On Making Cloud More Secure and Trustworthy

Tanmaya Kumar Das; Sasmita Mishra; Hari Narayan Pratihari

doi:10.46243/jst.2022.v7.i05.pp148-159

Authors

Tanmaya Kumar Das
Sasmita Mishra
Hari Narayan Pratihari

DOI:

https://doi.org/10.46243/jst.2022.v7.i05.pp148-159

Keywords:

Cloud Architecture, Cloud Security, Hybrid Cloud, Zero Trust Model, Cloud Security Design Principles

Abstract

Cloud computing has grown in popularity as a result of recent advancements in technology. Academics and businesses alike place a high value on computing because of the abundance of data and the emergence of new AI paradigms. The problems of scalability and availability were quickly solved by cloud computing. However difficult it has been, cloud service providers have managed to provide low-cost options. Although servers may delete rarely viewed files to save space, certain cloud firms protect data integrity. However, they can't control server and network difficulties, thus they can't guarantee data availability. Customer data integrity, availability and exposure are feared by customers. Amazon S3 and Amazon EC2, Gmail email deletion, and the Sidekick cloud disaster validated customers' concerns. – Amazon.com A customer's primary concern is the safety of their personal information. Trust and security are handled by cloud companies. Proof and data are difficult to obtain. This paper describes the security principles and security measures of the cloud environments and presents some of the security assessment criteria based upon the deployment aspects of the cloud based application services in the autonomous environment.

References

Ahmad, F., Franqueira, V.N.L., Adnane, A.: TEAM: a trust evaluation and management framework in context-enabled vehicular ad-hoc networks. IEEE Access 6, 28643–28660 (2018)

Ding, D., Han, Q., Wang, Z., Ge, X.: A survey on model-based distributed control and filtering for industrial cyber-physical systems. IEEE Trans. Ind. Inf. 15(5), 2483–2499 (2019)

Fawcett, L., Scott-Hayward, S., Broadbent, M., Wright, A., Race, N.: Tennison: a distributed SDN framework for scalable network security. IEEE J. Sel. Areas Commun. 36(12), 2805–2818 (2018)

Huang, K., Zhou, C., Tian, Y., Yang, S., Qin, Y.: Assessing the physical impact of cyberattacks on industrial cyber-physical systems. IEEE Trans. Ind. Electron. 65(10), 8153–8162 (2018)

Indu, I., Rubesh Anand, P., Bhaskar, V.: Identity and access management in cloud environment: Mechanisms and challenges. Eng. Sci. Technol. Int. J. 21(4), 574–588 (2018)

International Data Spaces association: IDS reference architecture model industrial data space (2018). https://www.fraunhofer.de/content/dam/zv/de/Forschungsfelder/industrial-data-space/IDS_Referenz_Architecture.pdf. Version 2.0

Li, R., Shen, C., He, H., Gu, X., Xu, Z., Xu, C.: A lightweight secure data sharing scheme for mobile cloud computing. IEEE Trans. Cloud Comput. 6(2), 344–357 (2018)

Lin, H., Yan, Z., Chen, Y., Zhang, L.: A survey on network security-related data collection technolo- gies. IEEE Access 6, 18345–18365 (2018)

Lopez, D., Lopez, E., Dunbar, L., Strassner, J., Kumar, R.: Framework for interface to network secu- rity functions. IETF RFC 8329 (2018). https://tools.ietf.org/pdf/rfc8329

Nespoli, P., Papamartzivanos, D., Marmol, F.G., Kambourakis, G.: Optimal countermeasures selec- tion against cyber attacks: a comprehensive survey on reaction frameworks. IEEE Commun. Surv. Tutor. 20(2), 1361–1396 (2018)

Network functions virtualisation (nfv); terminology for main concepts in nfv. ETSI GS NFV 003 (2018). https://www.etsi.org/deliver/etsi_gs/NFV/001_099/003/01.04.01_60/gs_nfv003v010401p. pdf. V1.4.1 Page | 158

Open command and control (OpenC2) (2019). Language Specification Version 1.0, Committee Specification 02

Open command and control (OpenC2) profile for stateless packet filtering (2019). Version 1.0, Committee Specification 01

Rapuzzi, R., Repetto, M.: Building situational awareness for network threats in fog/edge computing: emerging paradigms beyond the security perimeter model. Fut. Gener. Comput. Syst. 85, 235–249 (2018). https://doi.org/10.1016/j.future.2018.04.007

Repetto, M., Carrega, A., Lamanna, G.: An architecture to manage security services for cloud appli- cations. In: 4th IEEE International Conference on Computing, Communication & Security (ICCCS- 2019), pp. 1–8 (2019)

Repetto, M., Carrega, A., Rapuzzi, R.: An architecture to manage security operations for digital ser- vice chains. Fut. Gener. Comput. Syst. 115, 251–266 (2021)

Sciancalepore, S., Piro, G., Caldarola, D., Boggia, G., Bianchi, G.: On the design of a decentralized and multi-authority access control scheme in federated and cloud-assisted Cyber-Physical Systems. IEEE Internet Things J. 5(6), 5190–5204 (2018). https://doi.org/10.1109/JIOT.2018.2864300

Specification for transfer of OpenC2 messages via https (2019). Version 1.0, Committee Specifica- tion 01

Vinayakumar, R., Alazab, M., Soman, K.P., Poornachandran, P., Al-Nemrat, A., Venkatraman, S.: Deep learning approach for intelligent intrusion detection system. IEEE Access 7, 41525–41550 (2019)

Vinayakumar, R., Alazab, M., Soman, K.P., Poornachandran, P., Venkatraman, S.: Robust intelligent malware detection using deep learning. IEEE Access 7, 46717–46738 (2019)

Wei, J., Liu, W., Hu, X.: Secure and efficient attribute-based access control for multiauthority cloud storage. IEEE Syst. J. 12(2), 1731–1742 (2018)

Xue, K., Chen, W., Li, W., Hong, J., Hong, P.: Combining data owner-side and cloud-side access control for encrypted cloud storage. IEEE Trans. Inf. Forensics Secur. 13(8), 2062–2074 (2018)