STJEE504 Ensuring Data Storage Security in Cloud Computing

Ensuring Data Storage Security in Cloud Computing

ABSTRACT

Cloud computing has been envisioned as the next-generation architecture of IT enterprise. In contrast to traditional
solutions, where the IT services are under proper physical, logical and personnel controls, cloud computing moves
the application software and databases to the large data centers, where the management of the data and services may
not be fully trustworthy. This unique attribute, however, poses many new security challenges which have not been
well understood. In this article, we focus on cloud data storage security, which has always been an important aspect
of quality of service. To ensure the correctness of users' data in the cloud, we propose an effective and flexible
distributed scheme with two salient features, opposing to its predecessors. By utilizing the homomorphic token with
distributed verification of erasure-coded data, our scheme achieves the integration of storage correctness insurance
and data error localization, i.e., the identification of misbehaving server (s). Unlike most prior works, the new
scheme further supports secure and efficient dynamic operations on data blocks, including: data update, delete and
append. Extensive security and performance analysis shows that the proposed scheme is highly efficient and
resilient against Byzantine failure, malicious data modification attack, and even server colluding attacks.

System Architecture:

Existing System:

From the perspective of data security, which has always been an important aspect of quality of service, Cloud
Computing inevitably poses new challenging security threats for number of reasons.

1 . Firstly, traditional cryptographic primitives for the purpose of data security protection can not be directly adopted
due to the users’ loss control of data under Cloud Computing. Therefore, verification of correct data storage in the
cloud must be conducted without explicit knowledge of the whole data. Considering various kinds of data for each
user stored in the cloud and the demand of long term continuous assurance of their data safety, the problem of
verifying correctness of data storage in the cloud becomes even more challenging.

2 . Secondly, Cloud Computing is not just a third party data warehouse. The data stored in the cloud may be
frequently updated by the users, including insertion, deletion, modification, appending, reordering, etc. To ensure
storage correctness under dynamic data update is hence of paramount importance.

These techniques, while can be useful to ensure the storage correctness without having users possessing data, can
not address all the security threats in cloud data storage, since they are all focusing on single server scenario and
most of them do not consider dynamic data operations. As an complementary approach, researchers have also
proposed distributed protocols for ensuring storage correctness across multiple servers or peers. Again, none of
these distributed schemes is aware of dynamic data operations. As a result, their applicability in cloud data storage
can be drastically limited.

Proposed System:

In this paper, we propose an effective and flexible distributed scheme with explicit dynamic data support to ensure
the correctness of users’ data in the cloud. We rely on erasure correcting code in the file distribution preparation to

1|Page
STJEE504 Ensuring Data Storage Security in Cloud Computing

provide redundancies and guarantee the data dependability. This construction drastically reduces the communication
and storage overhead as compared to the traditional replication-based file distribution techniques. By utilizing the
homomorphic token with distributed verification of erasure-coded data, our scheme achieves the storage correctness
insurance as well as data error localization: whenever data corruption has been detected during the storage
correctness verification, our scheme can almost guarantee the simultaneous localization of data errors, i.e., the
identification of the misbehaving server(s).
1. Compared to many of its predecessors, which only provide binary results about the storage state across the
distributed servers, the challenge-response protocol in our work further provides the localization of data error.

2. Unlike most prior works for ensuring remote data integrity, the new scheme supports secure and efficient dynamic
operations on data blocks, including: update, delete and append.

3. Extensive security and performance analysis shows that the proposed scheme is highly efficient and resilient
against Byzantine failure, malicious data modification attack, and even server colluding attacks.

Modules:
1. Client Module:

In this module, the client sends the query to the server. Based on the query the server sends the corresponding file to
the client. Before this process, the client authorization step is involved.In the server side, it checks the client name
and its password for security process. If it is satisfied and then received the queries form the client and search the
corresponding files in the database. Finally, find that file and send to the client. If the server finds the intruder
means, it set the alternative Path to those intruder.

USER

NON-EXISTING
EXISTING
USER
USER

ENTER
`USERNAME REGISTER WITH
& PWD THE SERVER

NO
IS
VALID

YES

CONNECT WITH THE

SERVER

2. System Module:

Representative network architecture for cloud data storage is illustrated in Figure 1. Three different network entities
can be identified as follows:
• User:
Users, who have data to be stored in the cloud and rely on the cloud for data computation, consist of both individual
consumers and organizations.
• Cloud Service Provider (CSP):
A CSP, who has significant resources and expertise in building and managing distributed cloud storage servers,
owns and operates live Cloud Computing systems,.
• Third Party Auditor (TPA):
An optional TPA, who has expertise and capabilities that users may not have, is
Trusted to assess and expose risk of cloud storage services on behalf of the users upon request.

2|Page
STJEE504 Ensuring Data Storage Security in Cloud Computing

3. Cloud data storage Module:

Cloud data storage, a user stores his data through a CSP into a set of cloud servers, which are running in a
simultaneous, the user interacts with the cloud servers via CSP to access or retrieve his data. In some cases, the user
may need to perform block level operations on his data.. users should be equipped with security means so that they
can make continuous correctness assurance of their stored data even without the existence of local copies. In case
that users do not necessarily have the
time, feasibility or resources to monitor their data, they can delegate the tasks to an optional trusted TPA of their
respective choices. In our model, we assume that the point-to-point communication channels between each cloud
server and the user is authenticated and reliable, which can be achieved in practice with little overhead.

4. Cloud Authentication Server:

The Authentication Server (AS) functions as any AS would with a few additional behaviors added to the typical
client-authentication protocol. The first addition is the sending of the client authentication information to the
masquerading router. The AS in this model also functions as a ticketing authority, controlling permissions on the
application network. The other optional function that should be supported by the AS is the updating of client lists,
causing a reduction in authentication time or even the removal of the client as a valid client depending upon the
request

5. Unauthorized data modification and corruption module:

One of the key issues is to effectively detect any unauthorized data modification and corruption, possibly due to
server compromise and/or random Byzantine failures. Besides, in the distributed case when such inconsistencies are
successfully detected, to find which server the data error lies in is also of great significance

6. Adversary Module:

Security threats faced by cloud data storage can come from two different sources. On the one hand, a CSP can be
self-interested, untrusted and possibly malicious. Not only does it desire to move data that has not been or is rarely
accessed to a lower tier of storage than agreed for monetary reasons, but it may also attempt to hide a data loss
incident due to management errors, Byzantine failures and so on.
On the other hand, there may also exist an economicallymotivated adversary, who has the capability to compromise
a number of cloud data storage servers in different time intervals and subsequently is able to modify or delete users’
data while remaining undetected by CSPs for a certain period. Specifically, we consider two types of adversary with
different levels of capability in this paper:
Weak Adversary: The adversary is interested in corrupting the user’s data files stored on individual servers. Once a
server is comprised, an adversary can pollute the original data files by modifying or introducing its own fraudulent
data to prevent the original data from being retrieved by the user.

Strong Adversary: This is the worst case scenario, in which we assume that the adversary can compromise all the
storage servers so that he can intentionally modify the data files as long as they are internally consistent. In fact, this
is equivalent to the case where all servers are colluding together to hide a data loss or corruption incident.

System Requirements:

Hardware Requirements:
• System : Pentium IV 2.4 GHz.
• Hard Disk : 40 GB.
• Floppy Drive : 1.44 Mb.
• Monitor : 15 VGA Colour.
• Mouse : Logitech.
• Ram : 512 Mb.
Software Requirements:
• Operating system : - Windows XP.
• Coding Language: -JAVA,Swing,RMI,J2me(WirelessToolkit)
• Tool Used : - Eclipse 3.3

3|Page