Cloud Security Issues Research Articles

Challenges and Issues in Cloud Security for WBAN applications - A Systematic Survey

A systematic and comprehensive review of privacy preserving and security challenges in cloud environment is presented in this literature. Since, cloud supports various applications, it requires immediate attention for serious security and privacy issues. Research must focus on efficient security mechanism for cloud-based networks, also it is essential to explore the techniques to maintain the integrity and confidentiality of the data. This paper highlights research challenges and directions concerning the security as a comprehensive study through intensive analysis of various literatures in the last decade, and it is summarized in terms of architecture types, evaluation strategies and security model. We surveyed, investigated and reviewed the articles in every aspect related to security and privacy preserving concepts and identified the following tasks: 1) architecture of wireless body area networks in cloud, 2) security and privacy in cloud based WBAN, 3), Cloud security and privacy issues in cloud 4) diverse authentication and cryptographic approaches, 4) optimization strategies to improve the security performance.

A Review of Machine Learning Algorithms for Cloud Computing Security

Cloud computing (CC) is on-demand accessibility of network resources, especially data storage and processing power, without special and direct management by the users. CC recently has emerged as a set of public and private datacenters that offers the client a single platform across the Internet. Edge computing is an evolving computing paradigm that brings computation and information storage nearer to the end-users to improve response times and spare transmission capacity. Mobile CC (MCC) uses distributed computing to convey applications to cell phones. However, CC and edge computing have security challenges, including vulnerability for clients and association acknowledgment, that delay the rapid adoption of computing models. Machine learning (ML) is the investigation of computer algorithms that improve naturally through experience. In this review paper, we present an analysis of CC security threats, issues, and solutions that utilized one or several ML algorithms. We review different ML algorithms that are used to overcome the cloud security issues including supervised, unsupervised, semi-supervised, and reinforcement learning. Then, we compare the performance of each technique based on their features, advantages, and disadvantages. Moreover, we enlist future research directions to secure CC models.

Machine Learning Evaluation of the Requirement Engineering Process Models for Cloud Computing and Security Issues

In the requirement engineering phase, the team members work to get the user requirements, comprehend them and specify them for the next process. There are many models for the requirement engineering phase. There is a need to select the best Requirement Engineering model, and integrate it with cloud computing, that can give the best response to the users and software developers and avoid mistakes in the requirement engineering phase. In this study, these models are integrated with the cloud computing domain, and we report on the security considerations of all the selected models. Four requirement engineering process models are selected for this study: the Linear approach, the Macaulay Linear approach, and the Iterative and Spiral models. The focus of this study is to check the security aspects being introduced by the cloud platform and assess the feasibility of these models for the popular cloud environment SaaS. For the classification of the security aspects that affect the performance of these model, a framework is proposed, and we check the results regarding selected security parameters and RE models. By classifying the selected RE models for security aspects based on deep learning techniques, we determine that the Loucopoulos and Karakostas iterative requirements engineering process model performs better than all the other models.

A Comprehensive Review on Cloud Computing and Cloud Security Issues

Cloud computing is a type of computing where computing services such as applications, storage, infrastructure, processing power are hosted by some vendors (cloud vendors) over the Internet and delivered to users on on-demand basis. A company can benefit from cloud computing in the sense that they can rent access to anything from applications to storage to processing power rather than owning their own IT infrastructure. By using cloud-computing services, companies can avoid the various costs and complexities associated with owning and maintaining their own IT infrastructure as everything is taken care of by the service providers. Cloud computing is a paradigm in which both the users and the service providers are benefited. Service providers are greatly benefited from cloud computing by providing cloud services to a wide range of customers. The primary objective of this paper is to give an overview on cloud computing encompassing its features, the pros and cons of cloud computing and the challenges that comes with it. Furthermore, this paper also presents a list of security concerns in cloud computing which stands in the way of wide spread adoption of cloud computing thereby motivating researchers to devise competent solutions to tackle these ongoing security issues.

RETRACTED ARTICLE: Analysis of security issues of cloud-based web applications

The Cloud computing is a powerful tool to optimize the cost in terms of hardware, controllable, utility to sharing the data, due to abovementioned features most of the organization switching their applications and services on the cloud. Cloud services offer secure and scalable services, but there is always some security problem when data have transmitted from a central storage server to a different cloud, personal and private data commitment increase risk of data confidentiality, integrity, availability, and authentication before one choose a vendor in the cloud or choose the cloud and move services in the cloud. This paper aims to resolve issues and provide the countermeasures relating to security issues in clouds based web applications. The vulnerability scores, its impact on confidentiality, integrity, availability, access complexity, and risk on assets calculated, and it observed most of the vulnerabilities identified during the scanning are related to security due to mis-configurations of web servers. The results analyzed for the vulnerability scores, vulnerabilities impact on confidentiality, integrity, availability, access complexity, and risk are analyzed description, and risk assessment. The countermeasures for each vulnerability based on the experimental results discussed.

Cloud Based Reasoning Health Data using Homomorphic Encryption

Cloud computing is an abundant heterogeneous paradigm. The clients are given access to cloud for storing large amount of data for many purposes. The major cloud security issues are data breaches, insider threat and insufficient due diligence etc. Most of the service providers save the Client data as a plain text format which makes the data less secured. Aim of the system is to protect the health data that are outsourced for storing in cloud. In this system, the data is encrypted using paillier cryptosystem before outsourcing, which preserves the privacy of patient’s health data. Computations are performed over this encrypted data using decision tree algorithm. The results are displayed on the client machine. Hence, it ensures the privacy preservation and cautions the patient about his health.

Research on Virtualization Security in Cloud Computing

Cloud computing services, with its advantages of flexible configuration, efficient utilization of resources and easy management, have achieved rapid development and wide application, in recent years. However, the security issues in cloud computing are also becoming increasingly prominent, at same time, cloud computing security has become an important factor hindering the development of cloud computing. The virtualization technology is one of the core technologies of cloud computing, meanwhile, virtualization security is the core issue of cloud computing security as well. This article introduces the mainstream virtualization technology, reviews the security threats of virtualization in cloud computing, and puts forward the corresponding countermeasures.

A survey on security challenges in cloud computing: issues, threats, and solutions

Cloud computing has gained huge attention over the past decades because of continuously increasing demands. There are several advantages to organizations moving toward cloud-based data storage solutions. These include simplified IT infrastructure and management, remote access from effectively anywhere in the world with a stable Internet connection and the cost efficiencies that cloud computing can bring. The associated security and privacy challenges in cloud require further exploration. Researchers from academia, industry, and standards organizations have provided potential solutions to these challenges in the previously published studies. The narrative review presented in this survey provides cloud security issues and requirements, identified threats, and known vulnerabilities. In fact, this work aims to analyze the different components of cloud computing as well as present security and privacy problems that these systems face. Moreover, this work presents new classification of recent security solutions that exist in this area. Additionally, this survey introduced various types of security threats which are threatening cloud computing services and also discussed open issues and propose future directions. This paper will focus and explore a detailed knowledge about the security challenges that are faced by cloud entities such as cloud service provider, the data owner, and cloud user.

Security of Cloud Computing Using Adaptive Neural Fuzzy Inference System

Cloud computing can enable organizations to do more by breaking the physical bonds between an IT foundation. The raised security dangers in cloud computing must be overpowered to profit the new processing perspective that offers an imaginative arrangement of activity for relationship to IT. The purpose of the study was to reduce security’s obstacles and risks by using protection methods and approaches to ensure maximum data protection, which allows for the user to select the original security level. An adaptive neural control fuzzy system is used to resolve the unsecure and risky tasks of cloud computing. Sugeno control methods have been applied for these data protection issues in which the uncertainty because of randomness can be resolved. ANFIS identified the input parameters according to the current scenario, fuzzified the data, and integrated them into knowledge rule base. Different membership functions were used for training the data. In this article, we present a point-by-point examination of the cloud security issue. We assessed the issue from the cloud building point of view. In context of this examination, we deduce an unmistakable detail of the cloud security issue and key highlights that ought to be confirmed by any proposed security strategy. The examination and results show that the parameters dependent on ANFIS are very much intended to distinguish the oddities in cloud condition with least bogus negative rate and high discovery precision. The performance of Sugeno membership function usually gives better results and ensures the computational efficiency and accuracy of data.

Fog Computing Mitigate Limitations of Cloud Computing

In today’s world, cloud computing is the most exciting and advanced technology. It came into existence with lots of advantages, but cloud-only computing has some disadvantages also like latency in real-time data processing, network congestion, less bandwidth utilization, fault tolerance, and security issues in public cloud. To address the issue of real-time data-processing and security in public cloud new computing model are used which is known as Fog Computing. It is nearer to the client or edge so that it can reduce the latency in real time data-processing and security in public cloud using techniques like user profiling and decoying technique. Fog Computing help us to overcome the latency and security issues of cloud computing. It reduces cloud latency in real time data-processing because fog computing model is nearer to the edge devices. It also improves cloud security in the public cloud.

A note on cloud computing security

Cloud computing has become an emerging technology which has huge impact. Existing security algorithms cannot meet the needs of cloud computing users as security issues have become increasingly prominent, becoming an important factor restricting the development of cloud computing. Research community has immensely focused on developing and optimising security techniques to overcome this hurdle in cloud. Due to huge literature it becomes difficult to comprehend overall structure and advancements. This domain needs an analytic approach to completely understand the problem domain that is why this article represents same in specific context of security. Further, a notion on security issues in cloud computing with respect to vulnerabilities, threats and attacks is discussed. Paper also proposed two research evaluation parameters that are effective citation and effective impact factor for better appreciation. Article also analyses patterns, trends and other factors for directing research activities. Finally, a global research trends on security domain are evaluated and analysed.

CloudStrike: Chaos Engineering for Security and Resiliency in Cloud Infrastructure

Most cyber-attacks and data breaches in cloud infrastructure are due to human errors and misconfiguration vulnerabilities. Cloud customer-centric tools are imperative for mitigating these issues, however existing cloud security models are largely unable to tackle these security challenges. Therefore, novel security mechanisms are imperative, we propose Risk-driven Fault Injection (RDFI) techniques to address these challenges. RDFI applies the principles of chaos engineering to cloud security and leverages feedback loops to execute, monitor, analyze and plan security fault injection campaigns, based on a knowledge-base. The knowledge-base consists of fault models designed from secure baselines, cloud security best practices and observations derived during iterative fault injection campaigns. These observations are helpful for identifying vulnerabilities while verifying the correctness of security attributes (integrity, confidentiality and availability). Furthermore, RDFI proactively supports risk analysis and security hardening efforts by sharing security information with security mechanisms. We have designed and implemented the RDFI strategies including various chaos engineering algorithms as a software tool: CloudStrike. Several evaluations have been conducted with CloudStrike against infrastructure deployed on two major public cloud infrastructure: Amazon Web Services and Google Cloud Platform. The time performance linearly increases, proportional to increasing attack rates. Also, the analysis of vulnerabilities detected via security fault injection has been used to harden the security of cloud resources to demonstrate the effectiveness of the security information provided by CloudStrike. Therefore, we opine that our approaches are suitable for overcoming contemporary cloud security issues.

A SURVEY ON BIOMETRIC AUTHENTICATION SYSTEMS IN CLOUD TO COMBAT IDENTITY THEFT

Biometrics has by far proven to be an effective solution for many of the security challenges that is prevalent in most of the technical fields in this Digital era. It is the measurement of physical or behavioral traits in humans used for unique identification. Biometricsuses the pattern recognition technology of Digital Image Processing for identifying unique features in humans. Most commonly applied or considered biometric modalities comprise fingerprint impression, facial landmarks, iris anatomy, speech recognition, hand writing detection, hand geometry recognition, Finger vein detection and signature identification. Biometric technology is applied in various fields, Security systems being one among them. This paper presents a thorough survey on how biometrics can be effectively applied to eliminate oneof the cloud security issue, identitytheft. Awide range of biometric authentication system protocols and implementations in cloud environment, especially to combat identity theft have been proposed earlier.

In Retrospect of Cloud Security Issues

Popular computing technologies like Distributed ,Parallel ,Grid etc., have already reached their peaks in providing services and now a hybrid aspect is capturing the focus which is a combination of traditional computing technology and network technology and termed to be “Cloud Computing ”.A desperate demand for data sharing and handling enterprise applications have called upon for cloud computing .A blocking wind for leveraging cloud computing technology is the aspect of security .But the passion towards adopting cloud have overridden the security threats. This paper glances over various security threats, risks, challenges along with their resistance capabilities to overcome the vulnerabilities in the cloud and also some of the encryption techniques that are used in the cloud.

Analytics on real time security attacks in healthcare, retail and banking applications in the cloud

Cloud computing is used by large enterprises to provide services to customers. The major advantage of adapting cloud systems is that the clients need not have to manage the maintenance and operations of the cloud systems along with the maintenance of hardware but they will have full control over the data. The downsides of the cloud systems are the security threats that includes confidentiality and security issues. Software as a service, platform as a service, and infrastructure as a service; all comes with its own security issues of different complexities. The security challenges posed by cloud computing systems are overshadowing the economic edge it has. Based on the analysis of the research performed in the area of security issues in the cloud it is evident that a detailed analysis on the same will throw light on root causes and vulnerabilities. The research primarily throws light on the statistics and detailed analysis on the security attacks in the cloud systems in different domains. The paper focuses on the issues and threats in healthcare, retail and banking domains. Analytics on the attacks in these domains will give insights on the loss, mitigation time etc. The real time data on security threats is acquired from IT cloud service providers. The statistics on the same will open up different perspectives of cloud security issues and can throw light on the possible research directions and that is the motivation behind this preliminary research.

Application and Security Issues in Cloud Computing

Cloud computing is attaining a pace for resolving complex computing problems. It is basically an abstracted layer of technology which has three service models: Infrastructure as a Service (IaaS), (Software as a Service) SaaS and (Platform as a Service) PaaS, which provide infrastructure, software and a platform to end-user. On the contrary, there are lots of issues which include energy efficiency, cloud integrity, data recovery, backup, etc. Security and privacy issues like data confidentiality and integrity are the most critical ones. This paper highlights the security issues related to data stored and data access from back end (service provider). It collates each and every application related to cloud and available techniques to resolve some issues. Very less research work has been done on applications and security issues of cloud computing together. This article is an analysis of cloud computing applications and security issues as it is used to a great extent. In future this paper will help research community to grab information regarding applications and techniques to resolve the issues related to Cloud computing.

An Innovative Model for both Cloud Security and Privacy in Provision of Secure Cloud Services

Because of diverse benefits such as counting services on demand, decreasing costs, computing resources configuration, flexibility, services scalability, etc. over internet, Cloud Computing has become and is becoming widely and hugely accepted technology to provide services. On the other hand, privacy and security of a cloud has become an issue as this technology is tremendously emerging in the world. Many researches are being done and even some proposed various models to identify and overcome the privacy and security issues. In this review, for the cloud providers to use during different stages of cloud services, a layered cloud security and privacy model (CSPM) will be provided. The CSPM model allows to overcome cloud security issues and thus, providing safe and protected services. Lastly, countermeasures and security threats will be presented.

Cloud security: risk factors and security issues in current trends

Now a days, cloud computing is an emerging and way of computing in computer science. Cloud computing is a set of resources and services that are offered by the network or internet. Cloud computing extends various computing techniques like grid computing, distributed compu-ting. Today cloud computing is used in both industrial, research and academic field. Cloud facilitates its users by providing virtual resources via internet. As the field of cloud computing is spreading the new techniques are developing. This increase in cloud computing environment also increases security challenges for cloud developers. Users of cloud save their data in the cloud hence the lack of security in cloud can lose the user’s trust.In this paper we will discuss some of the cloud security issues in various aspects like multi-tenancy, elasticity, reliability, availability etc in various sectors, the paper also discuss existing security techniques and approaches for a secure cloud environment. This paper will enable researchers and professionals to know about different security threats and models and tools proposed.

An Examination on Cloud Computing Future, Privacy of Data and Possibilities

Cloud computing is the theoretical basis for future computing. All the global frameworks are now looking up to architecture which is purely based on cloud. Being the core of such a large web of network, it is important to consider the security aspects in a cloud based computing environment. This has resulted in a new research trend on the security issues of cloud. Cloud is a popular paradigm with extreme abilities and benefits for trending ICT environment. On the other end the major concern came in terms of security and privacy while adopting the cloud technology. This article is an effort to cover the challenges in fields like storage, virtualization and communication in cloud .Also it is a try to elaborate relevance of current cryptographic approach in order to increase security of cloud in ICT.

Data storage lock algorithm with cryptographic techniques

<span>The cloud computing had its impact far and wide, and Enterprise solutions are getting migrated to different types of clouds. The services are delivered from the data centers which are located all over the world. As the data is roaming with less control in any data centers, data security issues in cloud are very challenging. Therefore we need multi-level authentication, data integrity, privacy and above all encryption to safeguard our data which is stored on to the cloud. The data and applications cannot be relocated to a virtual server without much degree of security concern as there can be much confidential data or mission-critical applications. In this paper, we propose Data Storage Lock Algorithm (DSLA) to store confidential data thereby provides secure data storage in cloud computing based on cryptographic standards.</span>