022. The study utilized the Statistical Package for Social Sciences (SPSS) and Amos software to analyze the study's questionnaire. The study yielded several key findings, one of which is the presence of an impact of cloud-based Enterprise Resource Planning (ERP) systems on the adoption of blockchain technology, mediated by cloud auditing, in Jordanian commercial banks. As for the study's recommendations, they emphasize the necessity for Jordanian commercial banks to provide appropriate training and awareness programs for their auditing teams regarding cloud auditing. This initiative aims to enhance their understanding of cloud technologies, associated tools, and cloud auditing skills. Furthermore, it's important for these banks to fulfill all requirements and procedures ensuring compliance with laws and regulations related to financial technology and blockchain.

Fair Cloud Auditing Based on Blockchain for Resource-Constrained IoT Devices

Internet of Things (IoT) devices upload their data into the cloud for storage because of their limited resources. However, cloud storage data has been subject to potential integrity threats, and consequently auditing techniques are demanded to ensure the integrity of stored data. Unfortunately, existing auditing approaches require owners to undertake expensive tag calculations, which is unsuitable for resource-constrained IoT devices. To resolve the issue, we present a <underline xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">F</u> air <underline xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">C</u> loud <underline xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">A</u> uditing proposal by employing the <underline xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">B</u> lockchain (FCAB). We combine certificateless signatures with the designed dynamic structure to constructively offload the cost of tag computation from the IoT device to the introduced fog node, significantly reducing the local burden. Considering that fog nodes may behave dishonestly during auditing, FCAB enables the IoT device to verify the audit result's authenticity by extracting reliable checking records from the blockchain, thereby achieving auditing fairness, which ensures that the <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">honest</i> cloud and fog node will gain the corresponding reward. Finally, FCAB is proved to satisfy tag unforgeability, proof unforgeability, privacy preserving, and auditing fairness. Experiment evaluations affirm that FCAB is computationally and communicationally efficient and retains a smaller and fixed computation locally at the data processing stage (mainly including tag computation) than existing auditing methods.

Retracted: Construction of Social Security Fund Cloud Audit Platform Based on Fuzzy Data Mining Algorithm

Retracted: Construction of Social Security Fund Cloud Audit Platform Based on Fuzzy Data Mining Algorithm

A collaborative auditing scheme with dynamic data updates based on blockchain

Cloud data auditing is essential to ensure the integrity of cloud data. The main idea of cloud auditing is to entrust the audit task to a third-party auditor (TPA) with powerful computing ability. However, TPA may lead to data leakage and become the single point of failure. Recently, blockchain has been introduced to solve these problems by TPA. However, the dynamic storage structure developed by traditional cloud storage does not apply to the blockchain. This paper proposes a blockchain-based collaborative public auditing scheme for dynamic data. We design the cloud service provider(CSP) to generate a challenge set using the latest block hash. It does not need to interact with the blockchain in the challenge phase, dramatically reducing communication overhead. In addition, considering economic factors, we allow users to seek partners to reduce audit costs. The EigenTrust model evaluates the reputation of each user's audit behaviour, effectively avoiding the probability of malicious users participating. For data update, we introduce the Pseudo Index Linked List(PIL) index management structure, which reduces the size of the index management structure to adapt to the blockchain's characteristics and makes the update operation have a constant time complexity. Through a complete security analysis and performance evaluation, we proved the security and effectiveness of the scheme.

Ciphertext-policy attribute-based encryption supporting policy-hiding and cloud auditing in smart health

Smart Health, with its flexibility and efficiency, has been widely deployed, especially during the COVID-19 pandemic. However, privacy protection mechanisms for Smart Health are not yet well established and still present a number of security issues. Ciphertext-Policy Attribute-Based Encryption (CP-ABE), is identified as the furthest potential approach for constructing privacy-preserving Smart Health. However, traditional CP-ABE is facing some new challenges. On the one hand, access policy is not encrypted, and the identity information of the user could be exposed. On the other hand, Smart Health Records (SHRs) are outsourced to the Cloud Service Providers (CSP) and may be at risk of being tampered with. In this article, we have built a CP-ABE solution (PHCA) that supports policy-hiding and cloud auditing to ensure privacy security for smart health, in which the decryption cost is constant. To ensure data integrity, we securely introduce an effective third-party auditor. In addition, we design and implement safe and effective outsourcing decryption algorithms, which significantly low the decryption costs for users. Performance comparisons and security analysis demonstrate that our solutions function effectively.

Blockchain-Assisted Conditional Anonymity Privacy-Preserving Public Auditing Scheme With Reward Mechanism

In real-world scenarios, in order to encourage one to report others crimes, judicial department usually rents independent cloud storage spaces to receive the precious evidences from whistleblowers. Since the uploaded data are not controlled by cloud users, remote data integrity is very important. Public cloud auditing enables an auditor to periodically check the integrity of outsourcing data on behalf of users, without retrieving the entire data file. However, most existing data auditing schemes have potential security vulnerabilities, and thus cannot defense many security attacks (e.g., the man-in-the-middle attack). Meanwhile, it is significant to protect whistleblower’s identity privacy, reward the real data uploader, and further trace the responsibility of slanders accurately. From the aforementioned requirements, we present an efficient blockchain-assisted conditional anonymity privacy-preserving public auditing (BA-CAPPPA) scheme with reward mechanism. The Ethereum blockchain is integrated into BA-CAPPPA to enhance the security level of the whole public auditing mechanism. Theoretical analysis results show that the BA-CAPPPA achieves man-in-the-middle attack resistance, storage correctness guarantee, data privacy-preservation, conditional identity anonymity, and reward mechanism. Performance evaluations and comparisons demonstrate that BA-CAPPPA could outperform some state-of-the-art data auditing schemes.

Ldasip: A Lightweight Dynamic Audit Approach for Sensitive Information Protection in Cloud Storage

How to audit the integrity of data stored on the cloud with incomplete trust is an important problem that restricts the development of cloud storage. Although there are several data integrity audit schemes in cloud storage, the increased need to protect sensitive information and support large-scale data storage and dynamic update will result in a significant increase in audit cost, which seriously affects the efficiency of existing cloud audit systems. To solve this problem, we propose Ldasip, a lightweight dynamic auditing method that supports sensitive information protection in cloud storage. Exploiting identity-based data integrity audit, a data masking technology is introduced into to protect user’s sensitive information. At the same time, an improved multibranch tree structure is proposed to realize dynamic audit and reduce communication overhead in the verification process. Theoretical analysis and comprehensive experiments have been conducted, which demonstrate the effectiveness of Ldasip. The results show that Ldasip can ensure the correctness of the audit, protect the sensitive information in the user's stored content, and support the dynamic update of data with less audit time and communication overhead.

Integrity Auditing for Multi-Copy in Cloud Storage Based on Red-Black Tree

With the rapid development of cloud storage, cloud users are willing to store data in the cloud storage system, and at the same time, the requirements for the security, integrity, and availability of data storage are getting higher and higher. Although many cloud audit schemes have been proposed, the data storage overhead is too large and the data cannot be dynamically updated efficiently when most of the schemes are in use. In order to solve these problems, a cloud audit scheme for multi-copy dynamic data integrity based on red-black tree full nodes is proposed. This scheme uses ID-based key authentication, and improves the classic Merkel hash tree MHT to achieve multi-copy storage and dynamic data manipulation, which improves the efficiency of real-time dynamic data update (insertion, deletion, modification). The third-party audit organization replaces users to verify the integrity of data stored on remote cloud servers, which reduces the computing overhead and system communication overhead. The security analysis proves that the security model based on the CDH problem and the DL problem is safe. Judging from the results of the simulation experiment, the scheme is safe and efficient.

Third-party enabled auditing for uniqueness-based integrity and data sharing with information hiding

The majority data are now kept in the cloud. There are many Cloud storage applications used to exchange data that range from normal to highly sensitive. Among the most essential security measures in cloud is Cloud auditing. It is the process of validating the reliability of data stored in the cloud. As of the inevitability of hardware problems, system failures and errors by people these data may be corrupted or lost. An efficient auditing system to determine whether or not the data is corrupted is a challenging task among the recent research. This paper proposes a third-party enabled auditing methodology to ensure data integrity, privacy data sharing and protect against outside attackers in the public cloud. In this proposed method, the record / data owner generates signatures or add sanitizer before importing sensitive data blocks into the cloud. The record blocks that report sensitive data are sanitized, and the signatures of those records blocks are converted into legitimate ones for the sanitized report. As a result, the records saved in the cloud have the identical signature. Then a third-party auditor is implemented to confirm the cloud's storage accuracy by validating the reliability of the cloud records on the person's behalf.

Dynamic Attribute Tree for the Data Encryption and Third Party Auditing for Cloud Storage

Background: To reduce the burden of the users to perform cloud audits. The tree based key handling method provides the structure format of data and increases performance in the search process. Methods: The Dynamic Attribute Tree method is proposed for Third-Party auditing to encrypt the data based on its attribute. The attributes are stored in tree structure along with data and key that helps to effectively improve the dynamic update of the data in the cloud. Findings: The proposed Dynamic Attribute Tree method has 6.7milliseconds computation time for 100 blocks of data and the existing Merkel Tree method has 7.5milliseconds computation time. Novelty: The Novelty of the project is the Dynamic Attribute Tree method uses bilinear mapping to verify the integrity of the data without retrieving the actual data from the cloud. Keywords: Bilinear Mapping; Cloud audit; Cloud storage services; Dynamic Attribute Tree; and Third Party Auditing

Securing the Confidentiality and Integrity of Cloud Computing Data

Cloud Service Providers (CSPs) are becoming increasingly popular as the amount of available digital data continues to grow at an exponential rate. A new set of benefits and economies made possible by cloud technologies in terms of bandwidth, computing, storage, and transmission costs, which will all reduce the overall costs for data storage for the company, which provide customers with convenient and efficient storage services. For the protection of the Cloud Client (CC) data in the cloud, several different security models are available. In order to verify that CSPs and the CC are in compliance with these safety criteria, the Third-Party Auditor (TPA) has a responsibility to thoroughly assess evidence of compliance between the CC and the CSP. Cloud user data are vulnerable to loss of confidentiality and integrity as data are stored in off premises and maintained by CSP. As a result, in order to ensure the confidentiality and integrity of stored data, the concept of auditing has been introduced into the Cloud Computing Environment. Cloud users can seek the assistance of a TPA who has extensive experience in conducting cloud audits in order to assess the risk associated with their services.

Improved Cloud Auditing Protocol and Its Application for Pandemic Data Management

Data integrity verification mechanisms play an important role in cloud environments. Recently, a lightweight identity-based cloud storage audit scheme has been proposed; this paper points out security vulnerabilities of their OffTagGen algorithm. That is, the attackers such as malicious cloud servers can forge the tags, which can destroy data integrity. By improving the construction of OffTagGen algorithm, an improved security cloud auditing protocol is proposed in this work to better protect user’s privacy. The analysis shows that the new protocol is effective and resistant to attacks.

Internet + Cloud Audit Mode in Enterprise Human Resource Audit Practice

In the context of the prevailing Internet + mode, all sectors of society are deeply changed by the Internet. Combined with the practice of China's Internet industry, in this mode, auditing of all walks of life is bound to be controlled by future technology. In the practice of enterprise human resource audit, profound changes are bound to take place, and the acceleration of efficiency is a profound practice one-sided. This paper studies how the Internet + cloud audit mode gives full play to the advantages of cloud mode in enterprise human resource audit practice, and obtains the advantages of cloud audit mode through data comparison. Under the trend of strengthening Internet + cloud audit, it is necessary to deeply improve the combination of Internet related technologies and improve the technological content of practice; It is also necessary to enhance the advantages of the Internet, gradually removing the isolated and non-communicating audit module, and replacing it with a cloud-centered audit mode that connects all units. Based on the processing capacity of cloud computing and massive data processing capacity of cloud computing, the r&d and production of human resource software will be transformed into future intelligence. Data comparison in this chapter shows that cloud audit mode has better scores than traditional mode, with a comprehensive average score of 95.8.

A data security and integrity framework using third-party cloud auditing

A data security and integrity framework using third-party cloud auditing

Efficient Method for Storing Health Record in Cloud Using Integrity Auditing and Data Sharing

Identity based cloud storage authorization is proposed in this paper to provide protection of cloud data. Many sensitive information is stored in the cloud, and it must be kept safe from unauthorized access. By hiding the sensitive information’s, privacy for an individual or organization is provided. The data in the cloud are secured by hiding the sensitive information. In the proposed system when the user and data analyzer sign-in they will receive the verification mail to assure as a valid user or data analyzer. The verification key for the user and the data analyzer is generated by the Private Key Generator (PKG). The user and the data analyzer enter the cloud using the verification key to upload and retrieve data from the cloud. Until uploading data to the cloud, the user encrypts the data, concealing confidential details. The Third Party Auditor is in charge of the cloud auditing process (TPA). This scheme allows data files stored in the cloud to be shared and used by data analyzers under the condition that confidential information is hidden, allowing the auditing system to operate more efficiently.

Construction of Social Security Fund Cloud Audit Platform Based on Fuzzy Data Mining Algorithm

Guided by the theories of system theory, synergetic theory, and other disciplines and based on fuzzy data mining algorithm, this article constructs a three-tier social security fund cloud audit platform. Firstly, the article systematically expounds the current situation of social security fund and social security fund audit, such as the technical basis of cloud computing and data mining. Combined with the actual work, the necessity and feasibility of building a cloud audit platform for social security funds are analyzed. This article focuses on the construction of the cloud audit platform for social security funds. The general idea of using fuzzy data mining algorithm to build the social security fund audit cloud platform is to compress the knowledge contained in a large number of data into the weights between nodes and optimize the weights through the learning of the neural network system. Through the optimization function, the information contained in the neural network is stored in a few weights as far as possible. The main information is further highlighted by network clipping and removing weights that have little impact on the output.