A review of cloud security based on cryptographic mechanisms
---
paper_title: Cloud computing security : the scientific challenge , and a survey of solutions

paper_content:

Highlights? We survey approaches to protecting data from a cloud infrastructure provider. ? We explain some difficulties with using fully homomorphic encryption for cloud computing applications. ? We describe a method in which in-browser key translation allows a software-as-a-service application to run with confidentiality from the service provider. ? We explore how trusted hardware can be used to protect cloud-based data. We briefly survey issues in cloud computing security. The fact that data are shared with the cloud service provider is identified as the core scientific problem that separates cloud computing security from other topics in computing security. We survey three current research directions, and evaluate them in terms of a running software-as-a-service example.
---
paper_title: Beyond lightning: A survey on security challenges in cloud computing

paper_content:

Cloud computing is a model to provide convenient, on-demand access to a shared pool configurable computing resources. In cloud computing, IT-related capabilities are provided as services, accessible without requiring detailed knowledge of the underlying technologies, and with minimal management effort. The great savings promised by the cloud are however offset by the perceived security threats feared by users. This paper gives an overview of cloud computing, and discusses related security challenges. We emphasize that although there are many technological approaches that can improve cloud security, there are currently no one-size-fits-all solutions, and future work has to tackle challenges such as service level agreements for security, as well as holistic mechanisms for ensuring accountability in the cloud.
---
paper_title: Beyond lightning: A survey on security challenges in cloud computing

paper_content:

Cloud computing is a model to provide convenient, on-demand access to a shared pool configurable computing resources. In cloud computing, IT-related capabilities are provided as services, accessible without requiring detailed knowledge of the underlying technologies, and with minimal management effort. The great savings promised by the cloud are however offset by the perceived security threats feared by users. This paper gives an overview of cloud computing, and discusses related security challenges. We emphasize that although there are many technological approaches that can improve cloud security, there are currently no one-size-fits-all solutions, and future work has to tackle challenges such as service level agreements for security, as well as holistic mechanisms for ensuring accountability in the cloud.
---
paper_title: Security and Privacy in Cloud Computing

paper_content:

Recent advances have given rise to the popularity and success of cloud computing. However, when outsourcing the data and business application to a third party causes the security and privacy issues to become a critical concern. Throughout the study at hand, the authors obtain a common goal to provide a comprehensive review of the existing security and privacy issues in cloud environments. We have identified five most representative security and privacy attributes (i.e., confidentiality, integrity, availability, accountability, and privacy-preservability). Beginning with these attributes, we present the relationships among them, the vulnerabilities that may be exploited by attackers, the threat models, as well as existing defense strategies in a cloud scenario. Future research directions are previously determined for each attribute.
---
paper_title: On Technical Security Issues in Cloud Computing

paper_content:

The Cloud Computing concept offers dynamically scalable resources provisioned as a service over the Internet. Economic benefits are the main driver for the Cloud, since it promises the reduction of capital expenditure (CapEx) and operational expenditure (OpEx). In order for this to become reality, however, there are still some challenges to be solved. Amongst these are security and trust issues, since the user's data has to be released to the Cloud and thus leaves the protection-sphere of the data owner. Most of the discussions on this topics are mainly driven by arguments related to organizational means. This paper focuses on technical security issues arising from the usage of Cloud services and especially by the underlying technologies used to build these cross-domain Internet-connected collaborations.
---
paper_title: Beyond lightning: A survey on security challenges in cloud computing

paper_content:

Cloud computing is a model to provide convenient, on-demand access to a shared pool configurable computing resources. In cloud computing, IT-related capabilities are provided as services, accessible without requiring detailed knowledge of the underlying technologies, and with minimal management effort. The great savings promised by the cloud are however offset by the perceived security threats feared by users. This paper gives an overview of cloud computing, and discusses related security challenges. We emphasize that although there are many technological approaches that can improve cloud security, there are currently no one-size-fits-all solutions, and future work has to tackle challenges such as service level agreements for security, as well as holistic mechanisms for ensuring accountability in the cloud.
---
paper_title: Enhanced data security model for cloud computing

paper_content:

Cloud Computing becomes the next generation architecture of IT Enterprise. In contrast to traditional solutions, Cloud computing moves the application software and databases to the large data centers, where the management of the data and services may not be fully trustworthy. This unique feature, however, raises many new security challenges which have not been well understood. In cloud computing, both data and software are fully not contained on the user's computer; Data Security concerns arising because both user data and program are residing in Provider Premises. Clouds typically have a single security architecture but have many customers with different demands. Every cloud provider solves this problem by encrypting the data by using encryption algorithms. This paper investigates the basic problem of cloud computing data security. We present the data security model of cloud computing based on the study of the cloud architecture. We improve data security model for cloud computing. We implement software to enhance work in a data security model for cloud computing. Finally apply this software in the Amazon EC2 Micro instance.
---
paper_title: Secure sharing with cryptography in cloud computing

paper_content:

Cloud computing is buzz word now days. Cloud providers try to provide security, sharing, authenticity and integrity. Under this research work, we have focused on adding new functionality for cloud providers that is secure sharing. In public cloud anyone can see data of any user but in private cloud data is secured and limited to particular user. This research work proposes framework that allow generating a key for particular users with particular permissions. Cloud user can generate keys for different users with different permissions to access their files. This framework uses cryptography algorithms like AES and RSA. AES is most secure algorithm in cryptography. Once key is generated user (user who have generated a key for their own files) can provide that key to decided user (user for whom key is generated). So when decided user will try to access files on cloud with that key, permission decided by owner will be given to that user. This is partial access to user and more secure then providing password to user. Cloud service providers can also add concept of defining files also like cloud user can generate key for particular file, particular user and particular permission. Those keys then can be provided to different users.
---
paper_title: An Implementation of RSA Algorithm in Google Cloud using Cloud SQL

paper_content:

Aim of this study is to protect the data stored on cloud by using security algorithm. Cloud computing model advances many web applications because of its elasticity nature. This type of computing reduces operating cost and increases the efficiency of computing. Even though efficiency increased, still there is security threat for the data that is stored in third party area especially in Internet. Due to data security issue with cloud computing many business organization have fear in storing their data in Cloud. So the most challenging task of the business organization is to provide high security for their data since the data are sensible related to their business. To ensure the security of data, we proposed a method of providing security by implementing RSA algorithm using cloud SQL to the data that will be stored in the third party area.
---
paper_title: Use of Digital Signature with Diffie Hellman Key Exchange and AES Encryption Algorithm to Enhance Data Security in Cloud Computing

paper_content:

Cloud computing is the apt technology for the decade. It allows user to store large amount of data in cloud storage and use as and when required, from any part of the world, via any terminal equipment. Since cloud computing is rest on internet, security issues like privacy, data security, confidentiality, and authentication is encountered. In order to get rid of the same, a variety of encryption algorithms and mechanisms are used. Many researchers choose the best they found and use it in different combination to provide security to the data in cloud. On the similar terms, we have chosen to make use of a combination of authentication technique and key exchange algorithm blended with an encryption algorithm. This combination is referred to as "Three way mechanism" because it ensures all the three protection scheme of authentication, data security and verification, at the same time. In this paper, we have proposed to make use of digital signature and Diffie Hellman key exchange blended with (AES) Advanced Encryption Standard encryption algorithm to protect confidentiality of data stored in cloud. Even if the key in transmission is hacked, the facility of Diffie Hellman key exchange render it useless, since key in transit is of no use without user's private key, which is confined only to the legitimate user. This proposed architecture of three way mechanism makes it tough for hackers to crack the security system, thereby protecting data stored in cloud.
---
paper_title: Cloud computing security : the scientific challenge , and a survey of solutions

paper_content:

Highlights? We survey approaches to protecting data from a cloud infrastructure provider. ? We explain some difficulties with using fully homomorphic encryption for cloud computing applications. ? We describe a method in which in-browser key translation allows a software-as-a-service application to run with confidentiality from the service provider. ? We explore how trusted hardware can be used to protect cloud-based data. We briefly survey issues in cloud computing security. The fact that data are shared with the cloud service provider is identified as the core scientific problem that separates cloud computing security from other topics in computing security. We survey three current research directions, and evaluate them in terms of a running software-as-a-service example.
---
paper_title: A novel method to secure cloud computing through multicast key management

paper_content:

Cloud computing is the technology that uses the internet and central remote servers to maintain data and applications. Cloud computing allows consumers and businesses to use applications without installation and access their personal files at any computer with internet access. This technology allows for much more efficient computing by centralizing storage, memory, processing and bandwidth. In this security is an important issue to provide a security for this cloud we introduce a novel method for securing cloud by providing multicast key for each user. It will be a dynamic session key which will vary in the time of period. Whenever a new user enters into the cloud the new key will be generated .It will withstand for a time period .After that time period the user should renew the key for the further usage of the cloud.
---

```
Title: A review of cloud security based on cryptographic mechanisms

Section 1: INTRODUCTION
Description 1: Introduce the context, importance, and general security challenges associated with cloud computing.

Section 2: TRADITIONAL SECURITY CHALLENGES
Description 2: Discuss the traditional security challenges moved from conventional communication systems to cloud environments.

Section 3: CLOUD SECURITY CHALLENGES
Description 3: Elaborate on the specific security challenges unique to cloud computing, such as privacy, data confidentiality, and multi-tenancy.

Section 4: Outsourcing
Description 4: Detail the security concerns related to data outsourcing in cloud computing.

Section 5: Multi-Tenancy Issue
Description 5: Discuss the security problems introduced by multiple tenants sharing the same physical servers.

Section 6: Authentication and Trust of Acquired Information
Description 6: Explain the importance of data authentication and trust in cloud environments.

Section 7: System Monitoring and Access Control
Description 7: Describe the need for system monitoring and access control in cloud environments.

Section 8: Cloud Standards
Description 8: Discuss the role of cloud standards in achieving interoperability and security.

Section 9: SOLUTIONS
Description 9: Present various cryptographic mechanisms and solutions proposed by researchers to address cloud security issues.

Section 10: CONCLUSIONS
Description 10: Conclude by summarizing the importance of cryptographic solutions and the need for continued research in cloud security.
```