Secure Cloud Storage Research Articles

An Attribute-Based Searchable Encryption Scheme for Cloud-Assisted IIoT

The searchable encryption is a particular case of structured encryption, which has been intensively researched in the secure cloud storage system. By constructing structured secure index such as encrypted multi-maps (EMM), encrypted inverted index (EII), etc., searchable encryption can achieve efficient keyword search over encrypted data set. However, existing searchable encryption constructions do not take search permissions into consideration, resulting in the lack of a mechanism of the data access control, which may not be suitable for IIoT applications, since an integrated industrial system contains all kinds of data with rigorous access permissions. In this paper, we construct an attribute-based searchable encryption construction for cloud-assisted IIoT application scenario. By designing the novel access policy based structured secure index and the attribute-based search token, our construction achieves fine-grained keyword search privilege control over encrypted IIoT data as well as the same search complexity as the traditional searchable encryption. To the best of our knowledge, this is the first Attribute-Based Searchable Encryption (ABSE) construction. We provide the correctness and security proofs for our construction. Experimental evaluation results in a real-world data set show the correctness and the practical search efficiency of the proposed ABSE.

A Low-Overhead Auditing Protocol for Dynamic Cloud Storage Based on Algebra

With the widespread adoption of cloud storage, ensuring the integrity of outsourced data has become increasingly important. Various cloud storage auditing protocols based on public key cryptography have been proposed. However, all of them require complex cryptographic operations and incur significant storage and communication costs. To address the issues of significant storage overhead for data tags, high computational complexity of cryptographic algorithms, and limited efficiency of dynamic data algorithms in signature algorithm-based cloud storage outsourcing data integrity verification protocols, we propose a dynamic auditing protocol called AB-DPDP, which is based on algebra. Our protocol reduces the computational complexity of tag generation by utilizing basic algebraic operations instead of the traditional cryptographic method used in most current auditing protocols. To reduce storage overhead and protect private data, our protocol stores only tags, allowing for data to be restored through these tags, as opposed to storing both tags and data on the cloud server. To accommodate for more frequent and efficient data dynamics, we propose the dynamic index skip table data structure. Furthermore, the security of our proposed protocol is thoroughly proven based on the security definition of secure cloud storage. Finally, through theoretical analysis and experimental evaluation, we demonstrate the advantages of our scheme in terms of data privacy, storage overhead, communication overhead, computation overhead, and data dynamic efficiency.

Smart MediBox - Patient Assisting Device

Abstract: Thanks to the development of pertinent technology, IoT is rapidly advancing in the medical sector. IoMT is a group of healthcare IT systems that are linked to a variety of medical devices for various purposes. IoMT's development has had a significant influence on healthcare in general, but especially for elderly and handicapped patients. In today's fast-paced world, even regular people require assistance with daily tasks. Helping them take their meds consistently each day without skipping a dosage is one such crucial task. The data will be processed depending on dose access by this medication monitoring system. Additionally, scheduling is done based on the patient intake report's expected accessibility. The suggested system combines an improved notification system with event scheduling based on a priority method. Real-time monitoring and a reminder system are built into the Smart Medibox design to remind patients to take their medications on schedule. It includes a cooling module and sensor that are managed by a microprocessor. The alert has information on date, time, and medicine description and may be programmed for taking numerous medications. It is made to be a small, portable gadget that makes it easy to connect to a secure cloud storage for more research. The gadget transfers all of the data to cloud storage whenit is Wi-Fi connected.

A Blockchain-Oriented Framework for Cloud-Assisted System to Countermeasure Phishing for Establishing Secure Smart City

The information that is saved in the cloud about users is protected by a number of different safeguards in order to facilitate the development of smart cities. Phishing and other forms of social engineering are two examples of misleading tactics that may be used by hostile actors to get sensitive information about users. Phishing is still the first step of a multistage assault, despite the significant technological advancements that have been made to it in recent years. Phishing kits have evolved to become attack tools that are much simpler, more user-friendly, and more readily available as time has gone. Indicators of a successful phishing assault include using foreign characters in the URL, typosquatting of prominent domain names, reserved characters in redirections, and multichain phishing. When papers with these types of phishing URLs are uploaded to cloud storage, hackers get a helping push in the right direction. The use of cloud servers in the commission of these assaults is becoming more common. The currently available software to disallow list phishing URLs does not provide sufficient protection against multilevel phishing and instead places the onus of safety on the user to protect themselves. In addition, the immutability of blockchain data and the avalanche effect both demonstrate their effectiveness as crucial safety measures. In view of the recent advances in technology, we suggest an implementation of filtering that is based on blockchain technology to safeguard the cloud-based data of users. The Phish Block that has been presented is able to recognize homographic phishing URLs with an accuracy of 91 percent, thus ensuring the security of cloud storage.

LM-GA: A Novel IDS with AES and Machine Learning Architecture for Enhanced Cloud Storage Security

Cloud Computing (CC) is a relatively new technology that allows for widespread access and storage on the internet. Despite its low cost and numerous benefits, cloud technology still confronts several obstacles, including data loss, quality concerns, and data security like recurring hacking. The security of data stored in the cloud has become a major worry for both Cloud Service Providers (CSPs) and users. As a result, a powerful Intrusion Detection System (IDS) must be set up to detect and prevent possible cloud threats at an early stage. Intending to develop a novel IDS system, this paper introduces a new optimization concept named Lion Mutated-Genetic Algorithm (LM-GA) with the hybridization of Machine Learning (ML) algorithms such as Convolutional Neural Network (CNN) and Long Short-Term Memory (LSTM). Initially, the input text data is preprocessed and balanced to avoid redundancy and vague data. The preprocessed data is then subjected to the hybrid Deep Learning (DL) models namely the CNN-LSTM model to get the IDS output. Now, the intruded are discarded and non-intruded data are secured using Advanced Encryption Standard (AES) encryption model. Besides, the optimal key selection is done by the proposed LM-GA model and the cipher text is further secured via the steganography approach. NSL-KDD and UNSW-NB15 are the datasets used to verify the performance of the proposed LM-GA-based IDS in terms of average intrusion detection rate, accuracy, precision, recall, and F-Score.

An efficient breast cancer detection with secured cloud storage & reliability analysis using FMEA

Breast cancer is considered as a most dangerous type of cancer found in women among all the cancers. Around 2.3 million women in the world are affected by this cancer and there is no cure if it is left untreated at an earlier stage. Therefore, early diagnosis of this disease is an important consideration to save the life of millions of women. Many machine learning models have been evolved in the recent years for breast cancer detection. However, all the currently available works focused only on improving the prediction accuracy, they need more attention on providing reliable services. This work presents an efficient breast cancer detection mechanism using deep learning strategies. The various assortments like breast image shapes, the intensity of images, regions of an image, illuminations, and contrast are the conceivable factors that define breast cancer identification. This study offers a strong image detection process for breast cancer mammography images by considering the whole slide image. Here, the input process for the preprocessing stage will remove the noise present in the image using Gaussian Filter (GF). The preprocessed image moves to the image segmentation and then forward to the feature extraction for extracting the features of the images using Cauchy distribution-based segmentation and Shearlet based feature extraction. Then the specialized features can be isolated using the Entropy PCA based feature selection. Finally, the breast cancer area is to be detected as benign or malignant accurately by using the Unified probability with LSTM neural network classification (UP-LSTM) for whole slide image (WSI). The attained outcomes and the detected outcomes were stored in cloud using a security mechanism for further monitoring purposes. To provide an efficient security, a Bio-inspired Iterative Honey Bee (BI-IHB) encryption is employed which is decrypted on user request. The reliability of the stored data is then found using FMEA (Failure mode and effective analysis) approach. From the experimental analysis, it is observed that UP-LSTM classifier model offers accuracy of 99.26% , sensitivity of 100% , and precision value of 98.59% which is better than the other state of the art techniques.

Protecting Information Stored Inside the Cloud with A New CCA-EBO Protocol Designed on Hive Technology

Massively scalable facilities may be accessed online with ease due to "Cloud Computing (CC)". The CC resources are primarily characterized by the fact that "Cloud User (CU)" information is often kept on "Cloud Server (CS)" that the CU doesn't even possess or control. The CUs' apprehension about the loss of management of their information may lead to a substantial roadblock in their acceptance of CC offerings. In an attempt to highlight the effectiveness of CC security, the "Cloud Service Providers (CSP)" need to empower the CU to control and evaluate their data. The focus of this research chooses to highlight a key aspect of CC platforms employed to handle CU information on unrecognized CSs at remote locations. Concerns about compromising personal information arise from this feature's importance. In this research, a novel swarm-based "Enhanced BAT Optimization (EBO)" for key generating in "Cloud Computing Accountability (CCA)" for CC information tracking is proposed to solve security issues. Generally, this proposed hybrid CCA-EBO architecture is based on the idea of data accountability, which enables dispersed end-to-end responsibility. The information is made available to the general public, although with a limited set of permissions. The "Cloud Administrator (CA)" would specify the level of access each CU has to the data before it is made available to them. All CU accesses to data are recorded and will be found in a log file for CA to review. According to evaluation methods for the proposed CCA-EBO, existing "Hybrid Secure Cloud Storage (HSCS)", and "Advanced Distribution Verification Protocol (ADVP)", the CCA-EBO provides more security than HSCS, and ADVP in terms of "Auditing Time", "Encryption Time", "Decryption Time", and "Storage Overhead".

ShieldDB: An Encrypted Document Database With Padding Countermeasures

Cloud storage systems have seen a growing number of clients due to the fact that more and more businesses and governments are shifting away from in-house data servers and seeking cost-effective and ease-of-access solutions. However, the security of cloud storage is underestimated in current practice, which resulted in many large-scale data breaches. To change the status quo, this paper presents the design of ShieldDB, an encrypted document database. ShieldDB adapts the searchable encryption technique to preserve the search functionality over encrypted documents without having much impact on its scalability. However, merely realising such a theoretical primitive suffers from real-world threats, where a knowledgeable adversary can exploit the leakage (aka access pattern to the database) to break the claimed protection on data confidentiality. To address this challenge in practical deployment, ShieldDB is designed with tailored padding countermeasures. Unlike prior works, we target a more realistic adversarial model, where the database gets updated continuously, and the adversary can monitor it at an (or multiple) arbitrary time interval(s). ShieldDB’s padding strategies ensure that the access pattern to the database is obfuscated all the time. We present a full-fledged implementation of ShieldDB and conduct intensive evaluations on Azure Cloud.

An Empirical study of Hybrid Cryptographic Algorithms

For the last few decades cloud computing is a blooming word in the field of computer science. Cloud computing is a fast growing technology; it provides various services to the user through internet on demand. Now a days, people in busy move, they use Cloud to store and retrieve data at anywhere, any time without use of any physical storage devices like pen drive, compact disc etc . Enormous features of cloud, most of the small and large scale organizations outsource their data in cloud data storage. With the widespread application of cloud, huge amount of users are incorporated in public cloud, it may lead to vulnerable attacks. So security and privacy is an important factor in cloud environment. This security problem can be solved by various ways. Cryptography is one of the techniques to secure user data in cloud. Researchers can use various cryptographic algorithms to implement the security in cloud storage. This paper focuses the summative analysis of researches, in cloud security from 2018-2022. This survey paper provides solution to researchers who have their work in cloud.

Reliable Techniques for Providing Secure Access Control for Cloud Storage on Mobile Devices

This research focuses on the development of a credible access control method for mobile device cloud storage. The proposed method involves a six-step process, including user registration and login, key generation, data encryption and upload, authentication theory between mobile devices, and data download and decryption. The method incorporates the use of mobile TPM (Trusted Platform Module) chips to ensure trust chain transmission during key exchange. Additionally, encryption based on elliptic curve cryptography is employed to reduce the key length and facilitate secure key sharing among multiple mobile devices. The proposed method offers enhanced security and reliability compared to conventional data encryption methods provided by cloud storage service providers, with minimal interaction data and increased confidence level. It holds significant practical value and exhibits a wide range of potential applications in the field of cloud storage security technology.

An effective revocable and traceable public auditing scheme for sensor-based urban cities

The various data collected by urban sensor devices need a huge storage space. The cloud’s powerful calculation ability provides decent performance support and reduces the overhead on local storage. There are many kinds of data collected by urban sensor devices, and the same kind of sensors often need to upload large numbers of files together, which are usually private, so secure cloud storage in group members is essential. However, the cloud may try to modify or hide data for its own benefit, which requires the detection of a third-party auditor. This paper puts forward a new public audit scheme. Some changes have been made to the way of generating the private key, the parameters of key generation come from the feature information set of the same sensor. When the two information sets are close enough, the correctness of the authenticator generated by this file can be verified. When the sensor is revoked due to damage or loss, this scheme will effectively revoke and regenerate the private key with less overhead, thus preventing the leakage of data privacy. This also avoids the huge overhead caused by re-downloading data to generate authenticators in traditional schemes. In addition, our scheme is effective in tracking malicious members and reducing the computing overhead of the group. Finally, the experimental results show the effectiveness and practicality of the proposed scheme.

Phish Block: A Blockchain Framework for Phish Detection in Cloud

The data in the cloud is protected by various mechanisms to ensure security aspects and user’s privacy. But, deceptive attacks like phishing might obtain the user’s data and use it for malicious purposes. In Spite of much technological advancement, phishing acts as the first step in a series of attacks. With technological advancements, availability and access to the phishing kits has improved drastically, thus making it an ideal tool for the hackers to execute the attacks. The phishing cases indicate use of foreign characters to disguise the original Uniform Resource Locator (URL), typosquatting the popular domain names, using reserved characters for re directions and multi-chain phishing. Such phishing URLs can be stored as a part of the document and uploaded in the cloud, providing a nudge to hackers in cloud storage. The cloud servers are becoming the trusted tool for executing these attacks. The prevailing software for blacklisting phishing URLs lacks the security for multi-level phishing and expects security from the client’s end (browser). At the same time, the avalanche effect and immutability of block-chain proves to be a strong source of security. Considering these trends in technology, a block-chain based filtering implementation for preserving the integrity of user data stored in the cloud is proposed. The proposed Phish Block detects the homographic phishing URLs with accuracy of 91% which assures the security in cloud storage.

A comprehensive survey of cloud computing, encompassing architectures, data storage, services, security, and applications

Generally, enterprises store data in internal storage and establish firewalls to protect against intruders attempting to access the data. In cloud computing, data is stored in storage provided by service providers. Information privacy protection involves storing data in encrypted form. The cloud system is responsible for both storage and the encryption or decryption of data, allowing system administrators to access encrypted data and decryption keys. This capability poses a risk to information privacy as it enables unauthorized access to information. This survey discusses Data Storage in Cloud Computing, focusing on the concept of storing encryption and decryption services alongside the storage service. Additionally, the survey examines storage system architecture, security challenges, services, and user application systems to provide a comparison of various cloud models. In addition to the fundamental aspects of data storage and encryption, this survey delves into the evolving landscape of cloud computing, addressing the dynamic nature of storage system architectures. Enterprises increasingly rely on cloud service providers for scalable and flexible storage solutions, prompting a critical examination of the security challenges associated with this paradigm shift. The survey examines how storage services in different cloud models affect user applications and privacy. It stresses the importance of understanding cloud providers' services amidst evolving technology and growing threats. The study delves into trends like edge computing and distributed storage, evaluating their impact on cloud storage security. Overall, it aims to provide a comprehensive overview for enterprises and researchers to make informed decisions on data security in Cloud Computing.

ABOUT PECULIARITIES OF USING OF ELECTRONIC DIGITAL SIGNATURE IN CONCLUSION OF CIVIL CONTRACTS IN THE INTERNET

There are discussed in the article the features of using an electronic signature when concluding civil law contracts on the Internet. Particular attention is paid to the positive aspects of the use of electronic signature. The scientific article is based on the analysis of relevant legal sources: the Civil Code of Ukraine, the Law of Ukraine “On Electronic Commerce”, the Law of Ukraine “On Electronic Documents and Electronic Document Flow”, the Law of Ukraine “On Electronic Trust Services”, etc. The article notes that EDS are recognized as legally binding and have the same legal force as ordinary paper signatures. This means that contracts concluded using EDS have full legal force and can be enforced in court. The article states that the use of EDS can significantly reduce the time and effort associated with the process of concluding contracts. There is no need for the physical presence of the parties, sending paper copies and waiting for their delivery. It is noted in the article that EDS simplifies the preservation and archiving of contracts. Electronic documents can be stored electronically on secure servers or cloud storage, which provides convenient access to them at any time. It is noted in the article that EDS is an international standard for ensuring the authenticity and integrity of electronic documents. EDS allows you to conclude contracts and conduct business transactions at the international level, minimizing barriers associated with geographical distance and various legal systems. In particular, the article highlights other features of signing the EDS of civil law contracts concluded on the Internet. It is noted that EDS remains a relevant and important tool for concluding contracts in the modern information society, especially on the Internet.

Improved identity-based proxy-oriented outsourcing with public auditing for secure cloud storage

Improved identity-based proxy-oriented outsourcing with public auditing for secure cloud storage

Improved identity-based proxy-oriented outsourcing with public auditing for secure cloud storage

Improved identity-based proxy-oriented outsourcing with public auditing for secure cloud storage

EPPDP: An Efficient Privacy-Preserving Data Possession With Provable Security in Cloud Storage

With the advancement in technology and the field of cloud computing, many enterprises prefer outsourcing their storage in a public cloud to minimize the maintenance and burden of storing data. Therefore, the data are being stored on remote storage servers without keeping a local copy of the data to perform their core business. However, in the absence of any local copy of data with the data owner, the physical control over the data and possession of data is restrained. Hence, it is essential to achieve privacy in the stored data. Further, while the data user would like to access the data for future use, it needs to preserve its integrity. In this article, we have proposed a low-cost and provably secure data possession scheme in a cloud store.

SAUSA: Securing Access, Usage, and Storage of 3D Point CloudData by a Blockchain-Based Authentication Network

The rapid development of three-dimensional (3D) acquisition technology based on 3D sensors provides a large volume of data, which are often represented in the form of point clouds. Point cloud representation can preserve the original geometric information along with associated attributes in a 3D space. Therefore, it has been widely adopted in many scene-understanding-related applications such as virtual reality (VR) and autonomous driving. However, the massive amount of point cloud data aggregated from distributed 3D sensors also poses challenges for secure data collection, management, storage, and sharing. Thanks to the characteristics of decentralization and security, Blockchain has great potential to improve point cloud services and enhance security and privacy preservation. Inspired by the rationales behind the software-defined network (SDN) technology, this paper envisions SAUSA, a Blockchain-based authentication network that is capable of recording, tracking, and auditing the access, usage, and storage of 3D point cloud datasets in their life-cycle in a decentralized manner. SAUSA adopts an SDN-inspired point cloud service architecture, which allows for efficient data processing and delivery to satisfy diverse quality-of-service (QoS) requirements. A Blockchain-based authentication framework is proposed to ensure security and privacy preservation in point cloud data acquisition, storage, and analytics. Leveraging smart contracts for digitizing access control policies and point cloud data on the Blockchain, data owners have full control of their 3D sensors and point clouds. In addition, anyone can verify the authenticity and integrity of point clouds in use without relying on a third party. Moreover, SAUSA integrates a decentralized storage platform to store encrypted point clouds while recording references of raw data on the distributed ledger. Such a hybrid on-chain and off-chain storage strategy not only improves robustness and availability, but also ensures privacy preservation for sensitive information in point cloud applications. A proof-of-concept prototype is implemented and tested on a physical network. The experimental evaluation validates the feasibility and effectiveness of the proposed SAUSA solution.

PPTPS: Building privacy-preserving auditable service with traceable timeliness for public cloud storage.

Many works are designed to improve efficiency or enhance security and privacy of publicly-auditable cloud storage. However, building timeliness for cloud storage has not been well studied. Few works presented time-sensitive cloud storage and only focused on specific issues, such as the earliest creation time of files or resistance against a procrastinating auditor. Therefore, there leaves an absence of building traceable timeliness for publicly-auditable cloud storage. In this paper, we propose a solution PPTPS to build Privacy-Preserving auditable service with Traceable timeliness for Public cloud Storage. First, we use the security properties of the blockchain to provide a time-stamp for each phase. It enables the timeliness of cloud storage. Second, we construct efficient publicly-verifiable cloud storage. Third, a customized random mask solution is proposed to prevent privacy leakage during the auditing phase. Moreover, we formally proved the security of PPTPS. At last, experimental results demonstrate that PPTPS is economically sound and technically viable.

A Decentralized Public Auditing Scheme for Secure Cloud Storage Based on Blockchain

The cloud storage service has brought great convenience to the customer, which can save massive storage and computation resources via outsourcing the data to cloud service provider (CSP). However, the security issues are the biggest challenge such as data integrity. The user can verify the integrity of outsourced data through a remote data auditing solution without retrieving original data from cloud, however, the auditing procedure has heavy computational overhead, which employs third party auditor (TPA) to conduct auditing task on behalf of users. In this paper, we propose a decentralized public auditing scheme for cloud storage based on blockchain, which removes TPA and increases the number of CSP, the auditing task was assigned to multiple CSPs, and the blockchain technology was used to record the audit process. Meanwhile, the structure of e-voting system is utilized to realize the audit result statistics of multiple CSPs via smart contract, which enhanced the credibility and stability of final auditing result. The theoretical analysis and experimental results demonstrate that proposed scheme is secure and efficient.