Party Auditor Research Articles

Secure File Sharing System in Cloud Using AES and Time Stamping Algorithms

In recent days, the growth of digital data has been increased explosively due to data-intensive applications like healthcare, education and electronic commerce. Due to the huge volume of data created and the utilization of data in emerging applications, a local storage device has to be deployed. Cloud storage services allow both the individuals and commercial users for the outsourcing of data to the cloud server and to access the data remotely with the help of the internet, so the demand for cloud storage has been raised. However, one of the critical problems of cloud data storage is security. Some researchers have used third party auditor for verifying the data stored in the cloud. This paper introduces a novel method for cloud storage and for protecting the organizations’ data. The proposed system strengthens the level of authentication with the help of AES and time-stamping algorithms. The experimental results demonstrate the efficiency of the proposed method when auditing the shared data integrity

An efficient certificateless public auditing scheme in cloud storage

AbstractCloud storage is a mode of online storage in which data are stored on multiple virtual servers usually hosted by third parties. Cloud service providers manage and operate data storage as services. The major concern in cloud storage is the integrity of outsourced data. Many public auditing schemes which authorize the third party auditor (TPA) to check the integrity of outsourced data have been proposed. However, most of them are based on traditional public key cryptosystems. This paper proposes an efficient certificateless public auditing Scheme (CL‐PAS) in cloud storage. In the process of challenge and auditing, CL‐PAS ensures that malicious cloud servers cannot forge auditing evidences to deceive TPA to pass the verification, and prevents curious TPA from recovering original data from auditing evidences. So it strengthens privacy preserving. Security analysis shows that CL‐PAS scheme meets the predetermined security requirements. The simulation and performance analysis results show that, compared with similar schemes, CL‐PAS scheme has the higher efficiency.

Remote Data Integrity Check

In Cloud Storage Server, data integrity plays an important role, given cloud clients might not be aware whether the data is safe or has been tampered with. This system introduces identity-based signature algorithms to protect data that belongs to the data owner and gets the status of cloud data by means of verification through signatures. Since it is practically not possible for the data owner to be available online all the time for checking cloud data integrity, Third party auditor is tasked with verifying the data integrity every time instead of data owner. The Third party auditors should not read the cipher text data while verifying and must authenticate itself to cloud server by performing Proof of Knowledge operation; then cloud server can reveal the sensitive data as block wise and the third party auditor can verify the signature without knowledge of cipher text data. Finally, an audit report is sent to the data owner. This work demonstrates data security and integrity in the cloud..

Communication and Cost Efficient Third Party Auditor Over Public Cloud

The integrity of data and efficiency of storage are the most important concerns in cloud computing. Signature generation and validation of signature are the methods to prove the integrity of data over the cloud. In addition, a third-party auditor (TPA) helps in validating the signature. Proposed auditing system helps in improving storage efficiency and remove duplication on the cloud server. The proposed scheme is efficient as communication is based on the need for integrity checking. The computational cost is calculated at the user side. Batch auditing is implemented in the scheme and it also supports the dynamic auditing. Results are analyzed and compared with some of the existing systems.

Blockchain-based verification framework for data integrity in edge-cloud storage

With the popularity of the Internet of Things (IoT), data integrity verification in the edge cloud storage attracts attentions from many researchers. Due to the over dependence of the Third Party Auditor (TPA) and the dynamical nature of the IoT data, the traditional data integrity verification framework for cloud storage can hardly work. To satisfy the characteristics of the IoT and avoid the over dependence of the TPA, we propose a blockchain-based framework without TPA for data integrity verification in a decentralized edge-cloud storage (ECS) scenario in this paper. In our framework, we employ the Merkle tree with random challenging numbers for data integrity verification and analyze different Merkle tree structures to optimize the system performance. To solve the problem of limited resources and high real-time requirements, we further propose sampling verification and develop rational sampling strategies to make sampling verification more effective. The overhead and precision of the verification in ECS are studied by an optimal sample size strategy. Finally, a prototype system is implemented based on our framework. We conduct a series of experiments to evaluate the effectiveness of the proposed schemes. The experimental results show that our schemes can effectively improve the performance of data integrity verification.

A modified Boneh-Lynn-Shacham signing dynamic auditing in cloud computing

Cloud Computing is an alternative to conventional IT Outsourcing. As a result, cloud computing migration between organizations is rapidly growing. The adoption of this technology brings many positive aspects but prescribes various risks and concerns. An organization that officially provides its cloud computing services to external providers and implies that its IT functions and process are outsourced to third-party providers of BPO services. For privacy-making public audit processes in dynamic cloud data storage, a modified Boneh-Lynn-Shachame Dynamic Auditing (MBLSDA) algorithm is suggested in this paper. The proposed algorithm executes an audit process for multiple users based on a batch audit simultaneously and effectively to enable Third Party Auditing (TPA). This paper integrates the homomorphic authenticator in an algorithm of dynamic signing audit by random marking in terms of the privacy conserving public auditing process. When the user of cloud service, store or update the data, it encrypts using Rijndal algorithm, and Boneh-Lynn-Shacham signature generation is used for key generation. Finally, a hybrid of these a proposed Modified Boneh-Lynn-Shacham Signing Dynamic audit the data to provide the security.

Public auditing of log integrity for shared cloud storage systems via blockchain

Cloud storage security has been widely focused by the industry and academia in recent years. Differing from the previous researches on cloud data integrity audit, we pay more attention to the security of log generated during the operation of cloud data. While cloud data is damaged and tampered by various security threats (e.g. faulty operations, hacker attacks etc.), it is one of the most common methods to track accidents through log analysis. Therefore, ensuring the integrity of the log files is a prerequisite for completing the incident tracking. To this end, this paper proposes a public model for verifying the integrity of cloud log based on a third party auditor. In order to prevent the log data from being tampered with, we aggregate the log block tags by using the classic Merkle hash tree structure and generate the root node which will be stored in the blockchain. In addition, the proposed scheme does not leak any log content during public audit. The theoretical analysis and experimental results show that the scheme can effectively implement the security audit of cloud logs, which is better than the past in terms of computational complexity overhead.

Privacy Preserving File Auditing Schemes for Cloud Storage using Verifiable Random Function

Users leverage the cloud storage to store data by uploading files to the cloud storage. They can use it to share files to work on collaborative projects. However, during administrative operations by cloud storage service provider (CSSP), there may be some inadvertent corruption of files during data migration and backup. Due to heavy demands, the cloud service provider may not update the desired files immediately when requested by the owner. As a result, a user of the file may receive an obsolete file. To ensure integrity and freshness of files, third party auditing (TPA) services should be supported by CSSP while maintaining the confidentiality of user files and preserving privacy of users. In this paper, three privacy preserving auditing schemes for files stored in cloud has been proposed. Verifiable random function, merkle hash tree and ciphertext-policy attribute-based encryption has been used to achieve the desired goals.

Dynamic Outsourced Auditing Services for Cloud Storage Based on Batch-Leaves-Authenticated Merkle Hash Tree

Cloud computing encourages users to outsource their data to cloud storage. Data outsourcing means that users lose physical autonomy on their own data, which makes remote data integrity verification become a critical challenge for potential cloud users. To free user from the burden incurred by frequent integrity verifications, Third Party Auditor (TPA) is introduced to perform verifications on behalf of user for data integrity assurance. However, existing public auditing schemes rely on the assumption that TPA is trusted, thus these schemes cannot be directly extended to support the outsourced auditing model, where TPA might be dishonest and any two of the three involved entities (i.e. user, TPA, and cloud service provider) might be in collusion. In this paper, we propose a dynamic outsourced auditing scheme which cannot only protect against any dishonest entity and collision, but also support verifiable dynamic updates to outsourced data. We present a new approach, based on batch-leaves-authenticated Merkle Hash Tree (MHT), to batch-verify multiple leaf nodes and their own indexes all together, which is more appropriate for the dynamic outsourced auditing system than traditional MHT-based dynamism approaches that can only verify many leaf nodes one by one. Experimental results show that our solution minimizes the costs of initialization for both user and TPA (compared to existing static outsourced auditing scheme), and incurs a lower price of dynamism at user side.

An Efficient Auditing System for Secure Cloud Storage

The cloud offers stockpiling administrations where clients can store a tremendous proportion of data. Clients are given adaptable measures of extra room alongside the specific number of processors and essential memory where they can play out the fundamental errands. This sharing of realities is commonly executed by framing organizations of clients who share a normal intrigue. Data shared through any individual might be gotten to the method for by utilizing various clients inside the foundation, where the realities owner is a piece of the data that is spared inside the cloud should be incorporated from burglary, abuse, etc. For the explanation that man or lady can likewise shop basic and delicate data inside the cloud it's miles the commitment of the cloud specialist organization to ensure that the data is agreeable and furthermore to hold the protection of the clients who share the realities inside the association clients in a set can likewise make adjustments to the realities which is shared inside the association. Additionally while somebody gets to the measurements most refreshed realities should be made accessible all together that substantial surmisings and activity. For this reason right now, protection and information security of shared information in cloud utilizing encryption to save the client security. Likewise Third Party Auditor (TPA) reviews the information put away in the cloud. He ought to have the option to check the dependability of the CSP without uncovering the personality of the clients in the gathering.

Trustworthiness of Cloud Service Provider and Efficient Third Party Auditor in Cloud Computing using Access Control

One of the advanced rising technology is Cloud computing. The storage of information could be a massive complication for bushed this world. the simplest associated quickest storage and retrieval of information is an economical answer for Cloud computing. The main issue in cloud computing is security. Present study developed model which helps the new user in comparing the different services provided by different Cloud Service Providers. It works on quality of service (QoS), which plays the vital role in the selection of best CSP. Before this study, many tools were developed, but they did not focus on Quality of Service (QoS). This model assists cloud customer in assessing cloud providers trustworthiness based on predefined trust attributes such as business factors, Quality of Services attributes and the 11 security control domains defined by the CSA. In this study, a mechanism is designed through which integrity of Third Party Auditor is checked with the help of access control. Security is the main concern for the development of the proposed system.

VASD2OM: Virtual Auditing and Secure Deduplication with Dynamic Ownership Management in Cloud

In cloud repository amenities, deduplication technology is often utilized to minimize the volume and bandwidth by removing repetitious information and caching only a solitary duplicate of them. Deduplication is extremely productive when many customers deploy the identical information to the cloud repository, but it aggrevates problems pertaining to safety and proprietorship. Proof-of-ownership mechanism authorize any possessor of an identical information to approve to the cloud repository server that he possess the information in a dynamic way. In repository utilities with enormous information, the repository servers may want to minimize the capacity of cached information, and the customers desires to examine the integrity of their information with a reasonable cost. Aiming at realizing integrity auditing and deduplication with effective proprietorship administration of information in the cloud, we propose Virtual Auditing and Secure Deduplication with Dynamic Ownership Management in Cloud (VASD2OM) mechanism. It empowers the distributed server to limit access to the deployed information though the proprietorship transforms actively. Further, the mechanism supports safe and effective virtual auditing of the documents during the download process. In addition, the proposed mechanism lowers the burden of dataowner to audit documents by himself and there is no need to authorize auditing to a Third Party Auditor (TPA). Experimental results demonstrate that the virtual auditing has low auditing time cost relative to the existing public auditing schemes.

Where the twain shall meet? A study of best practices to resolve retailer–supplier acrimony in post-audit recovery of trade promotion dollars

Deductions and claims to recover trade promotions incentives through post-audit of previous years’ transactions is a highly contentious but prevalent practice in the industry. Retailers, given their low margins of operations, are motivated to seek every opportunity to obtain extra incentives from suppliers to boost their profits. They often hire third-party post-auditors to scrub through all their transactions and “deal sheets” or supplier agreements to search for potential unclaimed trade promotion dollars promised by suppliers in prior years. Third party auditors have an incentive to also make dubious claims as they are compensated on contingency fees of a percent of claims recovered. Such practices lead to acrimony between retailers and suppliers. They often have differing viewpoints and opinions about the contextual terms of the trade promotion deals itself leading to an opinion “chasm” that is sometimes difficult to bridge. The resulting tension among retailers and suppliers, along with regulatory compliance under the Sarbanes–Oxley Act, and prevailing questions on the role and practices of post-auditors, motivated this study. Conducted over a 24-month period with extensive collaboration and research discussions between the study team and responsible managers from leading US retail and manufacturing companies. The distinctive mix of academic rigor and practitioner relevance was the hallmark of this study that involved three retail summits conducted with industry participants to discuss the research method and its resultant findings. Evidence suggests that transactional discrepancies will continue to happen, despite technological advances, because of large volume of transactions and multiplicity of complex trade promotion methods in vogue in the retail world. So, as long as there are claim opportunities, post-audit recovery practices will continue, confounding the darker side of the retailer–supplier relationship. Through a multi-stage and multi-level study, and data from a variety of sources, we identify best practices in post-audit recovery and suggest ways to reduce associated conflict and improve relationship satisfaction.

Outsourced data integrity verification based on blockchain in untrusted environment

Outsourced data, as the significant component of cloud service, has been widely used due to its convenience, low overhead, and high flexibility. To guarantee the integrity of outsourced data, data owner (DO) usually adopts a third party auditor (TPA) to execute the data integrity verification scheme. However, during the verification process, DO cannot fully confirm the reliability of the TPA, and handing over the verification of data integrity to the untrusted TPA may lead to data security threats. In this paper, we focus on the problem of integrity verification of outsourced data in untrusted environment, that is, how to improve the security and efficiency of data integrity verification without utilizing untrusted TPA. To address the problem, we design a decentralized model based on blockchain consisting of some collaborative verification peers (VPs), each of which maintains a replication of the entire blockchain to avoid maliciously tampering with. Based on the model, we present an advanced data integrity verification algorithm which allows DO to store and check the verification information by writing and retrieving the blockchain. In addition, in order to improve the concurrent performance, we extend the algorithm by introducing the verification group (VG) constituting by some VPs organized by Inner-Group and Inter-Group consensus protocols. We conduct a completed security analysis as well as extensive experiments of our proposed approach, and the evaluation results demonstrate that our proposed approaches achieve superior performance.

Integrity verification for an optimized cloud architecture

Cloud computing has significantly benefited todays environment of IT industry through its mobility, sustainability, security, cost savings and several other important features. The risk of data loss on cloud in case of dealing with hardware and software is relatively small. However, the issue of data security becomes imminent when we are storing personal data on the cloud which is not transparent to users. In this paper, we introduce a new entity in terms of a virtual machine that provides services and assurance beyond service level agreement (SLA). In the proposed model, a role of data handling and security is assured with association of third party auditor (TPA) by the virtual machine. We further demonstrate the applied technique for encryption, decryption and integrity verification modules. We also upgrade the entropy of the advanced encryption standard (AES) with a variant of secret sharing scheme in the environment of cloud simulator.

Identity-Based Public Auditing Scheme for Cloud Storage with Strong Key-Exposure Resilience

Secured storage system is a critical component in cloud computing. Cloud clients use cloud auditing schemes to verify the integrity of data stored in the cloud. But with the exposure of the auditing secret key to the Cloud Service Provider, cloud auditing becomes unsuccessful, however strong the auditing schemes may be. Therefore, it is essential to prevent the exposure of auditing secret keys, and even if it happens, it is necessary to minimize the damage caused. The existing cloud auditing schemes that are strongly resilient to key exposure are based on Public Key Infrastructure and so have challenges of certificate management/verification. These schemes also incur high computation time during integrity verification of the data blocks. The Identity-based schemes eliminate the usage of certificates but limit the damage due to key exposure, only in time periods earlier to the time period of the exposed key. Some of the key exposure resilient schemes do not provide support for batch auditing. In this paper, an Identity-based Provable Data Possession scheme is proposed. It protects the security of Identity-based cloud storage auditing in time periods both earlier and later to the time period of the exposed key. It also provides support for batch auditing. Analysis shows that the proposed scheme is resistant to the replace attack of the Cloud Service Provider, preserves the data privacy against the Third Party Auditor, and can efficiently verify the correctness of data.

An Efficient Public Auditing Scheme for Cloud Storage with Secure Access Control and Resistance Against DOS Attack by Iniquitous TPA

Cloud storage is a cloud based service which delivers scalable on demand on line storage of data and eliminates the need of maintaining local data centre. Storage of data in cloud brings many advantages such as lower-cost, metered service, scalable and ubiquitous access. However, it also raises concerns to its integrity; to save the storage space cloud service provider may delete some rarely access data. Data privacy is another issue which must be addressed to increase data owner’s trust. To address above issues, many researchers have proposed public auditing schemes to validate the integrity of data using third party auditor. These schemes generate metadata using data files on the owner side and store these metadata on the cloud storage along with the file data, which helps in auditing. These schemes address many concerns which arise due to remote data storage. However, computation cost involved for metadata generation at the data owner side is not properly addressed; another issue which is not properly addressed is an iniquitous third party auditor may be the source of denial of service attack by issuing constantly large number of audit request. Our scheme solves these issues by lowering the computation cost at data owner side and controlling the number of times a third party auditor can issue an audit request to the cloud storage. Our Scheme also supports secure access of data using conditional proxy re-encryption scheme and delegation of auditing task by the authorized third party auditor to another auditor for the specified period of times in the case of unavailability of authorized third party auditor.

An anomaly-based framework for mitigating effects of DDoS attacks using a third party auditor in cloud computing environments

Today, the providers of cloud computing services are among the most prominent service suppliers worldwide. Availability of cloud services is one of the most important concerns of cloud service providers (CSPs) and cloud users (CUs). Distributed Denial of Service (DDoS) attacks are common types of security issues which affect cloud services and consequently, can lead to unavailability of the services. Therefore, reducing the effects of DDoS attacks helps CSPs to provide high quality services to CUs. In this paper, first, we propose an anomaly-based DDoS attack detection framework in cloud environment using a third party auditor (TPA). Second, we provide multiple basic assumptions and configurations of cloud environments for establishing simulation tests to evaluate our proposed framework. Then, we provide results of simulation tests to analyze the feasibility of our approach. Simulation results demonstrate that our method for detecting DDoS attacks in CSPs has following advantages: efficiency, because of the low overhead of computations on CSPs for attack detection; rapid, due to informing a CSP about an attack in a short course of time regarding the maximum valid response time which is defined in a service level agreement (SLA); and precision, through no false positive detection as well as a low rate of false negative detection which is < 2% of all scenarios of the simulation tests. Finally, we present a table to compare characteristics of our framework with other ones in the literature.

A Collaborative Auditing Blockchain for Trustworthy Data Integrity in Cloud Storage System

Cloud storage system provides data owners with remote storage service, which allows them to outsource data without local storage burden. Nevertheless, the cloud storage service is not fully trustworthy since it may not be honest and remote data would be corrupted. One way to ensure trustworthy preservation of cloud data is the remote data auditing method, through which data owners can check storage reliability of cloud system on demand and avoid potential data corruption in time. However, private auditing methods fail to promise the mutual trust in auditing results. Thus, public auditing methods are introduced, in which traditionally a third party auditor is delegated to interact with cloud service providers for auditing tasks. Although the third party auditor serves as a medium to exchange trust, a centralized third party is hard to stay neutral, which exposes the remote data auditing to some threats such as collusion attacks. To address the trust problem between data owners and cloud service providers, we propose a collaborative auditing blockchain framework for cloud data storage. In this framework, all consensus nodes substitute for the single third party auditor to execute auditing delegations and record them permanently, thereby preventing entities from deceiving each other. Security analysis shows that the proposed framework has advantage of preserving remote data integrity from various attacks. Performance analysis demonstrates that the framework is more functional and resource-friendly than existing schemes.

SDVADC: Secure Deduplication and Virtual Auditing of Data in Cloud

Abstract Over the last few years, deploying data to cloud service for repository is an appealing passion that avoids efforts on significant information sustenance and administration. In distributed repository utilities, deduplication technique is often exploited to minimize the capacity and bandwidth necesseties of amenities by erasing repetitive data and caching only a solitary duplicate of them. Proof-of-Ownership mechanisms authorize any possessor of the identical information to approve to the distributed repository server that he possess the information in a dynamic way. In repository utilities with enormous information, the repository servers may intend to minimize the capacity of cached information, and the customers may want to examine the integrity of their information with a reasonable cost. We propose Secure Deduplication and Virtual Auditing of Data in Cloud (SDVADC) mechanism that realizes integrity auditing and deduplication of information in cloud. The mechanism supports secure deduplication of information and effective virtual auditing of the documents during the download process. In addition, the proposed mechanism lowers the burden of dataowner to audit documents by himself and there is no need to delegate auditing to the Third Party Auditor (TPA). Experimental results demonstrate that the virtual auditing has low auditing time cost relative to the existing public auditing schemes.