Multilevel security framework for cloud data
暂无分享,去创建一个
Cloud computing allows its customers to store, access and share, data and resources remotely at any instant. In a cloud, once the user has uploaded its data, keeping the track of the users accessing it and progressive update made, becomes difficult. This makes data vulnerable to various threats, like malicious insiders, data breach, loss and leakage of data and loss of authenticity, integrity and confidentiality. These threats occur when we do not protect the encryption key along with the data, as done by the existing systems like Yubikey, Key generation policy. These attacks and threats can be mitigated by securing the key along with data. Hence, a framework is proposed which secures the key along with the data in a multilevel structure by end-to-end encryption on data and multiple security layers on the encryption key. This framework is simpler than various systems proposed in the literature. In this paper, the proposed technique has been analyzed to mitigate the above-mentioned threats.
[1] Dimitris Gritzalis,et al. The Insider Threat in Cloud Computing , 2011, CRITIS.