scholarly journals eTPM: A Trusted Cloud Platform Enclave TPM Scheme Based on Intel SGX Technology

Sensors ◽  
2018 ◽  
Vol 18 (11) ◽  
pp. 3807 ◽  
Author(s):  
Haonan Sun ◽  
Rongyu He ◽  
Yong Zhang ◽  
Ruiyun Wang ◽  
Wai Hung Ip ◽  
...  
Keyword(s):  
Virtual Machines ◽  
Trusted Computing ◽  
Information Leakage ◽  
Research Topic ◽  
Cloud Environment ◽  
Cloud Platform ◽  
Computing Technology ◽  
Security Issues ◽  
Runtime Environment ◽  
Cloud Users

Today cloud computing is widely used in various industries. While benefiting from the services provided by the cloud, users are also faced with some security issues, such as information leakage and data tampering. Utilizing trusted computing technology to enhance the security mechanism, defined as trusted cloud, has become a hot research topic in cloud security. Currently, virtual TPM (vTPM) is commonly used in a trusted cloud to protect the integrity of the cloud environment. However, the existing vTPM scheme lacks protections of vTPM itself at a runtime environment. This paper proposed a novel scheme, which designed a new trusted cloud platform security component, ‘enclave TPM (eTPM)’ to protect cloud and employed Intel SGX to enhance the security of eTPM. The eTPM is a software component that emulates TPM functions which build trust and security in cloud and runs in ‘enclave’, an isolation memory zone introduced by SGX. eTPM can ensure its security at runtime, and protect the integrity of Virtual Machines (VM) according to user-specific policies. Finally, a prototype for the eTPM scheme was implemented, and experiment manifested its effectiveness, security, and availability.

A Two-Phase Load Balancing Algorithm for Cloud Environment

2021 ◽  
Vol 13 (1) ◽  
pp. 38-55
Author(s):  
Archana Singh ◽  
Rakesh Kumar
Keyword(s):  
Load Balancing ◽  
Data Center ◽  
Virtual Machines ◽  
Second Phase ◽  
Cloud Environment ◽  
Cloud Platform ◽  
Efficient Utilization ◽  
Two Phase ◽  
Excessive Load ◽  
Load Balancing Algorithm

Load balancing is the phenomenon of distributing workload over various computing resources efficiently. It offers enterprises to efficiently manage different application or workload demands by allocating available resources among different servers, computers, and networks. These services can be accessed and utilized either for home use or for business purposes. Due to the excessive load on the cloud, sometimes it is not feasible to offer all these services to different users efficiently. To solve this excessive load issue, an efficient load balancing technique is used to offer satisfactory services to users as per their expectations also leading to efficient utilization of resources and applications on the cloud platform. This paper presents an enhanced load balancing algorithm named as a two-phase load balancing algorithm. It uses a two-phase checking load balancing approach where the first phase is to divide all virtual machines into two different tables based on their state, that is, available or busy while in the second phase, it equally distributes the loads. The various parameters used to measure the performance of the proposed algorithm are cost, data center processing time, and response time. Cloud analyst simulation tool is used to simulate the algorithm. Simulation results demonstrate superiority of the algorithm with existing ones.

Receiver Initiated Deadline Aware Load Balancing Strategy (RDLBS) for Cloud Environment

2017 ◽  
Vol 8 (3) ◽  
pp. 53-73
Author(s):  
Raza Abbas Haidri ◽  
Chittaranjan Padmanabh Katti ◽  
Prem Chandra Saxena
Keyword(s):  
Cloud Computing ◽  
Performance Evaluation ◽  
Load Balancing ◽  
Virtual Machines ◽  
Turnaround Time ◽  
Cloud Environment ◽  
Computing Technology ◽  
Trade Off ◽  
The Cost ◽  
State Of Art

The emerging cloud computing technology is the attention of both commercial and academic spheres. Generally, the cost of the faster resource is more than the slower ones, therefore, there is a trade-off between deadline and cost. In this paper, the authors propose a receiver initiated deadline aware load balancing strategy (RDLBS) which tries to meet the deadline of the requests and optimizes the rate of revenue. RDLBS balances the load among the virtual machines (VMs) by migrating the request from the overloaded VMs to underloaded VMs. Turnaround time is also computed for the performance evaluation. The experiments are conducted by using CloudSim simulator and results are compared with existing state of art algorithms with similar objectives.

scholarly journals Load balancing in Cloud Computing: Issues and Challenges

2021 ◽  
Vol 12 (2) ◽  
pp. 3224-3231
Author(s):  
K. Balaji, Et. al.
Keyword(s):  
Cloud Computing ◽  
Load Balancing ◽  
Load Distribution ◽  
Data Centers ◽  
Job Scheduling ◽  
Virtual Machines ◽  
Cloud Services ◽  
Cloud Environment ◽  
Computing Technology ◽  
Load Balancer

The evolution of IT led Cloud computing technology emerge as a new prototype in providing the services to its users on rented basis at any time or place. Considering the flexibility of cloud services, innumerable organizations switched their businesses to the cloud technology by setting up more data centers. Nevertheless, it has become mandatory to provide profitable execution of tasks and appropriate  resource utilization. A few approaches were outlined in literature to enhance performance, job scheduling, storage resources, QoS and load distribution. Load balancing concept permits data centers to avert over-loading or under-loading in virtual machines that as such is an issue in cloud computing domain. Consequently, it necessitate the researchers to layout and apply a proper load balancer for cloud environment. The respective study represents a view of problems and threats faced by the current load balancing techniques and make the researchers find more efficient algorithms.

scholarly journals Load balancing in Cloud Computing: Issues and Challenges

2021 ◽  
Vol 12 (2) ◽  
pp. 3077-3084
Author(s):  
K. Balaji , Et. al.
Keyword(s):  
Cloud Computing ◽  
Load Balancing ◽  
Load Distribution ◽  
Data Centers ◽  
Job Scheduling ◽  
Virtual Machines ◽  
Cloud Services ◽  
Cloud Environment ◽  
Computing Technology ◽  
Load Balancer

The evolution of IT led Cloud computing technology emerge as a new prototype in providing the services to its users on rented basis at any time or place. Considering the flexibility of cloud services, innumerable organizations switched their businesses to the cloud technology by setting up more data centers. Nevertheless, it has become mandatory to provide profitable execution of tasks and appropriate  resource utilization. A few approaches were outlined in literature to enhance performance, job scheduling, storage resources, QoS and load distribution. Load balancing concept permits data centers to avert over-loading or under-loading in virtual machines that as such is an issue in cloud computing domain. Consequently, it necessitate the researchers to layout and apply a proper load balancer for cloud environment. The respective study represents a view of problems and threats faced by the current load balancing techniques and make the researchers find more efficient algorithms.

scholarly journals Reliablity in the Fog Computing

10.29007/nc47 ◽  
2018 ◽  
Author(s):  
Manu Sharma
Keyword(s):  
Cloud Computing ◽  
Data Storage ◽  
Fog Computing ◽  
Cloud Environment ◽  
End User ◽  
Computing Technology ◽  
Digital Innovation ◽  
Security Issues ◽  
Remote Server ◽  
The World

In the world of Digital Innovation “Cloud Computing” is not just a word or a technology but a paramount to the organizations now days. Because it is not easy to store, compute the data on an internet and central remote server to manage a huge bulk of data and information. It is well known that cloud computing provides data, storage of data, computation of data to the end user also by providing the services to the end users by the different applications. So, now the Fog Computing Is generally a concept to extend the cloud computing technology as it also does the same function which cloud computing functionality as well. It is not the replacement but the enhanced version of cloud which provides a security on the cloud environment by isolating user’s data which is saved on the Edge Devices. Fog Computing enables a user to save their data to nearby devices. In this paper the security issues also the technology which is used for security in this enhanced concept of cloud is mentioned.

Mobile Security and Trusted Computing (Mobile Sicherheit und vertrauenswürdiges Rechnen)

2006 ◽  
Vol 48 (6) ◽  
Author(s):  
Chris Mitchell
Keyword(s):  
Mobile Computing ◽  
Mobile Devices ◽  
Emerging Technologies ◽  
Trusted Computing ◽  
Mobile Security ◽  
Computing Technology ◽  
Security Issues ◽  
Prior Relationship

Some of the most significant security issues arising in the context of ubiquitous mobile computing are reviewed. Emerging technologies which may be able to help overcome these security problems are also described; in particular we consider methods for secure ‘imprinting’ of mobile devices, techniques proposed for establishing trust between devices with no prior relationship, and finally the relevance of trusted computing technology to mobile security issues.

Enhancing the Browser-Side Context-Aware Sanitization of Suspicious HTML5 Code for Halting the DOM-Based XSS Vulnerabilities in Cloud

2018 ◽  
pp. 216-247
Author(s):  
B. B. Gupta ◽  
Shashank Gupta ◽  
Pooja Chaudhary
Keyword(s):  
Real World ◽  
Experimental Evaluation ◽  
Web Application ◽  
Web Applications ◽  
Virtual Machines ◽  
Context Aware ◽  
Cloud Environment ◽  
Cloud Platform ◽  
Dom Tree

This article presents a cloud-based framework that thwarts the DOM-based XSS vulnerabilities caused due to the injection of advanced HTML5 attack vectors in the HTML5 web applications. Initially, the framework collects the key modules of web application, extracts the suspicious HTML5 strings from the latent injection points and performs the clustering on such strings based on their level of similarity. Further, it detects the injection of malicious HTML5 code in the script nodes of DOM tree by detecting the variation in the HTML5 code embedded in the HTTP response generated. Any variation observed will simply indicate the injection of suspicious script code. The prototype of our framework was developed in Java and installed in the virtual machines of cloud environment on the Google Chrome extension. The experimental evaluation of our framework was performed on the platform of real world HTML5 web applications deployed in the cloud platform.

A Survey on Insider Attacks in IAAS-Based Cloud

2019 ◽  
pp. 28-51
Keyword(s):  
Cloud Computing ◽  
Literature Review ◽  
Trusted Computing ◽  
Cloud Environment ◽  
Remote Attestation ◽  
Cloud Computing Security ◽  
Security Issues ◽  
Virtualization Technology ◽  
Problems And Solutions

This chapter provides a literature review and the related work about the insider attacks and solutions in cloud environment. The authors classified solutions into three categories: trusted computing-based approaches, encryption-based approaches, and virtualization-based approaches. The trusted computing approaches use remote attestation, sealed storage, and integrity measurement. Encryption-based approaches use the cryptographic operations along with cloud computing security mechanisms and policies. Virtualization-based approaches use the virtualization technology to solve critical security issues using trusted computing approaches. At the end of this chapter, they compare various solutions and summarize the problems and solutions.

Enhancing the Browser-Side Context-Aware Sanitization of Suspicious HTML5 Code for Halting the DOM-Based XSS Vulnerabilities in Cloud

2017 ◽  
Vol 7 (1) ◽  
pp. 1-31 ◽  
Author(s):  
B.B. Gupta ◽  
Shashank Gupta ◽  
Pooja Chaudhary
Keyword(s):  
Real World ◽  
Experimental Evaluation ◽  
Web Application ◽  
Web Applications ◽  
Virtual Machines ◽  
Context Aware ◽  
Cloud Environment ◽  
Cloud Platform ◽  
Dom Tree

This article presents a cloud-based framework that thwarts the DOM-based XSS vulnerabilities caused due to the injection of advanced HTML5 attack vectors in the HTML5 web applications. Initially, the framework collects the key modules of web application, extracts the suspicious HTML5 strings from the latent injection points and performs the clustering on such strings based on their level of similarity. Further, it detects the injection of malicious HTML5 code in the script nodes of DOM tree by detecting the variation in the HTML5 code embedded in the HTTP response generated. Any variation observed will simply indicate the injection of suspicious script code. The prototype of our framework was developed in Java and installed in the virtual machines of cloud environment on the Google Chrome extension. The experimental evaluation of our framework was performed on the platform of real world HTML5 web applications deployed in the cloud platform.

Research and Analysis of Intrusion Prevention Based on Trusted in Cloud Environment

2014 ◽  
Vol 644-650 ◽  
pp. 1887-1890
Author(s):  
Shuang Tu Wang ◽  
Jun Luo
Keyword(s):  
Large Scale ◽  
Trusted Computing ◽  
Cloud Environment ◽  
It Use ◽  
Intrusion Prevention ◽  
Prevention Services ◽  
The Status ◽  
Safe Limit ◽  
And Cluster Analysis ◽  
Cloud Users

Cloud computing has a nature of dynamic, virtualization and opening since it made. All kinds of large-scale cloud security incidents makes frequent cloud environment safety has been questioned. In order to ensure the security of cloud environments, intrusion prevention technologies trusted computing ideas proposed by combining intrusion prevention framework model based on trusted computing environment under a cloud. The model departure from the principle of intrusion prevention, access to behavioral characteristics, and then gradually normalize these features determine the weight of each feature heavy user node's credibility after the draw. Then it use a variety of cloud cluster server engine to detect defense and integrated decision analysis and cluster analysis to make timely cloud fast, and change the traditional intrusion prevention for their own business, to detect the status of the defense lag for cloud users with the maximum safe limit intrusion prevention services, but also to ensure that the cloud can withstand attacks, so the cloud and cloud users bidirectional safety effects.

Sign in / Sign up

Export Citation Format

Share Document