Integrity Checking Methods Research Articles

Efficient Multi-Replica Cloud Data Integrity Checking Method Based on Enhanced PRF

Cloud storage is vital nowadays due to its scalability and availability. Clients can save their information on cloud without sustaining a local replica. To maintain privacy, the owners can confirm the integrity of the outsourced information. Users allow third-party auditors to prove the honesty of the data saved on the cloud server. Data integrity checking, plays a crucial role in safeguarding the user’s data, particularly when kept in public clouds such as Microsoft Azure. To ensure the availability of stored data, users prefer multiple copies of data at multiple locations. Honesty checking of multiple copies can also be guaranteed with integrity checking techniques. Even though various scholars have proposed several multi-replica truthfulness checking schemes, many possess computational overhead during honesty verification. In this paper, an enhanced puncturable pseudorandom function is proposed to bring down the third-party auditor’s processing overhead, as well as the cloud server during proof verification and proof generation of replica data blocks. The scheme supports dynamic updating of stored data in the cloud server with less communication overhead for insertion/modification and deletion. An indistinguishability obfuscation-based program is also used to preserve the confidentiality of the data stored.

An Adaptive Methodology for Integrity Checking in Cloud Storage

Majority of the organization uses cloud for storage purpose in order to reduce the cost as well as maintenance. Due to increasing threat from internal and external sources, there would be possibility of corruption in the cloud storage files. Thus the storage must to be monitored periodically for integrity checking. Since most of the Data Owners have limited resources thus the responsibility of integrity checking goes to the Third Party Auditors (TPA). Usually the static way of deciding to use particular hash tree methodology to store the cloud storage meta-data, which is mainly used for integrity checking throughout is inappropriate for two main reasons, firstly, due to more fluctuated loss or corrupted cloud data, secondly, based on the variations in the number of files in the cloud users’ directory; Initially the static approach would be good but it may not be optimal solution at the later period. therefore, in this paper, we have proposed Adaptive Integrity Checking method (AIC), which would lead a way for adaptive dynamic hash tree methodology for holding the cloud storage meta-data; which would drastically increases the performance of integrity checking in terms of both time and space complexity besides the benefits obtained in the EDHT-n version and HEDHT methodologies of handling the cloud storage integrity checking.

Video Data Integrity Verification Method Based on Full Homomorphic Encryption in Cloud System

Cloud computing is a new way of data storage, where users tend to upload video data to cloud servers without redundantly local copies. However, it keeps the data out of users' hands which would conventionally control and manage the data. Therefore, it becomes the key issue on how to ensure the integrity and reliability of the video data stored in the cloud for the provision of video streaming services to end users. This paper details the verification methods for the integrity of video data encrypted using the fully homomorphic crytosystems in the context of cloud computing. Specifically, we apply dynamic operation to video data stored in the cloud with the method of block tags, so that the integrity of the data can be successfully verified. The whole process is based on the analysis of present Remote Data Integrity Checking (RDIC) methods.

Analysis and design of an optimized secure auditing protocol for storing data dynamically in cloud computing

The remote server (Cloud Service Provider (CSP)) store their data on cloud servers and users can access their data from cloud servers while implementing the concept of cloud computing. Because of some security constraints in data outsourcing, the latest concept of data hosting service also arises new security challenges, those challenges can be handled by third party auditing service to check the data integrity in the cloud server. There are are few existing remote integrity checking methods those can serve for static stored data but not able to work dynamically. In this paper, we develop a three-tier security architecture for storing multimedia files which include role base access control, encryption, and signature verification. Therefore, an enhanced secure dynamic auditing protocol is proposed, which can store data correctly in the cloud. In the proposed scheme, both the combiner and the third party auditor (TPA) can verify the integrity of the information that they are receiving from each other. Therefore, the proposed an optimized secure dynamic auditing protocol is secure and efficient against various conspiracy attacks.

A Hybrid Multi-level Mechanism for Application Integrity Checking

The protection of the integrity of the computer system, although not able to deal with all security threats, is still essential to enhance the overall security of the system. Integrity check may be a reasonable way to protect application from tampering with low cost. This paper designs a multi-level check mechanism of application integrity with multiple inspection methods, which can better display the advantages of different inspection methods. Hybrid checking method may be utilized for different file integrity checking demands. The paper also demonstrate the implementation of a high-performance Linux page-level integrity checking method, in reference to the design in NetBSD system. Experiment results show that it may better deal with the application file rollback attacks. And on machine with limited resource, for example, thin client, the overhead of integrity checking can be lower than 10%.

Privacy-Preserving Public Auditing Protocol for Low-Performance End Devices in Cloud

Cloud storage provides tremendous storage resources for both individual and enterprise users. In a cloud storage system, the data owned by a user are no longer possessed locally. Hence, it is not competent to ensure the integrity of the outsourced data using traditional data integrity checking methods. A privacy-preserving public auditing protocol allows a third party auditor to check the integrity of the outsourced data on behalf of the users without violating the privacy of the data. However, existing privacy-preserving public auditing protocols assume that the end devices of users are powerful enough to compute all costly operations in real time when the data to be outsourced are given. In fact, the end devices may also be those with low computation capabilities. In this paper, we propose two lightweight privacy-preserving public auditing protocols. Our protocols are based on online/offline signatures, by which an end device only needs to perform lightweight computations when a file to be outsourced is available. Besides, our proposals support batch auditing and data dynamics. Experiments show that our protocols are hundreds of times more efficient than a recent proposal regarding to the computational overhead on user side.

An Integrity Checking Mechanism Using Physical Independent Storage for Mobile Device

The dissemination of smartphones is rapidly progressing and there are many similarities of smartphones and PCs in terms of security risks. Recently, in mobile network environment, there is a trend of increasing damages and now, there are lots of active research on a system that can comprehensively respond to this. As a way to prevent these risks, integrity checking method on operation system is being researched. As most integrity checking algorithms are classified by verification from the levels before booting the OS and at the time of passing on the control to the OS, in which, there are minor differences in the definitions of integrity checking or its methods. This paper researched the verification techniques for OS integrity that can be more fatal than apps in case of security issues, and suggests the integrity verification technique of OS using a boot loader and a physically independent storing device in the terminal.

부트로더와 물리적으로 독립된 저장장치를 이용한 모바일 운영체제 무결성 검증

본 논문에서는 보안의 문제가 발생 할 경우 앱보다 치명적일 수 있는 운영체제 무결성에 대한 검증 기법에 대해 연구하였다.최근 스마트폰의 보급은 급속도로 발전하고 있으며, PC와 유사한 서비스를 제공하는 단계까지 왔다. 그리고 그에 따르는 보안 위협도 PC와 유사한 부분이 많다. 최근의 모바일 네트워크 환경에서 단말기의 루트 권한 탈취 및 운영체제 위변조 등에 의한 피해가 날로 늘어나고 있는 추세이며 이를 종합적으로 대응할 수 있는 시스템에 대한 연구가 필요하다. 모바일 위협에 대한 피해를 막기 위한 방법으로 운영체제의 무결성을 검사하는 방법이 사용되기도 한다. 무결성 검증 알고리즘은 운영체제 부팅 이전 레벨에서의 검증과 제어권이 운영체제로 넘어간 시점에서의 검증으로 구분될 수 있다. 무결성 검증은 앱 무결성과 운영체제 무결성으로 나뉘어 볼 수 있는데, 본 논문에서는 부트로더와 단말기 내부의 물리적으로 독립된 저장장치를 이용하여 운영체제의 무결성을 검증하는 기법을 제안하였다. In this paper, we study the verification techniques for OS integrity that can be more fatal than applications in case of security issues. The dissemination of smartphones is rapidly progressing and there are many similarities of smartphones and PCs in terms of security risks. Recently, in mobile network environment, there is a trend of increasing damages and now, there are active researches on a system that can comprehensively respond to this. As a way to prevent these risks, integrity checking method on operation system is being researched. As most integrity checking algorithms are classified by verification from the levels before booting the OS and at the time of passing on the control to the OS, in which, there are minor differences in the definitions of integrity checking or its methods. In this paper, we suggests the integrity verification technique of OS using a boot loader and a physically independent storing device in the mobile device.

An Efficient and Secure Dynamic Auditing Protocol for Data Storage in Cloud Computing

In cloud computing, data owners host their data on cloud servers and users (data consumers) can access the data from cloud servers. Due to the data outsourcing, however, this new paradigm of data hosting service also introduces new security challenges, which requires an independent auditing service to check the data integrity in the cloud. Some existing remote integrity checking methods can only serve for static archive data and, thus, cannot be applied to the auditing service since the data in the cloud can be dynamically updated. Thus, an efficient and secure dynamic auditing protocol is desired to convince data owners that the data are correctly stored in the cloud. In this paper, we first design an auditing framework for cloud storage systems and propose an efficient and privacy-preserving auditing protocol. Then, we extend our auditing protocol to support the data dynamic operations, which is efficient and provably secure in the random oracle model. We further extend our auditing protocol to support batch auditing for both multiple owners and multiple clouds, without using any trusted organizer. The analysis and simulation results show that our proposed auditing protocols are secure and efficient, especially it reduce the computation cost of the auditor.

Inconsistency-Tolerant Integrity Checking

All methods for efficient integrity checking require all integrity constraints to be totally satisfied, before any update is executed. However, a certain amount of inconsistency is the rule, rather than the exception in databases. In this paper, we close the gap between theory and practice of integrity checking, i.e., between the unrealistic theoretical requirement of total integrity and the practical need for inconsistency tolerance, which we define for integrity checking methods. We show that most of them can still be used to check whether updates preserve integrity, even if the current state is inconsistent. Inconsistency-tolerant integrity checking proves beneficial both for integrity preservation and query answering. Also, we show that it is useful for view updating, repairs, schema evolution, and other applications.

Three types of redundancy in integrity checking: An optimal solution

Known methods for checking integrity constraints in deductive databases do not eliminate all aspects of redundancy in integrity checking. By making the redundancy aspects of integrity constraint checking explicit, independently from any chosen method, it is possible to develop a new method that is optimal with respect to the classified redundancy aspects. We distinguish three types of redundancy and propose an integrity checking method based on revised inconsistency rules.

Updating knowledge bases while maintaining their consistency

When updating a knowledge base, several problems may arise. One of the most important problems is that of integrity constraints satisfaction. The classic approach to this problem has been to develop methods forchecking whether a given update violates an integrity constraint. An alternative approach consists of trying to repair integrity constraints violations by performing additional updates thatmaintain knowledge base consistency. Another major problem in knowledge base updating is that ofview updating, which determines how an update request should be translated into an update of the underlying base facts. We propose a new method for updating knowledge bases while maintaining their consistency. Our method can be used for both integrity constraints maintenance and view updating. It can also be combined with any integrity checking method for view updating and integrity checking. The kind of updates handled by our method are: updates of base facts, view updates, updates of deductive rules, and updates of integrity constraints. Our method is based on events and transition rules, which explicity define the insertions and deletions induced by a knowledge base update. Using these rules, an extension of the SLDNF procedure allows us to obtain all possible minimal ways of updating a knowledge base without violating any integrity constraint.

A new method for integrity constraint checking in deductive databases

An update of a consistent database can influence the integrity of the database. The available integrity checking methods in deductive databases are often criticized for their lack of efficiency. The main goal of this paper is to present a new integrity checking method which does not have some of the disadvantages of existing methods. The main advantage of the proposed method is that the integrity check is performed primarily at compile time. In order to demonstrate the improvement in efficiency of the proposed method it was compared both fundamentally and experimentally with existing methods.

Hardware support for error detection in multiprocessor systems — a case study

A comparison of the most important methods for error detection in multiprocessor systems is presented based upon the experiences gained in the development of the fault-tolerant multiprocessor system MEMSY. A detailed comparison between watchdog processors and master-checker type duplication based fault tolerance is given, from the point of view of fault coverage, hardware and time overhead. It is shown that a simple multiplication in itself is insufficient to assure proper error detection features, especially if a low error latency time is required. Design guidelines are presented for the effective use of the duplication, based on the master-checker mode. Additionally a new general purpose watchdog processor architecture is proposed, which monitors the behaviour of the main processor by checking the control flow of processes using an extended signature integrity checking (ESIC) method. The watchdog processor is independent of the architecture of the main processor because it is linked to the main processor by a memory interface. The watchdog processor is convenient for multiprocessor systems based on standard components and a RISC/CISC processor with large cache as node processor.