Scribd
Upload
349 views

Data Security in Cloud Computing

Cloud computing allows users to access shared computing resources over the Internet. Companies that provide cloud computing services are called cloud providers. There are three main types of cloud services: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). To improve security and trust between cloud providers and customers, standards have been developed by the Trusted Computing Group (TCG) including the Trusted Platform Module (TPM), Trusted Network Connect (TNC), and Trusted Storage. These standards help secure data at rest and in transit, enable strong authentication, and provide separation between customer networks and data. However, security remains a challenge in cloud computing due to the increased

Uploaded by

Piyush Mittal
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as PDF, TXT or read online on Scribd
349 views

Data Security in Cloud Computing

Cloud computing allows users to access shared computing resources over the Internet. Companies that provide cloud computing services are called cloud providers. There are three main types of cloud services: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). To improve security and trust between cloud providers and customers, standards have been developed by the Trusted Computing Group (TCG) including the Trusted Platform Module (TPM), Trusted Network Connect (TNC), and Trusted Storage. These standards help secure data at rest and in transit, enable strong authentication, and provide separation between customer networks and data. However, security remains a challenge in cloud computing due to the increased

Uploaded by

Piyush Mittal
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 22

Cloud computing is Internet-based computing, whereby shared resources ,software, and information are provided to computers and other

devices on demand. Cloud computing service is provided by companies call them as cloud providers. Based on the services which it provides the cloud companies are divided into 3 types IAAS(Infrastructure as a service) PAAS(Platform as a service) SAAS(Software as a service)
.

A conceptual diagram for cloud computing

BENEFITS IN CLOUD COMPUTING


Minimized

Capital expenditure Location and Device independence Utilization and efficiency improvement Very high Scalability High Computing power

HOW TO SECURE THE DATA?


Answer: Using trusted computing technologies.

TRUSTED COMPUTING
To improve the mutual trust between consumer and cloud provider, a well-understood trust foundation needs to be in place. The Trusted Computing Group , an industry consortium, has developed standards for using Trusted Computing techniques in laptop and desktop computers, networking, and storage. TCGs member companies, 100-plus major suppliers that cover the enterprise with connectivity and computing technology, also provide technology for cloud computing. As a result, TCG standards have been rapidly adapted to address cloud security.

TRUSTED PLATFORM MODULE(TPM)


To provide stronger computer security than software alone can provide, TCG has defined the specification for the widely implemented Trusted Platform Module (TPM). The TPM is an international standard, hardware security component built into many computers and computer-based products. The TPM includes capabilities such as Machine authentication Hardware encryption Signing Secure key storage Attestation

When attestation is used, the TPM monitors software as it is loaded and provides secure reports on exactly what is running on the machine. This monitoring and reporting are especially important in the virtualized environment of cloud computing where viruses and worms can hide in many places. the TPM provides a strong security foundation for other TCG specifications including Trusted Network Connect (TNC) and Trusted Storage.

TRUSTED NETWORK CONNECT(TNC)


TCGs Trusted Network Connect (TNC) architecture provides an industry standard approach to network security and network access control (NAC) that works with leading providers such as MICROSOFT and CISCO. The TNC standards enable administrators to control network access based on user identity and device health while monitoring behavior on the network and responding immediately to problems as they occur. The Trusted Network Connect (TNC) architecture: has strong user authentication allows guest access blocks the access of unsafe endpoints extends access control to clientless endpoints such as IP phones and printers coordinates security devices across the enterprise.

TRUSTED STORAGE
Trusted Storage specification provides a manageable, enterprise-wide means for implementing full-disk encryption using hardware included right in the drive. These drives, known as self-encrypting drives, simplify the enterprise encryption process for handling sensitive data, since all data, applications, and drivers are encrypted internal to the drive and key management is an integral part of the design. The hardware-based encryption can take advantage of the TPM if desired and does not require user intervention or impact system performance.

NOTE:unlike traditional software-only encryption schemes that require cycle time from the main processor. With a selfencrypting drive, when a drive is removed for any reason (maintenance, end of life or even theft), the data is completely useless to criminals since they dont know the encryption key.

CRITICAL AREAS FOR CLOUD COMPUTING


The Cloud Security Alliance (CSA) has developed a 76page security guide (Security Guidance for Critical Areas of Focus in Cloud Computing V2.1) that identifies many areas for concern in cloud computing . This environment is a new model which cannot be well protected by traditional perimeter security approaches.

Areas for security concerns in cloud computing

SECURING DATA AT REST


Cryptographic encryption is certainly the best practice and in many U.S. states and countries worldwide, its the law for securing data at rest at the cloud provider. Fortunately, hard drive manufacturers are now shipping self-encrypting drives that implement the TCGs Trusted Storage standards. Self-encrypting drives build encryption hardware into the drive, providing automated encryption with minimal cost or performance impact. Software encryption can also be used, but it is slower and less secure since the encryption key can be copied off the machine without detection.

SECURING DATA IN TRANSIT


Encryption techniques should also be used for data in transit. In addition, authentication and integrity protection ensure that data only goes where the customer wants it to go and is not modified in transit. Well-established protocols such as SSL/TLS should be used here.

AUTHENTICATION
In the cloud environment, authentication and access control are more important than ever since the cloud and all of its data are accessible to anyone over the Internet. The TPM can easily provide stronger authentication than username and passwords. TCGs IF-MAP standard allows for real-time communication between the cloud provider and the customer about authorized users and other security issues. When a user is fired or reassigned, the customers identity management system can notify the cloud provider in real-time so that the users cloud access can be modified or revoked within seconds. If the fired user is logged into the cloud, they can be immediately disconnected

SEPARATION BETWEEN CUSTOMERS


One of the more obvious cloud concerns is separation between a cloud providers users (who may be competing companies or even hackers) to avoid inadvertent or intentional access to sensitive information. Typically a cloud provider would use virtual machines (VMs) and a hypervisor to separate customers. TCG technologies can provide significant security improvements for VM and virtual network separation. In addition, the TPM can provide hardware-based verification of hypervisor and VM integrity. The TNC architecture and standards can provide strong network separation and security.

CLOUD LEGAL AND REGULATORY ISSUES.


To verify that a cloud provider has strong policies and practices that address legal and regulatory issues, each customer must have its legal and regulatory experts inspect cloud provider policies and practices to ensure their adequacy. The issues to be considered include data security and export, compliance, auditing, data retention and destruction, and legal discovery. In the areas of data retention and deletion, Trusted Storage and TPM access techniques can play a key role in limiting access to data.

INCIDENT RESPONSE
As part of expecting the unexpected, customers need to plan for the possibility of cloud provider security breaches or user misbehaviour. An automated response or at least automated notification is the best solution. TCGs IF-MAP (Metadata Access Protocol) specification enables the integration of different security systems and provides real-time notification of incidents and of user misbehaviour.

DRAWBACKS IN CLOUD COMPUTING


In cloud environment providing end to end security is critical As the number of services increased by cloud provider it may sometimes compromises the security

CONCLUSION
If we overcome all the difficulties and increase security and trust between cloud provider and customer then we can utilize the resources effectively.

REFERENCES
[1.] Trusted Computing Group (TCG): http://www.trustedcomputinggroup.org/ [2.] Cloud Security Alliance (CSA): http://cloudsecurityalliance.org/ [3.] A Security Analysis of Cloud Computing: (http://cloudcomputing.sys-con.com/node/1203943 [4.] Cloud Security Questions? Here are some answers (http://cloudcomputing.sys-con.com/node/1330353) [5.] Controlling Data in the Cloud: Outsourcing Computation without Outsourcing Control: http://www.parc.com/content/attachments/ControllingDataI nTheCloud-CCSW-09.pdf

You might also like