Lightweight Accountable Privacy-Preserving Protocol Allowing the Cloud Client to Audit the Third-Party Auditor for Malicious Activities
Open Access
- 27 July 2019
- journal article
- research article
- Published by MDPI AG in Applied Sciences
- Vol. 9 (15) , 3034
Abstract
Cloud computing is reserving its position in the market as the next disruptive utility paradigm. It is found on the pay-as-you-use model. Cloud computing is changing the way information technology (IT) operates for individuals as well as for companies. Cloud computing comes with different offerings to accommodate diverse applications. It comes with many successful adoption stories and a few unfortunate ones that are related to security breaches. Security concerns are what is making many companies reluctant to fully embrace the cloud realm. To enhance trust and entice adoption between cloud clients (CC) and cloud service providers (CSP), a new paradigm of depending on involving a third-party auditor (TPA) has been introduced. Hence, implementing a solution with a TPA comes with its toll in terms of trust and processing overhead. A lightweight security protocol to give the CC extra control with tools to audit the TPA and the CSP is paramount to the solution. In this paper, we are introducing a novel protocol: the lightweight accountable privacy-preserving (LAPP) protocol. Our proposed protocol is lightweight in terms of processing and communication costs. It is based on a newly introduced mathematical model along with two algorithms. We have conducted simulation experiments to measure the impact of our method. We have compared LAPP to the most eminent privacy-preserving methods in the cloud research field, using the open source cloud computing simulator GreenCloud. Our simulation results showed superiority in performance for LAPP in regard to time complexity, accuracy, and computation time on auditing. The aim of the time complexity and computation time on auditing simulations is to measure the lightweight aspect of our proposed protocol as well as to improve the quality of service.Keywords
This publication has 16 references indexed in Scilit:
- Privacy preserving model: a new scheme for auditing cloud stakeholdersJournal of Cloud Computing, 2017
- A survey on cloud computing security: Issues, threats, and solutionsJournal of Network and Computer Applications, 2016
- Triangular data privacy-preserving model for authenticating all key stakeholders in a cloud environmentComputers & Security, 2016
- Trust is Good, Control is Better: Creating Secure Clouds by Continuous AuditingIEEE Transactions on Cloud Computing, 2016
- Panda: Public Auditing for Shared Data with Efficient User Revocation in the CloudIEEE Transactions on Services Computing, 2015
- Securing the cloud storage audit service: defending against frame and collude attacks of third party auditorIET Communications, 2014
- Secure and efficient privacy-preserving public auditing scheme for cloud storageComputers and Electrical Engineering, 2014
- EPPDR: An Efficient Privacy-Preserving Demand Response Scheme with Adaptive Key Evolution in Smart GridIEEE Transactions on Parallel and Distributed Systems, 2013
- Privacy-Preserving Public Auditing for Secure Cloud StorageIEEE Transactions on Computers, 2011
- Protection of Identity Information in Cloud Computing without Trusted Third Party2010