Enhanced Data Sharing by Decentralized and Lightweight Framework for Accountability in Cloud Storage
- 1Anna University Chennai, Department of Pervasive Computing Technology, University College of Engineering, BIT Campus, Tiruchirappalli. , IN
- 2Anna University Chennai, Department of Pervasive Computing Technology, University College of Engineering, BIT Campus, Tiruchirappalli. , IN
Cloud computing environment provides a large-scale distributed storage system where, resources on the internet are considered as a unified entity. Users use services without knowing the machines which actually process and host their own data and how computation and data storage is managed. While enjoying the convenience brought by cloud computing, the problem of losing control of user’s own data from them is becoming a significant barrier to wider adoption of this emerging technology. Therefore, users need a mechanism for transparent data usage of the user’s data in the cloud. For achieving this goal an information accountability framework called Cloud Information Accountability is proposed in this paper which provide highly decentralized and light-weight framework to keep track of the actual usage of user’s data in the cloud. CIA provides automated logging, authentication and distributed auditing mechanism to strengthen user’s control over their data.
Conclusion
CIA provides a highly decentralized light-weight accountability framework by proposing approaches for automatically logging any access to the data in the cloud. It provides an innovative auditing mechanism to the data owners along with distributed information accountability. The system is designed in such a way that it can provide a strong back end protection if needed. Data owner can not only audit his content but also audit copies of his data that were made without his knowledge.
References
- S. M. Metev and V. P. Veiko, Laser Assisted Microtechnology, 2nd ed., R. M. Osgood, Jr., Ed. Berlin, Germany: Springer-Verlag, 1998.
- B. Chun and A.C. Bavier, “Decentralized Trust Management and Accountability in Federated Systems,” Proc. Ann. Hawaii Int’lConf. System Sciences (HICSS), 2004.
- R. Corin, S. Etalle, J.I. den Hartog, G. Lenzini, and I. Staicu, “A Logic for Auditing Accountability in Decentralized Systems,” Proc. TC1 WG1.7 Workshop Formal Aspects in Security and Trust, pp. 187-201, 2005.
- B. Crispo and G. Ruffo, “Reasoning about Accountability within Delegation,” Proc. Third Int’l Conf. Information and Comm.Security (ICICS), pp. 251-260, 2001.
- J.W. Holford, W.J. Caelli, and A.W. Rhodes, “Using Self-Defending Objects to Develop Security Aware Applications in Java,” Proc. 27th Australasian Conf. Computer Science, vol. 26,pp. 341-349, 2004.
- P.T. Jaeger, J. Lin, and J.M. Grimes, “Cloud Computing and Information Policy: Computing in a Policy Cloud?,” J. Information Technology and Politics, vol. 5, no. 3, pp. 269-283, 2009.
- R. Jagadeesan, A. Jeffrey, C. Pitcher, and J. Riely, “Towards a Theory of Accountability and Audit,” Proc. 14th European Conf. esearch in Computer Security (ESORICS), pp. 152-167, 2009.
- R. Kailar, “Accountability in Electronic Commerce Protocol s,” IEEE Trans. Software Eng., vol. 22, no. 5, pp. 313-328, May 1996.
- W. Lee, A. Cinzia Squicciarini, and E. Bertino, “The Design and Evaluation of Accountable Grid Computing System,” Proc. 29th IEEE Int’l Conf. Distributed Computing Systems (ICDCS ’09), pp. 145-154, 2009.
- J.H. Lin, R.L. Geiger, R.R. Smith, A.W. Chan, and S. Wanchoo , Method for Authenticating a Java Archive (jar) for Portable Devices, US Patent 6,766,353, July 2004.
- T. Mather, S. Kumaraswamy, and S. Latif, Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance (Theory in Practice), first ed. O’ Reilly, 2009.
- M.C. Mont, S. Pearson, and P. Bramhall, “Towards Accountable Management of Identity and Privacy: Sticky Policies and Enforceable Tracing Services,” Proc. Int’l Workshop Database and Expert Systems Applications (DEXA), pp. 377-382, 2003.
- J. Park and R. Sandhu, “Towards Usage Control Models: Beyond Traditional Access Control,” SACMAT ‘02: Proc. Seventh ACM Symp. Access Control Models and Technologies, pp. 57-64, 2002.
- S. Pearson and A. Charlesworth, “Accountability as a Way Forward for Privacy Protection in the Cloud,” Proc. First Int’l Conf. Cloud Computing, 2009.
- A. Pretschner, M. Hilty, and D. Basin, “Distributed Usage Control,” Comm. ACM, vol. 49, no. 9, pp. 39-44, Sept. 2006.
- A. Squicciarini, S. Sundareswaran, and D. Lin, “Preventing Information Leakage from Indexing in the Cloud,” Proc. IEEE Int’l Conf. Cloud Computing, 2010.
- S. Sundareswaran, A. Squicciarini, D. Lin, and S. Huang, “Promoting Distributed Accountability in the Cloud,” Proc. IEEE Int’l Conf. Cloud Computing, 2011.
- D.J. Weitzner, H. Abelson, T. Berners-Lee, J. Feigen-baum, J.Hendler, and G.J. Sussman, “Information Accountability,” Comm.ACM, vol. 51, no. 6, pp. 82-87, 2008.
- Q. Wang, C. Wang, J. Li, K. Ren, and W. Lou, “Enabling Public Verifiability and Data Dynamics for Storage Security in Cloud Computing,” Proc. European Conf. Research in Computer Security (ESORICS), pp. 355-370, 2009.
- M. Xu, X. Jiang, R. Sandhu, and X. Zhang, “Towards a VMM Based Usage Control Framework for OS Kernel Integrity Protection,” SACMAT ‘07: Proc. 12th ACM Symp. Access Control Models and Technologies, pp. 71-80, 2007.
Keywords: Cloud Computing, Distributed Data Sharing, Information Accountability, Access Control, Auditing
Citation: Jijin Soman*, Jijin Soman, Jijin Soman, Jijin Soman ( 2013), Enhanced Data Sharing by Decentralized and Lightweight Framework for Accountability in Cloud Storage. , 1(2): 1-5
Received: 01/06/2024; Accepted: 01/06/2024;
Published: 01/06/2024
Edited by:
Mr.ERES JOURNALS