Data Storage Security in Cloud Computing
Kapila Sharma, Kavita Kanwar, Chanderjeet Yadav · 2013
Cloud Computing has been envisioned as the next generation architecture of IT Enterprise. In contrast to traditional solutions, Cloud Computing moves the application software and databases to the large data centers. Data security for such a cloud service includes secure channels, access controls, and encryption. when we consider the security of data in a cloud, we must consider : confidentiality, integrity, and availability. This paper is concerned with discovery of the vulnerabilities in the landscape of clouds, discovery of security solutions, and. also investigate how the contexts provided by formal and informal institutions affect privacy and security issues in the cloud. Several trends are opening up the era of Cloud Computing, which is an Internet-based development and use of computer technology. The ever cheaper and more powerful processors, together with the software as a service (SaaS) computing architecture, are transforming data centers into pools of computing service on a huge scale. The increasing network bandwidth and reliable yet flexible network connections make it even possible that users can now subscribe high quality services from data and software that reside solely on remote data centers. Moving data into the cloud offers great convenience to users since they don't have to care about the complexities of direct hardware management. The pioneer of Cloud Computing vendors, Amazon Simple Storage Service (S3) and Amazon Elastic Compute Cloud (EC2) are both well-known examples. While these internet- based online services do provide huge amounts of storage space and customizable computing resources, this computing platform shift, however, is eliminating the responsibility of local machines for data maintenance at the same time. As a result, users are at the mercy of their cloud service providers for the availability and integrity of their data. From the perspective of data security, which has always been an important aspect of quality of service, Cloud Computing inevitably poses new challenging security threats for number of reasons. Firstly, traditional cryptographic primitives for the purpose of data security protection cannot be directly adopted due to the users' loss control of data under Cloud Computing. Therefore, verification of correct data storage in the cloud must be conducted without explicit knowledge of the whole data. Considering various kinds of data for each user stored in the cloud and the demand of long term continuous assurance of their data safety, the problem of verifying correctness of data storage in the cloud becomes even more challenging. Secondly, Cloud Computing is not just a third party data warehouse.