Cloud Information Security Research Articles

Multimedia healthcare cloud personal archives security system based on compressed sensing and multi-image encryption

Cloud services in the medical process have become commonplace, and the semi-trusted nature of the healthcare cloud makes security in the communication process particularly important. This paper summarizes the four major pain points in the process of collecting, storing in the cloud, and communicating information in the medical process, and proposes a multimedia medical cloud information security system. The pressure of channel transmission is reduced by compressing two-dimensional information images with compressed sensing (CS) technology. The multimedia information type conversion technology can convert multimedia information into 2D images, and the converted 2D images are merged into a multi-image cube, which realizes the “one-person-one-cube” medical information archives management mode. A chaotic multi-image encryption (MIE) based on Identity Mutual Recognition Keys (IMRKs) is designed to encrypt the cube by transmitting it to the edge cloud, which ensures security and solves the problem of unauthorized use of medical information. The 3D Positioning Fifth Generation Message-Digest (3DPMD5) tamper determination algorithm is utilized to generate 32-bit hexadecimal numbers that are transmitted back to the medical terminal to achieve cloud tamper resistance. It is able to be demonstrated from the simulation results that the system has good reconstruction results, relatively safe performance, and high encryption and decryption efficiency.

Design of automatic monitoring system for network information security in cloud computing environment

Design of automatic monitoring system for network information security in cloud computing environment

ПРОБЛЕМЫ ОБЛАЧНЫХ СЕРВИСОВ И МЕТОДЫ ЗАЩИТЫ ОТ РИСКОВ И УГРОЗ

More and more people are starting to use cloud services for storing, editing and transferring data via the Internet, because it is very convenient, not too expensive and does not require large resource intensity. In addition, with the development of remote work, almost all companies use cloud services, some pay for services, others create their own. Such servers sometimes store very important data, the loss of which would lead to disaster and huge financial losses for companies. Therefore, it is necessary not to forget about security and the need to protect information efficiently and continuously. In connection with world changes, this year the popularity of cloud information security services has grown very much due to the sharp number of attacks on various Russian information systems and resources of various industries, and therefore more and more attention and finances have been paid to this area and its protection in general. In this article, we will consider cloud services, possible risks, available ways to solve threats, as well as possible development in this direction.

Design of automatic monitoring system for network information security in cloud computing environment

Design of automatic monitoring system for network information security in cloud computing environment

From rationale to lessons learned in the cloud information security risk assessment: a study of organizations in Sweden

PurposeThis study aims to address the issue of practicing information security risk assessment (ISRA) on cloud solutions by studying municipalities and large organizations in Sweden.Design/methodology/approachFour large organizations and five municipalities that use cloud services and conduct ISRA to adhere to their information security risk management practices were studied. Data were gathered qualitatively to answer the study’s research question: How is ISRA practiced on the cloud? The Coat Hanger model was used as a theoretical lens to study and theorize the practices.FindingsThe results showed that the organizations aimed to follow the guidelines, in the form of frameworks or their own experience, to conduct ISRA; furthermore, the frameworks were altered to fit the organizations’ needs. The results further indicated that one of the main concerns with the cloud ISRA was the absence of a culture that integrates risk management. Finally, the findings also stressed the importance of a good understanding and a well-written legal contract between the cloud providers and the organizations using the cloud services.Originality/valueAs opposed to the previous research, which was more inclined to try out and evaluate various cloud ISRA, the study provides insights into the practice of cloud ISRA experienced by the organizations. This study represents the first attempt to investigate cloud ISRA that organizations practice in managing their information security.

Mitigating the Integrity Issues in Cloud Computing Utilizing Cryptography Algorithms

The cloud can be created, monitored, and disseminated with slight disruption or service provider involvement. Among the most rapidly evolving phenomenon, cloud computing provides users with a variety of low-cost solutions. By putting the ideas of confidentiality, authentication, encryption techniques, non-repudiation, intrusion prevention, and effectiveness into practice, the challenge of cloud information security for computers and cloud storage security has been resolved in its totality. As cloud security has become a growing problem, cloud technology is prominent throughout many emerging disciplines of study in which a significant amount of research is conducted in this field. Each of these efforts uses a cryptography approach. Current solutions to these issues have certain important drawbacks. To protect sensitive information stored in the cloud, one needs to design programs that implement hybrid cryptographic mechanisms using challenging encryption algorithms. This research elaborates on an examination of using cryptographic techniques to mitigate the integrity problems in cloud computing.

Information Security in Cloud Computing utilizing Fully Homomorphic Encryption Techniques

Flowed enlisting gives a course to the business to deal with the figuring assets on the web. The term has made over late years, and can be utilized to outline the utilization of a pariah for your capacity and figuring needs.The mechanical improvement of distributed computing has helped the business to develop as well as the wellbeing of information has turned into a noteworthy issue. Numerous encryption procedures are utilized as a part of information security in cloud. They are especially powerful when the information is away state and in transmission state. Be that as it may, in handling state the information must be unscrambled so that the operations can be performed. Once the information is unscrambled it is accessible to the cloud supplier henceforth these customary encryption systems are insufficient to secure the information. The information will be protected if the operations are performed in the decoded information. This can be accomplished if the information is encoded utilizing homomorphic encryption strategies. This paper examines about the homomorphic encryption method, its disadvantages and future improvements. [19],[20],[21]

Elliptic Curve based Collaborative Group Key Management for Cloud Data Sharing in Ciphertext Policy Attribute based Encryption

Ciphertext policy attribute based encryption (CPABE) is one of cryptographic procedure that coordinates data information encryption with authenticated admission management for guaranteeing data information security in Cloud. The cloud computing where the application administrations using the Internet. In numerous applications, especially in Group Communication in cloud data information offering to various clients data information proprietors require to conceal undisclosed data information like encryption key. The effective key management system conventions are essential for giving security to this data information. Since, it is extremely difficult to provide security to group's secret data information particularly with various mechanisms of assurance. The effectiveness issue of CP-ABE is as yet accessible that corrupt the computation overhead on the grounds that bilinear pairing is exorbitant in such huge numbers of utilizations of ABE, so by supplanting the bilinear pairing utilized in the attribute coordinating with straightforward scalar multiplication on Elliptic Curves, accordingly diminishing the general computation just as communication overhead. And plan another key dispersion can considered in order to legitimately renounce a client or a characteristic without refreshing the other clients' keys during the property repudiation phase. By utilizing the Shamir's Threshold secret sharing designs access structure to develop the expressiveness of the entrance arrangement. Security and execution examination demonstrate that in this plan improving the general effectiveness just as guarantee the security of the cloud data information

Cloud Audit Server based verification for enhancing Information Security in cloud

Cloud Audit Server based verification for enhancing Information Security in cloud

Trust or consequences? Causal effects of perceived risk and subjective norms on cloud technology adoption

Cloud computing has become a popular alternative information curation solution for organizations. As more corporate proprietary information is stored in the Cloud, concerns about Cloud information security have also increased. This study investigates the causal effect of perceived risk and subjective norms on users' trust intention to adopt Cloud technology. A partial least squares structural equation modeling (PLS-SEM) analysis was performed to assess latent variables and examine moderating effects to Cloud technology adoption. Our findings suggest that a user's perceived risk and subjective norms have a significant effect on their trust intention vis-a-vis Cloud adoption, which leads to their decision on whether to adopt the Cloud technology. While a user's attitudes do influence their intention to trust the Cloud, their attitude is not moderated by either perceived risk or subjective norms. On the other hand, a user's perceived risk of the Cloud environment predominately moderates their knowledge and perceived behavioral control, which results in their knowledge and perceived behavioral control not having a direct effect on their intention to trust the Cloud. Moreover, a user's subjective norms predicate their trust intention, which further moderates their knowledge and perceived behavioral control to trust and to adopt Cloud technology.

Higher Education Cloud Computing in South Africa: Towards Understanding Trust and Adoption issues

This paper sets out to study the views of key stakeholders on the issue of cloud information security within institutions of Higher Education. A specific focus is on understanding trust and the adoption of cloud computing in context of the unique operational requirements of South African universities. Contributions are made on both a methodological and theoretical level. Methodologically the study contributes by employing an Interpretivist approach and using Thematic Analysis in a topic area often studied quantitatively, thus affording researchers the opportunity to gain the necessary in-depth insight into how key stakeholders view cloud security and trust. A theoretical contribution is made in the form of a trust-centric conceptual framework that illustrates how the qualitative data relates to concepts innate to cloud computing trust and adoption. Both these contributions lend credence to the fact that there is a need to address cloud information security with a specific focus on the contextual elements that surround South African universities. The paper concludes with some considerations for implementing and investigating cloud computing services in Higher Education contexts in South Africa.

Simulation Research on Dynamic Security Model of Information System in Cloud Computing Environment

Cloud computing can dynamically allocate the software or hardware resource and information resource in accordance with the needs of different computer users, so as to expand the virtual resources of computer, but data information exists a big security risk in the process of data parallel calculation or the data sharing, so it needs to carry out the risk assessment on the security of signal. In cloud computing, this paper introduces the second-order difference quotient calculation principle in the model of information risk assessment that has accelerated the speed of information risk assessment, and adopts second order linear security authentication model that has strengthened the security of the cloud computing. In order to verify the validity and reliability of the model, this paper uses C program language to design the algorithm and inspects the cloud data with possible existing risk, and then it obtains the deviation curve of numerical calculation and theoretical value, which provides the technical reference for the research of cloud information security technology.

Методы пороговой криптографии для защиты облачных вычислений

Information security in cloud computing technology is actively investigated by the world scientific community. They uses the internet and the central remote servers to provide and maintain data as well as applications. This users' data files can be accessed and manipulated by any other users. So the problem of secure data storage and computation is actual. The modern studies in this field shows that the indicated problem is much more complex than any of the other information security problems, which are solved by well-known cryptographic methods. So, for example M. van Dijk and A. Juels in the paper "On the impossibility of cryptography alone for privacy-preserving cloud computing" described a mathematical model of the organization of cloud computing and proved that in the case of two users information protection is impossible. This result refutes the well-established point of view that the recently proposed by C. Gentry construction for fully homomorphic encryption solves at least theoretically, all the problems of information security in cloud computing. We offer an alternative model of cloud computing, in which the specified negative result does not holds. It differs from the above in the point that each subject interested in privacy, creates his own crypto server. From the point of view of users these cryptoservers are the part of the cloud. The methods of information protection, using threshold cryptosystem in this new model are investigated.

Information Security Awareness Behavior : A Conceptual Model for Cloud

Cloud computing has changed the whole picture that distributed computing used to present such as Grid computing, server client computing. Despite Cloud offers great benefits, it also introduces a myriad of security threats to the information and data which is now being ported from on-premises to off-premises. These security threats must be overcome in order to get full benefit from this new computing exemplar. This paper identifies the importance of awareness behaviour in context of information security for cloud. We investigate four important factors of security awareness behaviour that should be considered when organisations intend to improve their security toward cloud computing environment based on awareness-focused programs. Finally we conclude that a well-structured awareness program that positively affect the level of self-efficacy, security practice care behaviour, security awareness technology behaviour and intention will improve the level of total information security in cloud computing environment

A Novel Cloud Computing Algorithm of Security and Privacy

The emergence of cloud computing has simplified the flow of large-scale deployment distributed system of software suppliers; when issuing respective application programs in a sharing clouds service to different user, the management of material becomes more complex. Therefore, in multitype clouds service of trust environment, when enterprises face cloud computing, what most worries is the issue of security, but individual users are worried whether the privacy material will have an outflow risk. This research has mainly analyzed several different construction patterns of cloud computing, and quite relevant case in the deployment construction security of cloud computing by fit and unfit quality, and proposed finally an optimization safe deployment construction of cloud computing and security mechanism of material protection calculating method, namely, Global Authentication Register System (GARS), to reduce cloud material outflow risk. We implemented a system simulation to test the GARS algorithm of availability, security and performance. By experimental data analysis, the solutions of cloud computing security, and privacy derived from the research can be effective protection in cloud information security. Moreover, we have proposed cloud computing in the information security-related proposals that would provide related units for the development of cloud computing security practice.