A Secure Cloud Computing System by Using Encryption and Access Control Model
2
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
Cloud computing is the concept of providing information technology services on the Internet, such as software,hardware, networking, and storage. These services can be accessed anywhere at any time on a pay-per-use basis. However, storing data on servers is a challenging aspect of cloud computing. This paper utilizes cryptographyand access control to ensure the confidentiality, integrity, and proper control of access to sensitive data. Wepropose a model that can protect data in cloud computing. Our model is designed by using an enhanced RSAencryption algorithm and a combination of role-based access control model with extensible access controlmarkup language (XACML) to facilitate security and allow data access. This paper proposes a model that usescryptography concepts to store data in cloud computing and allows data access through the access controlmodel with minimum time and cost for encryption and decryption.
Abstract
Cloud computing is the concept of providing information technology services on the Internet, such as software,hardware, networking, and storage. These services can be accessed anywhere at any time on a pay-per-use basis. However, storing data on servers is a challenging aspect of cloud computing. This paper utilizes cryptographyand access control to ensure the confidentiality, integrity, and proper control of access to sensitive data. Wepropose a model that can protect data in cloud computing. Our model is designed by using an enhanced RSAencryption algorithm and a combination of role-based access control model with extensible access controlmarkup language (XACML) to facilitate security and allow data access. This paper proposes a model that usescryptography concepts to store data in cloud computing and allows data access through the access controlmodel with minimum time and cost for encryption and decryption.
참고문헌 (30)
- E. F. Coutinho, "Elasticity in cloud computing: a survey", Annals of Telecommunications, 70(7-8), pp.289~309 (2015)
- X. Liu, "A distributed management method in cloud computing environment", International Journal of Hybrid Information Technology, 9(5), pp.371~380 (2016)
- J. Carretero, "Introduction to cloud computing : platforms and solutions", Cluster Computing, 17(4), pp.1225~1229 (2014)
- C. N. Hofer, "Cloud computing services : taxonomy and comparison", Journal of Internet Services and Applications, 2(2), pp.81~94 (2011)
- S. Carlin, "Pervasive and Ubiquitous Technology Innovations for Ambient Intelligence Environments", pp.12~17 (2013), Information Science Reference
- G. Wang, "Hierarchical attribute-based encryption and scalable user revocation for sharing data in cloud servers", Computers & Security, 30(5), pp.320~331 (2011)
- W. Elsayed, "Access control models for pervasive environments: a survey", The 1st International Conference on Advanced Intelligent System and Informatics (AISI2015), pp.511~522 (2016), Springer
- Y. A. Younis, "An access control model for cloud computing", Journal of Information Security and Applications, 19(1), pp.45~60 (2014)
- L. Zhou, "Achieving secure role-based access control on encrypted data in cloud storage", IEEE Transactions on Information Forensics and Security, 8(12), pp.1947~1960 (2013)
- D. Wei, "Application layer security proxy for smart Grid substation automation systems", Proceedings of 2013 IEEE PES Innovative Smart Grid Technologies Conference (ISGT), pp.1~6 (2013)
- D. Wei, "Protecting smart grid automation systems against cyberattacks", IEEE Transactions on Smart Grid, 2(4), pp.782~795 (2011)
- T. Zhu, "An efficient role based access control system for cloud computing", Proceedings of 2011 IEEE 11th International Conference on Computer and Information Technology, pp.97~102 (2011)
- E. E. Mon, "The privacy-aware access control system using attribute-and role-based access control in private cloud", Proceedings of 2011 4th IEEE International Conference on Broadband Network and Multimedia Technology, pp.447~451 (2011)
- B. Wang, "DRBAC based access control method in substation automation system", Proceedings of 2008 IEEE International Conference on Industrial Technology, pp.1~5 (2008)
- D. Rosic, "Role-based access control model supporting regional division in smart grid system", Proceedings of 2013 5th International Conference on Computational Intelligence, Communication Systems and Networks, pp.197~201 (2013)
- Secure computer system: unified exposition and multics interpretation, "D. E. Bell", MITRE Corp Bedford, ~, pp.Report No. MTR-2997-REV-1 (1976)
- E. J. Goh, "SiRiUS: securing remote untrusted storage", Proceedings of the Network and Distributed System Security Symposium (NDSS), pp.131~145 (2003)
- G. Ateniese, "Improved proxy re-encryption schemes with applications to secure distributed storage", ACM Transactions on Information and System Security(TISSEC), 9(1), pp.1~30 (2006)
- H. Shirvani, "Storing shared documents that are customized by users in cloud computing", Computing, 98(11), pp.1137~1151 (2016)
- X. Lei, "Securely and efficiently perform large matrix rank decomposition computation via cloud computing", Cluster Computing, 18(2), pp.989~997 (2015)
- M. Y. Shabir, "Analysis of classical encryption techniques in cloud computing", Tsinghua Science and Technology, 21(1), pp.102~113 (2016)
- D. F. Ferraiolo, "A role-based access control model and reference implementation within a corporate intranet", ACM Transactions on Information and System Security(TISSEC), 2(1), pp.34~64 (1999)
- K. Hasebe, "Capability-based delegation model in RBAC", Proceedings of the 15th ACM Symposium on Access Control Models and Technologies, pp.109~118 (2010)
- V. C. Hu, "Guidelines for Access Control System Evaluation Metrics", US Department of Commerce, National Institute of Standards and Technology, ~ (2012)
- G. S. Mahmood, "Data security protection in cloud using encryption and authentication", Journal of Computational and Theoretical Nanoscience, 14(4), pp.1801~1804 (2017)
- A. D. Keromytis, "Requirements for scalable access control and security management architectures", ACM Transactions on Internet Technology (TOIT), 7(2) (2007)
- M. Ouedraogo, "Security transparency: the next frontier for security research in the cloud", Journal of Cloud Computing, 4(1) (2015)
- R. L. Rivest, "A method for obtaining digital signatures and public-key cryptosystems", Communications of the ACM, 21(2), pp.120~126 (1978)
- X. Yi, "Homomorphic Encryption and Applications" (2014), Springer
- D. F. Ferraiolo, "Proposed NIST standard for role-based access control", ACM Transactions on Information and System Security (TISSEC), 4(3), pp.224~274 (2001)