A. Rukavitsyn, K. Borisenko, I. I. Holod, A. Shorov
{"title":"The method of ensuring confidentiality and integrity data in cloud computing","authors":"A. Rukavitsyn, K. Borisenko, I. I. Holod, A. Shorov","doi":"10.1109/SCM.2017.7970558","DOIUrl":null,"url":null,"abstract":"Cloud computing allows not only to obtain computing resources on-demand but also to store large amounts of data (big data) with a high level of fault tolerance. Nevertheless, data confidentiality for users of hybrid and public clouds is cannot guaranteed in full. Cloud providers have full access to user data, which threatens to compromise the integrity of data. Existing methods of providing security consider methods to increase the speed and reduce the load during authorization and data encryption. The paper proposes a method that describes the use of separate services outside the cloud for authentication, data management and metadata storage to eliminate the possibility of obtaining unauthorized access to data, and the use of metadata to perform integrity control. The developed method is being used to create a stand based on OpenStack and two services on separate servers. The owner of the database limits the access to data that is stored in an encrypted form and does not allow provider to interact with database.","PeriodicalId":315574,"journal":{"name":"2017 XX IEEE International Conference on Soft Computing and Measurements (SCM)","volume":"10 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2017-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"8","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2017 XX IEEE International Conference on Soft Computing and Measurements (SCM)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/SCM.2017.7970558","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 8
Abstract
Cloud computing allows not only to obtain computing resources on-demand but also to store large amounts of data (big data) with a high level of fault tolerance. Nevertheless, data confidentiality for users of hybrid and public clouds is cannot guaranteed in full. Cloud providers have full access to user data, which threatens to compromise the integrity of data. Existing methods of providing security consider methods to increase the speed and reduce the load during authorization and data encryption. The paper proposes a method that describes the use of separate services outside the cloud for authentication, data management and metadata storage to eliminate the possibility of obtaining unauthorized access to data, and the use of metadata to perform integrity control. The developed method is being used to create a stand based on OpenStack and two services on separate servers. The owner of the database limits the access to data that is stored in an encrypted form and does not allow provider to interact with database.