Paraphrase

profiletimzam
cloud.docx
Home>Information Systems homework help>Paraphrase

Data security has always been a key issue in information technology. It becomes particularly serious in the cloud computing environment due to the different global data storage locations. Data security and privacy protection are the two main factors of user’s concerns about the cloud technology. Despite many techniques on the topics in cloud computing being investigated in both academics and industries, data security and privacy protection are becoming more important for the future development of cloud computing technology in government, industry, and business.

Security of issues In the cloud architecture data security and privacy protection has always been an important factor to both hardware and software.

Tis study is to review different security techniques and challenges from both software and hardware aspects for protecting data in the cloud and aims at enhancing the data security and privacy protection for the trustworthy cloud environment. In this paper, we make a comparative research analysis of the existing research work regarding the data security and privacy protection techniques used in the cloud computing. 1. Introduction The next generation paradigm has been predicted to be cloud computing. In the cloud computing environmen both applications and resources are delivered on demand over the Internet as services. Cloud is an environment of the hardware and sofware resources in the data centers that provide diverse services over the network or the Internet to satisfy user’s requirements [1].The explanation of “cloud computing” from the National Institute of Standards and Technology (NIST) [2] is that cloud computing enables ubiquitous, convenient, on-demand network access to a shared pool of confgurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction. According to the explanation, cloud computing provides a convenient on-demand network access to a shared pool of confgurable computing resources. Resources refer to computing applications, network resources, platforms, sofware services, virtual servers, and computing infrastructure. Cloud computing can be considered as a new computing archetype that can provide services on demand at a minimal cost. Te three well-known and commonly used service models in the cloud paradigm are sofware as a service (SaaS), platform as a service (PaaS), and infrastructure as a service (IaaS). In SaaS, sofware with the related data is deployed by a cloud service provider, and users can use it through the web browsers. In PaaS, a service provider facilitates services to the users with a set of sofware programs that can solve the specifc tasks. In IaaS, the cloud service provider facilitates services to the users with virtual machines and storage to improve their business capabilities. Cloud computing is closely related to but not the same as grid computing [3]. Grid computing integrates diverse resources together and controls the resources with the unifed operating systems to provide high performance computing services, while cloud computing combines the computing and storage resources controlled by different operating systems to provide services such as large-scaled data storage and high performance computing to users. Te overall picture of grid computing has been changed by cloud computing. Hindawi Publishing Corporation International Journal of Distributed Sensor Networks Volume 2014, Article ID 190903, 9 pages http://dx.doi.org/10.1155/2014/190903 2 International Journal of Distributed Sensor Networks Distribution of data is in a new way of cloud computing comparing with the grid computing. Cloud computing will enable services to be consumed easily on demand. Cloud computing has the characteristics such as on-demand self-service, ubiquitous network access, location independent resource pooling, rapid resource elasticity, usage-based pricing, and transference of risk. Tese merits of cloud computing have attracted substantial interests from both the industrial world and the academic research world. Cloud computing technology is currently changing the way to do business in the world. Cloud computing is very promising for the IT applications; however, there are still some problems to be solved for personal users and enterprises to store data and deploy applications in the cloud computing environment. One of the most signifcant barriers to adoption is data security, which is accompanied by issues including compliance, privacy, trust, and legal matters [4, 5]. Te role of institutions and institutional evolution is close to privacy and security in cloud computing [6]. Data security has consistently been a major issue in IT. Data security becomes particularly serious in the cloud computing environment, because data are scattered in different machines and storage devices including servers, PCs, and various mobile devices such as wireless sensor networks and smart phones. Data security in the cloud computing is more complicated than data security in the traditional information systems. To make the cloud computing be adopted by users and enterprise, the security concerns of users should be rectifed frst to make cloud environment trustworthy.Te trustworthy environment is the basic prerequisite to win confdence of users to adopt such a technology. Latif et al. discussed the assessment of cloud computing risks [7]. Before the data security issues are discussed, the functions of cloud computing are analyzed frst. Cloud computing is also known as on-demand service. In the cloud computing environment, there is a cloud service provider that facilitates services and manages the services. Te cloud provider facilitates all the services over the Internet, while end users use services for satisfying their business needs and then pay the service provider accordingly. Cloud computing environment provides two basic types of functions: computing and data storage. In the cloud computing environment, consumers of cloud services do not need anything and they can get access to their data and fnish their computing tasks just through the Internet connectivity. During the access to the data and computing, the clients do not even know where the data are stored and which machines execute the computing tasks. Coming to data storage, data protection and security are the primary factors for gaining user’s trust and making the cloud technology successfully used. A number of data protections and data security techniques have been proposed in the research feld of cloud computing. However, data protection related techniques need to be further enhanced. Services of cloud computing are provided across the entire computing spectrum. Nowadays, organizations and companies are moving and extending their business by adopting the cloud computing to lower their cost. Tis can contribute to free more man-powers to focus on creating strategic differentiation and business division of labor is clearer. Te cloud is growing continuously because it could provide high performance computational services at cheaper rates. Famous IT companies such as Microsof (http://azure.microsof.com/), Amazon (http://aws.amazon .com/), Google (https://cloud.google .com/), and Rakespace (http://www.rackspace.com/) have provided cloud service on the Internet. Te concept of cloud has a number of implementations based on the services from service providers. For example, Google Apps Engine, Microsof Azure, and Amazon Stack are popular implementations of cloud computing provided by cloud service providers, that is, Google, Microsof, and Amazon companies. Besides, the ACME enterprise implemented VMware based v-Cloud for permitting multiple organizations to share computing resources. According to the difference of access scope, cloud can be divided into three types: public cloud, private cloud, and hybrid cloud. Public cloud is as the property of service provider and can be used in public, private cloud refers to being the property of a company, and hybrid cloud is the blends of public and private cloud. Most of the existing cloud services are provided by large cloud service companies such as Google, Amazon, and IBM. A private cloud is a cloud in which only the authorized users can access the services from the provider. In the pubic cloud anybody can use the cloud services whereas the hybrid cloud contains the concept of both public and private clouds. Cloud computing can save an organization’s time and money, but trusting the system is more important because the real asset of any organization is the data which they share in the cloud to use the needed services by putting it either directly in the relational database or eventually in a relational database through an application. Cloud computing brings a number of attributes that require special attention when it comes to trusting the system. Te trust of the entire system depends on the data protection and prevention techniques used in it. Numerous different tools and techniques have been tested and introduced by the researchers for data protection and prevention to gain and remove the hurdle of trust but there are still gaps which need attention and are required to be lined up by making these techniques much better and effective. Te meaning of security is plentiful. Security is the combination of confdentiality, the prevention of the unauthorized disclosure of information, integrity, the prevention of the unauthorized amendment or deletion of information, and availability, the prevention of unauthorized withholding of information [8]. Te major issues in the cloud computing include resource security, resource management, and resource monitoring. Currently, there are no standard rules and regulations to deploy applications in the cloud, and there is a lack of standardization control in the cloud. Numerous novel techniques had been designed and implemented in cloud; however, these International Journal of Distributed Sensor Networks 3 techniques fall short of ensuring total security due to the dynamics of the cloud environment. Te inherent issues of data security, governance, and management with respect to control in the cloud computing are discussed in [9]. Sun et al. [10] highlighted the key security, privacy, and trust issues in the existing environment of cloud computing and help users to recognize the tangible and intangible threats related to its use. According to the authors, there are three major potential threats in cloud computing, namely, security, privacy, and trust. Security plays a critical role in the current era of long dreamed vision of computing as a utility. It can be divided into four subcategories: safety mechanisms, cloud server monitoring or tracing, data confdentiality, and avoiding malicious insiders’ illegal operations and service hijacking. A data security framework for cloud computing networks is proposed [11]. Te authors mainly discussed the security issues related to cloud data storage. Tere are also some patents about the data storage security techniques [12]. Younis and Kifayat give a survey on secure cloud computing for critical infrastructure [13]. A security and privacy framework for RFID in cloud computing was proposed for RFID technology integrated to the cloud computing [14], which will combine the cloud computing with the Internet of Tings. In short, the foremost issues in cloud data security include data privacy, data protection, data availability, data location, and secure transmission. Te security challenges in the cloud include threats, data loss, service disruption, outside malicious attacks, and multitenancy issues [15]. Chen and Zhao [16] analyzed privacy and data security issues in the cloud computing by focusing on privacy protection, data segregation, and cloud security. Data security issues are primarily at SPI (SaaS, PaaS, and IaaS) level and the major challenge in cloud computing is data sharing. In this paper, we will review different security techniques and challenges for data storage security and privacy protection in the cloud computing environment. As Figure 1 shows, this paper presents a comparative research analysis of the existing research work regarding the techniques used in the cloud computing through data security aspects including data integrity, confdentiality, and availability. Data privacy issues and technologies in the cloud are also studied, because data privacy is traditionally accompanied with data security. Comparative studies on data security and privacy could help to enhance the user’s trust by securing data in the cloud computing environment. 2. Data Integrity Data integrity is one of the most critical elements in any information system. Generally, data integrity means protecting data from unauthorized deletion, modifcation, or fabrication. Managing entity’s admittance and rights to specifc enterprise resources ensures that valuable data and services are not abused, misappropriated, or stolen. Data integrity is easily achieved in a standalone system with a single database. Data integrity in the standalone system is maintained via database constraints and transactions, which is usually fnished by a database management system (DBMS). Transactions should follow ACID (atomicity, consistency, isolation, and durability) properties to ensure data integrity. Most databases support ACID transactions and can preserve data integrity. Authorization is used to control the access of data. It is the mechanism by which a system determines what level of access a particular authenticated user should have to secure resources controlled by the system. Data integrity in the cloud system means preserving information integrity. Te data should not be lost or modifed by unauthorized users. Data integrity is the basis to provide cloud computing service such as SaaS, PaaS, and IaaS. Besides data storage of large-scaled data, cloud computing environment usually provides data processing service. Data integrity can be obtained by techniques such as RAID-like strategies and digital signature. Owing to the large quantity of entities and access points in a cloud environment, authorization is crucial in assuring that only authorized entities can interact with data. By avoiding the unauthorized access, organizations can achieve greater confdence in data integrity. Te monitoring mechanisms offer the greater visibility into determining who or what may have altered data or system information, potentially affecting their integrity. Cloud computing providers are trusted to maintain data integrity and accuracy. However, it is necessary to build the third party supervision mechanism besides users and cloud service providers. Verifying the integrity of data in the cloud remotely is the perquisite to deploy applications. Bowers et al. proposed a theoretical framework “Proofs of Retrievability” to realize the remote data integrity checking by combining error correction code and spot-checking [17]. Te HAIL system uses POR mechanism to check the storage of data in different clouds, and it can ensure the redundancy of different copies and realize the availability and integrity checking [18]. Schiffman et al. proposed trusted platform module (TPM) remote checking to check the data integrity remotely [19]. 3. Data Confidentiality Data confdentiality is important for users to store their private or confdential data in the cloud. Authentication and access control strategies are used to ensure data confdentiality. Te data confdentiality, authentication, and access control issues in cloud computing could be addressed by increasing the cloud reliability and trustworthiness [20]. Because the users do not trust the cloud providers and cloud storage service providers are virtually impossible to eliminate potential insider threat, it is very dangerous for users to store their sensitive data in cloud storage directly. Simple encryption is faced with the key management problem and cannot support complex requirements such as query, parallel modifcation, and fne-grained authorization. 3.1. Homomorphic Encryption. Encryption is usually used to ensure the confdentiality of data. Homomorphic encryption is a kind of encryption system proposed by Rivest et al. [21]. 4 International Journal of Distributed Sensor Networks It ensures that the cipher text algebraic operation results are consistent with the clear operation afer encryption results; besides, the whole process does not need to decrypt the data. Te implementation of this technique could well solve the confdentiality of data and data operations in the cloud. Gentry frstly proposed the fully homomorphic encryption method [22], which can do any operation that can be performed in clear text without decrypting. It is an important breakthrough in the homomorphic encryption technology. However, the encryption system involves very complicated calculation, and the cost of computing and storage is very high. Tis leads to the fact that the fully homomorphic encryption is still far from real applications. A cryptographic algorithm named Dife-Hellman is proposed for secure communication [23], which is quite dissimilar to the key distribution management mechanism. For more flexibility and enhanced security, a hybrid technique that combines multiple encryption algorithms such as RSA, 3DES, and random number generator has been proposed [24]. RSA is useful for establishing secure communication connection through digital signature based authentication while 3DES is particularly useful for encryption of block data. Besides, several encryption algorithms for ensuring the security of user data in the cloud computing are discussed [25]. 3.2. Encrypted Search and Database. Because the homomorphic encryption algorithm is inefficient, researchers turn to study the applications of limited homomorphic encryption algorithm in the cloud environment. Encrypted search is a common operation. Manivannan and Sujarani [26] have proposed a lightweight mechanism for database encryption known as transposition, substitution, folding, and shifing (TSFS) algorithm. However, as the numbers of keys are increased, the amount of computations and processing also increases. In-Memory Database encryption technique is proposed for the privacy and security of sensitive data in untrusted cloud environment [27]. A synchronizer exists between the owner and the client for seeking access to the data. Client would require a key from the synchronizer to decrypt the encrypted shared data it receives from the owner. Te synchronizer is utilized to store the correlated shared data and the keys separately. A shortcoming of this technique is that the delays occur due to the additional communication with the central synchronizer. However, this limitation can be mitigated by adopting group encryption and through minimizing communication between nodes and synchronizer. Huang and Tso [28] proposed an asymmetric encryption mechanism for databases in the cloud. In the proposed mechanism, the commutative encryption is applied on data more than once and the order of public/private key used for encryption/decryption does not matter. Reencryption mechanism is also used in the proposed scheme which shows that the cipher-text data is encrypted once again for duality. Such schemes are very useful in the cloud applications where privacy is a key concern. A privacy-preserving multikeyword ranked search approach over encrypted cloud data was proposed [29], which can search the encrypted cloud data and rank the search results without leakage of the user’s privacy. 3.3. Distributive Storage. Distributive storage of data is also a promising approach in the cloud environment. AlZain et al. [30] discussed the security issues related to data privacy in the cloud computing including integrity of data, intrusion, and availability of service in the cloud. To ensure the data integrity, one option could be to store data in multiple clouds or cloud databases. Te data to be protected from internal or external unauthorized access are divided into chunks and Shamir’s secret algorithm is used to generate a polynomial function against each chunk. Ram and Sreenivaasan [31] have proposed a technique known as security as a service for securing cloud data. Te proposed technique can achieve maximum security by dividing the user’s data into pieces. Tese data chunks are then encrypted and stored in separated databases which follow the concept of data distribution over cloud. Because each segment of data is encrypted and separately distributed in databases over cloud, this provides enhanced security against different types of attacks. Arfeen et al. [32] describe the distribution of resources for cloud computing based on the tailored active measurement. Te tailored measurement technique is based on the network design and the specifc routes for the incoming and outgoing trafc and gradually changing the resources according to the user needs. Tailored measurement depends on the computing International Journal of Distributed Sensor Networks 5 resources and storage resources. Because of the variable nature of networks, the allocation of resources at a particular time based on the tailored active method does not remain optimal. Te resources may increase or decrease, so the system has to optimize changes in the user requirement either ofine or on-line and the resource connectivity. 3.4. Hybrid Technique. A hybrid technique is proposed for data confdentiality and integrity [33], which uses both key sharing and authentication techniques. Te connectivity between the user and the cloud service provider can be made more secure by utilizing powerful key sharing and authentication processes. RSA public key algorithm can be used for secure distribution of the keys between the user and cloud service providers. A three-layered data security technique is proposed [34]: the frst layer is used for authenticity of the cloud user either by one factor or by two factor authentications; the second layer encrypts the user’s data for ensuring protection and privacy; and the third layer does fast recovery of data through a speedy decryption process. An event-based isolation of critical data in the cloud approach is proposed [35], TrustDraw, a transparent security extension for the cloud which combines virtual machine introspection (VMI) and trusted computing (TC). 3.5. Data Concealment. Data concealment could also be used to keep the data confdentiality in the cloud. Delettre et al. [36] introduced a concealment concept for databases security. Data concealment approaches merge real data with the visual fake data to falsify the real data’s volume. However, authorized users can easily differentiate and separate the fake data from the real data. Data concealment techniques increase the overall volume of real data but provide enhanced security for the private data. Te objective of data concealment is to make the real data safe and secure from malicious users and attackers. Watermarking method can serve as a key for the real data. Only the authorized users have key of watermarking, so the authentication of users is the key to ensure the true data to be accessible for right users. 3.6. Deletion Confrmation. Deletion confrmation means that data could not be recovered when users delete their data afer the deletion confrmation. Te problem is very serious, because more than one copy exists in the cloud for the security and convenience of data recovery. When users delete their data with confrmation, all the copies of data should be deleted at the same time. However, there are some data recovery technologies that could recover the data deleted by users from the hard disks. So the cloud storage providers should ensure that the deleted data of users could not be recovered and used by other unauthenticated users. To avoid the data be recovered and unauthenticatedly used, a possible approach is to encrypt the data before uploading to the cloud storage space. FADE system [37] is based on technologies such as Ephemerizer. In the system, data are encrypted before they are uploaded to the cloud storage. When users decide to delete their data, the system just to apply the specifc strategy to all the storage space could be covered with new data for replacing the deletion operation. 4. Data Availability Data availability means the following: when accidents such as hard disk damage, IDC fre, and network failures occur, the extent that user’s data can be used or recovered and how the users verify their data by techniques rather than depending on the credit guarantee by the cloud service provider alone. Te issue of storing data over the transboarder servers is a serious concern of clients because the cloud vendors are governed by the local laws and, therefore, the cloud clients should be cognizant of those laws. Moreover, the cloud service provider should ensure the data security, particularly data confdentiality and integrity. Te cloud provider should share all such concerns with the client and build trust relationship in this connection. Te cloud vendor should provide guarantees of data safety and explain jurisdiction of local laws to the clients. Te main focus of the paper is on those data issues and challenges which are associated with data storage location and its relocation, cost, availability, and security. Locating data can help users to increase their trust on the cloud. Cloud storage provides the transparent storage service for users, which can decrease the complexity of cloud, but it also decreases the control ability on data storage of users. Benson et al. studied the proofs of geographic replication and succeeded in locating the data stored in Amazon cloud [38]. 4.1. Reliable Storage Agreement. Te most common abnormal behavior of untrusted storage is that the cloud service providers may discard part of the user’s update data, which is hard to be checked by only depending on the simple data encryption. Additionally, a good storage agreement needs to support concurrent modifcation by multiple users. Mahajan et al. proposed Depot which can guarantee Fork-Join-Causal-Consistency and eventual consistency [39]. It can effectively resist attacks such as discarding and it can support the implementation of other safety protections in the trusted cloud storage environment (such as Amazon S3). Feldman et al. proposed SPORC [40], which can implement the safe and reliable real-time interaction and collaboration for multiple users with the help of the trusted cloud environment, and untrusted cloud servers can only access the encrypted data. However, operation types supported by reliable storage protocol support are limited, and most of the calculations can only occur in the client. 4.2. Reliability of Hard-Drive. Hard-drive is currently the main storage media in the cloud environment. Reliability of hard disks formulates the foundation of cloud storage. Pinheiro et al. studied the error rate of hard-drives based on the historical data of hard-drive [41]. Tey found that the error rate of hard-drives is not closely relevant to the temperature and the frequency to be used, while the error rate of hard-drives has the strong clustering characteristics. 6 International Journal of Distributed Sensor Networks Current SMART mechanism could not predict the error rate of hard disks. Tsai et al. studied the correlation between the sof error and hard error of hard disks, and they also found that the sof error could not predict the hard errors of harddrives precisely [42], only about 1/3 probability that hard errors follow the sof errors. 5. Data Privacy Privacy is the ability of an individual or group to seclude themselves or information about themselves and thereby reveal them selectively [43]. Privacy has the following elements. (i) When: a subject may be more concerned about the current or future information being revealed than information from the past. (ii) How: a user may be comfortable if his/her friends can manually request his/her information, but the user may not like alerts to be sent automatically and frequently. (iii) Extent: a user may rather have his/her information reported as an ambiguous region rather than a precise point. In commerce, consumer’s context and privacy need to be protected and used appropriately. In organizations, privacy entails the application of laws, mechanisms, standards, and processes by which personally identifable information is managed [44]. In the cloud, the privacy means when users visit the sensitive data, the cloud services can prevent potential adversary from inferring the user’s behavior by the user’s visit model (not direct data leakage). Researchers have focused on Oblivious RAM (ORAM) technology. ORAM technology visits several copies of data to hide the real visiting aims of users. ORAM has been widely used in sofware protection and has been used in protecting the privacy in the cloud as a promising technology. Stefanov et al. proposed that a path ORAM algorithm is state-of-the-art implementation [45]. Te privacy issues differ according to different cloud scenarios and can be divided into four subcategories [44, 46, 47] as follows: (i) how to enable users to have control over their data when the data are stored and processed in cloud and avoid thef, nefarious use, and unauthorized resale, (ii) how to guarantee data replications in a jurisdiction and consistent state, where replicating user data to multiple suitable locations is an usual choice, and avoid data loss, leakage, and unauthorized modifcation or fabrication, (iii) which party is responsible for ensuring legal requirements for personal information, (iv) to what extent cloud subcontractors are involved in processing which can be properly identifed, checked, and ascertained. 5.1. Service Abuse. Service abuse means that attackers can abuse the cloud service and acquire extra data or destroy the interests of other users. User data may be abused by other users. Deduplication technology has been widely used in the cloud storage, which means that the same data ofen were stored once but shared by multiple different users.Tis will reduce the storage space and cut down the cost of cloud service providers, but attackers can access the data by knowing the hash code of the stored fles. Ten, it is possible to leak the sensitive data in the cloud. So proof of ownership approach has been proposed to check the authentication of cloud users [48]. Attackers may lead to the cost increase of cloud service. Fraudulent resource consumption is a kind of attack on the payment for cloud service. Attackers can consume the specifc data to increase the cost for cloud service payment. Idziorek et al. proposed this question and researched on the detection and identifcation of fraud resource consumption [49]. 5.2. Averting Attacks. Te cloud computing facilitates huge amount of shared resources on the Internet. Cloud systems should be capable of averting Denial of Service (DoS) attacks. Shen et al. analyzed requirement of security services in cloud computing [50]. Te authors suggest integrating cloud services for trusted computing platform (TCP) and trusted platform support services (TSS). Te trusted model should bear characteristics of confdentiality, dynamically building trust domains and dynamic of the services. Cloud infrastructures require that user transfers their data into cloud merely based on trust. Neisse et al. analyzed indifferent attacks scenarios on Xen cloud platform to evaluate cloud services based on trust. Security of data and trust in cloud computing is the key point for its broader adoption [51]. Yeluri et al. focused on the cloud services from security point of view and explored security challenges in cloud when deploying the services [52]. Identity management, data recovery and management, security in cloud confdentiality, trust, visibility, and application architecture are the key points for ensuring security in cloud computing. 5.3. Identity Management. Cloud computing provides a podium to use wide range of Internet-based services [53]. But besides its advantages, it also increases the security threat when a trusted third party is involved. By involving a trusted third party, there is a chance of heterogeneity of users which affects security in the cloud. A possible solution to this problem could be to use a trusted third party independent approach for Identity Management to use identity data on untrusted hosts. Squicciarini et al. focused on problems of data leakage and loss of privacy in cloud computing [54]. Different levels of protections can be used to prevent data leakage and privacy loss in the cloud. Cloud computing provides new business services that are based on demand. Cloud networks have been built through dynamic virtualization of hardware, sofware, and datasets. Cloud security infrastructure and the trust reputation management play a vital role to upgrade the cloud services [55]. Te Internet access security, server access International Journal of Distributed Sensor Networks 7 security, program access security, and database security are the main security issues in the cloud. 6. Conclusion Cloud computing is a promising and emerging technology for the next generation of IT applications. Te barrier and hurdles toward the rapid growth of cloud computing are data security and privacy issues. Reducing data storage and processing cost is a mandatory requirement of any organization, while analysis of data and information is always the most important tasks in all the organizations for decision making. So no organizations will transfer their data or information to the cloud until the trust is built between the cloud service providers and consumers. A number of techniques have been proposed by researchers for data protection and to attain highest level of data security in the cloud. However, there are still many gaps to be flled by making these techniques more effective. More work is required in the area of cloud computing to make it acceptable by the cloud service consumers. Tis paper surveyed different techniques about data security and privacy, focusing on the data storage and use in the cloud, for data protection in the cloud computing environments to build trust between cloud service providers and consumers. Conflict of Interests Te authors declare that there is no conflict of interests regarding the publication of this paper. Acknowledgments Tis research work was supported by International Science and Technology Cooperation Program of China under Grant no. 2014DFA11350 and the National Natural Science Foundation of China (Grant nos. 61371185, 61171014, and 61202436).

References

References [1] N. Leavitt, “Is cloud computing really ready for prime time?” Computer, vol. 42, no. 1, pp. 15–25, 2009. [2] P. Mell and T. Grance, “Te nist defnition of cloud computing,” National Institute of Standards and Technology, vol. 53, no. 6, article 50, 2009. [3] F. Berman, G. Fox, and A. J. G. Hey, Grid Computing: Making the Global Infrastructure a Reality, Volume 2, John Wiley and sons, 2003. [4] M. A. Shah, R. Swaminathan, and M. Baker, “Privacy-preserving audit and extraction of digital contents,” IACR Cryptology EPrint Archive, vol. 186, 2008. [5] Z. Xiao and Y. Xiao, “Security and privacy in cloud computing,” IEEE Communications Surveys & Tutorials, vol. 15, no. 2, pp. 843–859, 2013. [6] N. Kshetri, “Privacy and security issues in cloud computing: the role of institutions and institutional evolution,” Telecommunications Policy, vol. 37, no. 4-5, pp. 372–386, 2013. [7] R. Latif, H. Abbas, S. Assar, and Q. Ali, “Cloud computing risk assessment: a systematic literature review,” in Future Information Technology, pp. 285–295, Springer, Berlin, Germany, 2014. [8] A. Avizienis, J. Laprie, B. Randell, and C. Landwehr, “Basic ˇ concepts and taxonomy of dependable and secure computing,” IEEE Transactions on Dependable and Secure Computing, vol. 1, no. 1, pp. 11–33, 2004. [9] Z. Mahmood, “Data location and security issues in cloud computing,” in Proceedings of the 2nd International Conference on Emerging Intelligent Data and Web Technologies (EIDWT ’11), pp. 49–54, IEEE, September 2011. [10] D. Sun, G. Chang, L. Sun, and X. Wang, “Surveying and analyzing security, privacy and trust issues in cloud computing environments,” in Proceedings of the International Conference on Advanced in Control Engineering and Information Science (CEIS ’11), pp. 2852–2856, chn, August 2011. [11] A. Pandey, R. M. Tugnayat, and A. K. Tiwari, “Data Security Framework for Cloud Computing Networks,” International Journal of Computer Engineering & Technology, vol. 4, no. 1, pp. 178–181, 2013. [12] D. A. Klein, “Data security for digital data storage,” U.S. Patent Application 14/022,095, 2013. [13] M. Y. A. Younis and K. Kifayat, “Secure cloud computing for critical infrastructure: a survey,” Tech. Rep., Liverpool John Moores University, Liverpool, UK, 2013. [14] S. Kardas ¸, S. C¸elik, M. A. Bingol, and A. Levi, “A new security ¨ and privacy framework for RFID in cloud computing,” in Proceedings of the 5th IEEE International Conference on Cloud Computing Technology and Science (CloudCom '13), Bristol , UK, 2013. [15] A. Behl, “Emerging security challenges in cloud computing: an insight to cloud security challenges and their mitigation,” in Proceedings of the World Congress on Information and Communication Technologies (WICT ’11), pp. 217–222, IEEE, December 2011. [16] D. Chen and H. Zhao, “Data security and privacy protection issues in cloud computing,” in Proceeding of the International Conference on Computer Science and Electronics Engineering (ICCSEE '12), vol. 1, pp. 647–651, Hangzhou, China, March 2012. [17] K. D. Bowers, A. Juels, and A. Oprea, “Proofs of retrievability: theory and implementation,” in Proceedings of the ACM Workshop on Cloud Computing Security (CCSW ’09), pp. 43–53, November 2009. [18] K. D. Bowers, A. Juels, and A. Oprea, “HAIL: a high-availability and integrity layer for cloud storage,” in Proceedings of the 16th ACM conference on Computer and Communications Security,pp. 187–198, ACM, Chicago, Ill, USA, November 2009. [19] J. Schiffman, T. Moyer, H. Vijayakumar, T. Jaeger, and P. McDaniel, “Seeding clouds with trust anchors,” in Proceedings of the ACM workshop on Cloud computing security workshop (CCSW ’10), pp. 43–46, ACM, October 2010. [20] D. H. Rakesh, R. R. Bhavsar, and A. S. Torve, “Data security over cloud,” International Journal of Computer Applications, no. 5, pp. 11–14, 2012. [21] R. L. Rivest, L. Adleman, and M. L. Dertouzos, “On data banks and privacy homomorphisms,” Foundations of Secure Computation, vol. 4, no. 11, pp. 169–180, 1978. [22] C. Gentry, A fully homomorphic encryption scheme [Ph.D. thesis], Stanford University, 2009.