Steganographic Authentication in Cloud Storage for Mitigation of Security Risks

In earlier banking systems, the data owners were unable to access or update their financial information. Nowadays, user financial information is stored in Cloud storage instead of traditional storage, but security risks are high in financial sectors. Sometimes, Cloud services providers and public auditors modify the user sensitive attribute values. Hence, the decentralized storage system is required for providing better security and integrity of user sensitive attribute values. Blockchain is a decentralized technology for providing tamper-proof storage for sensitive attribute values. Hence, the account holder information is segregated as sensitive and non-sensitive attributes. Before storing into off-chain mode of blocks, the sensitive attributes are grouped into ‘n' number of groups and encrypted by separate group key. The non-encrypted, non-sensitive attributes are stored in cloud storage. The access information is stored in the on-chain mode of the block for easy monitoring. Hence, the security and integrity of sensitive information are preserved.

Download Full-text

METHOD TO ACHIEVE SECURITY AND STORAGE SERVICES IN CLOUD COMPUTING

International Journal of Communication Networks and Security ◽

10.47893/ijcns.2013.1077 ◽

2013 ◽

pp. 10-13

Author(s):

SYED SADDAM HUSSAIN ◽

R.VINOD KUMAR

Keyword(s):

Cloud Storage ◽

Distributed Storage ◽

Security Risks ◽

Cloud Data ◽

Outsourced Data ◽

Cloud Storage Service ◽

Byzantine Failure ◽

Storage Correctness ◽

Cloud Applications ◽

And Storage

Cloud storage enables users to remotely store their data and enjoy the on-demand high quality cloud applications without the burden of local hardware and software management. Though the benefits are clear, such a service is also relinquishing users ‘physical possession of their outsourced data, which inevitably poses new security risks toward the correctness of the data in cloud. In order to address this new problem and further achieve a secure and dependable cloud storage service, we propose in this paper a flexible distributed storage integrity auditing mechanism, utilizing the homomorphism token and distributed erasure-coded data. The proposed design allows users to audit the cloud storage with very lightweight communication and computation cost. The auditing result not only ensures strong cloud storage correctness guarantee, but also simultaneously achieves fast data error localization, i.e., the identification of misbehaving server. Considering the cloud data are dynamic in nature, the proposed design further supports secure and efficient dynamic operations on outsourced data, including block modification, deletion, and append. Analysis shows the proposed scheme is highly efficient and resilient against Byzantine failure, malicious data modification attack, and even server colluding attacks)

Download Full-text

DATABASE SECURITY AND STUDY OF DATA ENCRYPTION METHODS IN CLOUD STORAGE

Системи управління навігації та зв’язку Збірник наукових праць ◽

10.26906/sunz.2020.3.104 ◽

2020 ◽

Vol 3 (61) ◽

pp. 104-106

Author(s):

Ye. Shcherbinina ◽

B. Martseniuk ◽

A. Filonenko

Keyword(s):

Data Storage ◽

Cloud Storage ◽

Database Security ◽

Data Encryption ◽

Security Risks ◽

The Past ◽

Database Encryption ◽

Cloud Providers ◽

Encryption Schemes ◽

Past Data

Purpose of the article is discusses the importance of database encryption and makes an in depth review of various encryption techniques. Security of Data is the most important task in today’s world. Governments, companies and other organizations have lost a lot of money and many others have closed down due to the activities of dubious hackers and attackers. Over the years various encryption schemes have been developed in order to protect the database from various attacks by the intruders. As data is the life wire of every organization, there is the need to remotely and securely store the data generated daily by these organizations in order to enable them recover quickly in the event of attach and hack. Cloud storage is needed here for the remote data storage. For many establishments, data security is one of their major concern when sending their files into the cloud. They worry about their files being seen or even compromised by malicious and dubious people because that’s what happened in the past. Data encryption techniques are required to protect the integrity of the stored data. In the past, many businesses felt comfortable allowing the cloud providers to manage all their data, believing that security risks could be managed through contracts, controls and audits. Over time it has become apparent, however, that cloud providers cannot honor such commitments when responding to government requests for information. This paper discuses, the importance of database encryption and makes an in depth review of various encryption techniques

Download Full-text

Certificateless Public Verification for the Outsourced Data Integrity in Cloud Storage

Journal of Circuits System and Computers ◽

10.1142/s0218126618501815 ◽

2018 ◽

Vol 27 (11) ◽

pp. 1850181 ◽

Cited By ~ 4

Author(s):

Longxia Huang ◽

Junlong Zhou ◽

Gongxuan Zhang ◽

Jin Sun ◽

Tian Wang ◽

...

Keyword(s):

Cloud Storage ◽

Public Key Cryptography ◽

Public Key ◽

Security Risks ◽

Certificateless Public Key Cryptography ◽

Outsourced Data ◽

Integrity Checking ◽

Data Owner ◽

Verification Process ◽

Public Verification

By advances in cloud storage systems, users have access to the data saved in the cloud and can manipulate the data without limitation of time and place. As the data owner no longer possesses data physically, he is required to ensure the integrity of the data stored in the cloud with the public key given by public key infrastructure (PKI). Thus the security of PKI and certificates are essential. However, there are numerous security risks in the traditional PKI and it is complex to administer the certificates. Certificateless public key cryptography is used in this paper to solve these problems. We also use elliptic curve group to reduce computation overhead. In this paper, we design a certificateless public verification mechanism to check the integrity of data outsourced in the cloud and we further extend it to support a multiuser group by batch verification. Specifically, a public verifier who replaces the data owner to check the integrity in the proposed scheme does not require to manage any certificates during the verification process. Meanwhile, a verifier is not required to download the entire file for integrity checking. Theoretical analyses verify the security of our scheme and experimental results show its efficiency.

Download Full-text