Cloud Computing Security

The idea of Homomorphic encryption is to make sure data confidentiality in messages, storage or in utilize by processes with methods similar to conventional cryptography, but with additional abilities to compute over encrypted data, searching an encrypted data, etc. A homomorphism is a property by which a problem in one algebraic system can be converted to a problem in another algebraic system, be solved and the solution later can also be converted back successfully. Therefore, homomorphism composes secure delegation of computation to a third party feasible. Various conventional encryption schemes have either multiplicative or additive Homomorphic property and are presently in use for personal applications. So far, a Fully Homomorphic Encryption (FHE) scheme which could perform any arbitrary computation over encrypted data appeared in 2009 as Gentry's work. In this paper, we suggest a multi-cloud architecture of M distributed servers to repartition the data and to almost permit achieving an FHE.

Data protection concerns have been identified as one of the most serious barriers for the deployment and development of cloud computing. 1 There is a general lack of regulation and policy on a European (EU) level. The Data Protection Directive (DPD) is currently under revision and will be replaced with a regulation in the near future.

— The cloud is no longer in future, it’s here today. The cloud has fundamentally changed the landscape of computing. Governments are facing critical challenge of improving resource utilization, increase service responsiveness, distributed storage of data, availability of resources at lower cost. In order to fulfil this huge challenge, Governments are fast adopting the new paradigm of computing: Cloud Computing. Governments are moving into Cloud as its adoption presents numerous costs, agility, and operational advantages. In early days of cloud, much of the debate focused on the different merits of Public & Private cloud and the best scenarios, in which a particular model should be adopted. Now there’s a growing realization that Hybrid Cloud is the best model for the government. The paper describes characteristics of each cloud computing deployment models and describes the best scenarios in which a particular model should be adopted based on certain parameters. However, the best scen...

This research aims to analyze the current security vulnerabilities in cloud computing, study and identify the current preventive measure used in cloud computing as well as to determine the possible areas for improvement in terms of security and integrity of cloud computing.

Salesforce is a very hot cloud computing technology in the IT industry, which is available on the cloud, with no need to install any software as well as no hardware required. Salesforce is one on-demand CRM, which runs on the platform, as well as CRM, which is a model used to manage organization interactions like phone calls, Emails, Meetings, and Social media with customers and also prospects penetrating to Sales, Marketing, and Support. In this paper, we are discussing Introduction to Cloud Computing, Service models in Cloud Computing, Types of Cloud Computing Architecture of Cloud Computing. This paper aims to show mainly the importance of Salesforce.com which is a software giant that manages to give the buyer an easyto-use as well as extremely effective CRM solution.

Lack of alignment between information technology (IT) and the business is a problem facing many organizations. Most organizations, today, fundamentally depend on IT. When IT and the business are aligned in an organization, IT delivers what the business needs and the business is able to deliver what the market needs. IT has become a strategic function for most organizations, and it is imperative that IT and business are aligned. IT governance is one of the most powerful ways to achieve IT to business alignment. Furthermore, as the use of cloud computing for delivering IT functions becomes pervasive, organizations using cloud computing must effectively apply IT governance to it. While cloud computing presents tremendous opportunities, it comes with risks as well. Information security is one of the top risks in cloud computing. Thus, IT governance must be applied to cloud computing information security to help manage the risks associated with cloud computing information security. This study advances knowledge by extending IT governance to cloud computing and information security governance.

In the light of the rapidly changing and benefits brought by cloud computing, the study is to find the critical factors that may hinder the benefits of cloud adoption, with respective measures proposed. It was found that control self-assessment (CSA) can enhance the IS security and improve business value delivery. A research model between CSA, cloud security (CS) and cloud-related business performance (CBP) are proposed, tested by distributing surveys to collect raw data, and afterward analyzed by Partial Least Square (PLS). The results can contribute to cloud adoption with practical measures suggestions.

Medical devices are becoming a major point of attack in the healthcare industry. In today's healthcare environment, medical devices send their data directly to the cloud. Medical devices can send data directly to the Electronic Health Record (EHR) or a cloud storage area for sharing with other Healthcare Delivery Organizations (HDO). These devices collect and transmit real-time Electronic Protected Health Information (ePHI) and often rely on out-of-date software that can be susceptible to malware. In order to prevent cybersecurity incidents, it is important to recognize the enormity and complexity of the problem as well as to catalog the threats and vulnerabilities. While it is possible for hackers to gain access to medical devices for nefarious purposes, a more likely scenario is that they will use this access to identify, access, and exfiltrate medical records. Sending this data to the cloud increases the attack

This paper aims to provide key insights into the privacy issues and internal threats that come to hamper SMEs by adopting cloud computing for their business functions. The results obtained through detailed study of reasons behind SMEs shift towards migrating to cloud computing services are both encouraging and alarming. Undoubtedly, most SMEs have gained immensely by reducing costs and being technologically at par with larger organisations. But at the same time, the level of risk associated with shifting to computing paradigms is undermined by most companies. The paper identifies the types of risks and privacy issues, while recommending greater education, awareness and sensitization on cloud computing. The need for effective corporate governance, stringent regulatory framework and empathetic technological adoption by SMEs are stressed upon to fight the darker side of an otherwise boon-to-business function of Cloud Computing.

Cloud Computing is an emerging technology. It is a growing technology which can change traditional IT systems. It plays a major role in today's technology sector. People are using it every day through one way or another. Education sector is not out of this phenomenon. At the present time the teaching method is changing and students are becoming much technology based and therefore it is necessary that we think about the most recent technologies to incorporate in the teaching and learning methods. By sharing Information technology related services in the cloud, educational institutions can better concentrate on offering students, teachers, faculty and staff the essential instruments. Bangladesh is a developing country. So applying this technology on education sector is a huge challenge for Bangladesh. In this paper it is discussed that how Bangladesh can be benefited by applying cloud in education and its challenges followed by some case studies and success stories.

In last two decades continues increase of comput-ational power and recent advance in the
web technology cause to provide large amounts of data. That needs large scale data
processing mechanism to handle this volume of data. MapReduce is a programming model
for large scale distributed data processing in an efficient and transparent way. Due to its
excellent fault tolerance features, scalability and the ease of use. Currently, there are several
options for using MapReduce in cloud environments, such as using MapReduce as a service,
setting up one’s own MapReduce cluster on cloud instances, or using specialized cloud
MapReduce runtimes that take advantage of cloud infrastructure services. Cloud computing
has recently emerged as a new paradigm that provide computing infrastructure and large
scale data processing mechanism in the network. The cloud is on demand, scalable and high
availability so implement of MapReduce on the top of cloud services cause faster, scalable
and high available MapReduce framework for large scale data processing. In this paper we
explain how to implement MapReduce in the cloud and also have a comparison between
implementations of MapReduce on AzureCloud, Amazon Cloud and Hadoop at the end.

Cloud computing transforms the way Information Technology (IT) is consumed and managed, promising improved cost efficiencies, accelerated innovation, faster time-to-market, and the ability to scale applications on demand (Leighton, 2009). According to Gartner, while the hype grew exponentially during 2008 and continued since, it is clear that there is a major shift towards the cloud computing model and that the benefits may be substantial (Gartner Hype-Cycle, 2012). However, as the shape of cloud computing is emerging and developing rapidly both conceptually and in reality, the legal/contractual, economic, service quality, interoperability, security, and privacy issues still pose significant challenges. In this chapter, the authors describe various service and deployment models of cloud computing and identify major challenges. In particular, they discuss three critical challenges: regulatory, security, and privacy issues in cloud computing. Some solutions to mitigate these challenge...

Cloud computing is advantageous for customers and service providers. However, it has specific security requirements that are not captured by traditional access control models, e.g., secure information sharing in dynamic and collaborative environments. Risk-based access control models try to overcome these limitations, but while there are well-known enforcement mechanisms for traditional access control, this is not the case for risk-based policies. In this paper, we motivate the use of risk-based access control in the cloud and present a framework for enforcing risk-based policies that is based on an extension of XACML. We also instantiate this framework using a new ontology-based risk assessment approach, as well as other models from related work, and present experimental results of the implementation of our work.

Cloud Computing is the new trend in Information Technology in recent years. It has attracted many clients, organizations and businesses due to its advantages of scalability, throughput, easy and cheap access and on demand. Cloud has the potential to eliminate high-cost claims that come from the installation of the IT infrastructure. It provides flexible IT architecture through the internet. This will allow multiple increase capacity or capabilities of the existing and new software. In a cloud computing environment, data stay on a set of network resources, enabling the data to be accessed through virtual machines. Since these data centers can stay in every corner of the world beyond the reach and control of users, there are multi types of security and privacy challenges that must be understood and taken care off. There are various issues that need to be addressed in relation to security and privacy in a cloud environment. This paper aims to summarize the various security issues, such as trust, encryption, identification, confidentiality, data security, ethical issues, cloud vulnerabilities and allocation of resources are shown along with the endeavors made on how to pass these issues.

Cloud computing technology offers the possibility
of inter-organizational medical data sharing at a larger
scale. The different organizations can maintain their own
cloud environment while exchanging healthcare data among
them in a peer-to-peer(P2P) fashion according to some
defined polices. However, there are many security and
privacy challenges that hamper the adoption of cloud computing
solutions in healthcare domain. Besides, due to the
privacy sensitivity of healthcare data, an organization may
not wish to disclose its identity to others when exchanging
data in the network to avoid different attacks by the
intruders. Hence, anonymously authenticated data exchange
is essential between the different peer organizations. In this
paper we propose an anonymous on-the-fly secure data
Sk. Md. M. Rahman () · M. M. Hassan · A. Alamri
Information Systems Department, College of Computer
and Information Sciences(CCIS), Research Chair of Pervasive
and Mobile Computing, King Saud University, Riyadh, KSA
e-mail: mizan@ksu.edu.sa
M. M. Hassan
e-mail: mmhassan@ksu.edu.sa
A. Alamri
e-mail: atif@ksu.edu.sa
M. A. Hossain · A. Alelaiwi
Software Engineering Department, College of Computer
and Information Sciences(CCIS), King Saud University,
Riyadh, KSA
e-mail: mahossain@ksu.edu.sa
A. Alelaiwi
e-mail: aalelaiwi@ksu.edu.sa
Md. M. Masud
Computer Science Department, Taif University, Taif, KSA
e-mail: mmasud@tu.edu.sa
exchange protocol for such environment based on pairingbased
cryptography. Our proposed solution allows cloud
peers to dynamically generate temporary identities that are
used to produce a session key for each session of data
exchange. The proposed protocol is robust against different
attacks, such as target-oriented, man-in-the middle,
masquerade, and message manipulation attacks.

Inspired by the dramatic evolution of VANETclouds, this paper proposes a new VANET-cloud service called VWaaS (Vehicle Witnesses as a Service) in which vehicles moving on the road serve as anonymous witnesses of designated events such as a terrorist attack or a deadly accident. When confronted the events, a group of vehicles with mounted cameras collaborate with roadside stationary cameras to take pictures of the site of interest (SoI) around them, and send the pictures to the cloud infrastructure anonymously. The pictures are sent to the cloud in a way that the privacy of the senders can be protected, and kept by the cloud for future investigation. However, for the case that the pictures are used as an evidence of court trial, we made the privacy protection to be conditional and thus can be revoked by authorized entity(s) if necessary.

Computing is changing frequently to serve the user’s needs for security and reducing a dependency which leads researcher to develop newer technologies. Cloud computing is one of those technologies which successfully delivers the service oriented architecture to reduce the burdensome of managing the devices. But in some situation instead of providing controls to the end user it operates as a reverse effect. Data destruction is the one of that transformation in which the deletion of data is required by the user from the storage locations. But the existing destruction mechanism will leaves certain type of metadata residues from which either the data or users information can be regenerated which gives an attack prone zone for outsiders. This work proposes a novel IT-DHSD mechanism based on effective active storage object transition with privacy enabled operation to give more control to the user. In this each object contains the data and the destruction or deletion time which works as an...

Cloud computing is a growing area of concern in the IT security community because cloud architectures are literally popping up all over. Public clouds are available from Google.com, Amazon.com, Microsoft, Oracle/Sun, Canonical/Eucalyptus and many other vendors. Private cloud technologies, where the cloud software is loaded on local or in-house server hardware, are available from VMware, Eucalyptus, Citrix, Microsoft, and there are thousands of vendors offering cloud solutions of all sorts. A search for private cloud hosting on Google.com produced 581,000 page results.

Strong cloud security begins with the infrastructure. If the cloud system’s infrastructure is insecure, it puts the confidentiality and availability of all information used via that cloud system at risk. The infrastructure constitutes a cloud system’s first line of defense. This can be enforced by patching servers, configuring firewalls, and placing intrusion- detection systems (IDS). Security Pain Points must be identified.

This paper is concerned with discovery of the vulnerabilities in the landscape of clouds, discovery of security solutions, and finding evidence that early-adopters or developers have grown more concerned with security.

Cloud Computing is a newly born type of computation, which depends on the shared resources of the network. Cloud Computing term discovered from that time when the system can access the different types of applications as well as different types of services remotely. Cloud Computing is the unique, next generation of IT architecture, in which computation is done on the open network shared resources, which create a security risk. In comparison to the existing conventional infrastructure, The IT services come under the IT expert control. In a market there is a different type of service provider using cloud computing features offers many different services like virtualization, applications, servers, data sharing, and try to the reduce client-side computation overhead. Nevertheless, most of these services are outsourced to the third party, which creates the risk of data confidentiality as well as the data integrity. These days cloud computing, and its security is the hot topic for the research. In this paper, a new model proposed for storage data on the network for the secure data storage on the cloud server, which achieve the security, availability, confidentiality and integrity.

Cloud Computing is emerging amongst all the bombilate words of acclivitous technologies as the most prodigious maturations in the chronicles of computing. As it still takes time to settle,a new egressing challenge as felt whilst its implementation across has been a relatively more
newfangled field known as Cloud Forensics. Today as Cloud still needs time to mature and offer its full exploitation, the even newer subfield Cloud Forensics is a carking cause to negate immediate acceptance of cloud computing with open arms. The research in this field is still in parturient stages to say from perspective of the way cases and incidents are being handled on ground today.To bring out few key pertinent issues that immediately come to the fore include Distributed storage instead of the traditional Local storage which was easy to confiscate by the forensic team or we take the issue of shared storage in a multi user environment that may be hired on a time bound deal by the user from the CSP[1] or even if a particular user associated with data location is identified, secerning it from other users is never going to be easy owing to confidentiality and privacy issues!!!In this paper I discuss and build upon the challenges as available today to the forensics industry focused on growing Clouds.

Cloud computing is technique cost-effective, flexible, and convenient in remote access to applications and storage services, making it easy to provide information technology services and business across the Internet. Nevertheless, the use of cloud computing is an additional source of security risk due to third-party outsourcing, as makes maintaining the privacy, availability and security of data is very difficult. Cloud computing has many of its supporting technologies (virtualization, Web 2.0, service-oriented architecture), which inherits many security issues and makes them susceptible to attacks. Most of the previous work focused on storing data in the cloud without taking security issues and attacks into consideration. In this paper, we provide an analysis of security issues in cloud storage and possible solutions. With regard to the attacks on the data stored in the clouds, parametric comparison including all the details and countermeasures are provided. Finally, this paper provides a significant contribution to building a secure cloud environment for data storage, its privacy and recovery in disaster situations.

The Cloud Computing concept offers dynamically scalable resources provisioned as a service over the Internet. Economic benefits are the main driver for the Cloud, since it promises the reduction of capital expenditure (CapEx) and operational expenditure (OpEx). In order for this to become reality, however, there are still some challenges to be solved. Amongst these are security and trust issues, since the user's data has to be released to the Cloud and thus leaves the protectionsphere of the data owner. Most of the discussions on this topics are mainly driven by arguments related to organisational means. This paper focusses on technical security issues arising from the usage of Cloud services and especially by the underlying technologies used to build these cross-domain Internet-connected collaborations.

In this paper, we investigate the problem of improving the performance and scalability of large firewall policies that comprise thousands of rules by detecting and resolving any potential conflicts among them. We present a novel, highly scalable data structure that requires O(n) space where n is the number of rules in the policy to represent the dependency among rules. After that, we describe a practical heuristic that utilizes our data structure to find conflicting rules, and consequently find an optimal ordering of consistent ones. Our algorithm has time complexity O(n 2 log n), making it the fastest to-date known algorithm for firewall rule anomaly discovery and resolution. We validate the practicality of our algorithm through real-life firewall policies and synthetic firewall policies of large data. Performance results show that our heuristic algorithm achieves from 40% to 87% improvement in the number of comparisons overhead, comparatively with the original policies.

The purpose of this thesis is to valuate different approaches and methods used in the oil industry, based on theory, research and industrial experience. An evaluation of three oil companies’ safety culture approaches were therefore conducted; BP Oman, Oman Oil and Petroleum Development Oman, in order to suggest an approach suited for establishing a “good” safety culture according to the Royal Decree of Oman 32/2003 and Oman Ministerial Decree 286/2008. The Oman Society of Petroleum Services (OPAL) and ORPIC, Oman were also used to crosscheck the different organizations for similarities and differences to their safety culture approaches and methods, bringing in several aspects of the Oman oil industry. The evaluation was mainly based on Hale’s (2000) eight elements, which were used as rationale for a “good” safety culture, according to the Royal Decree of Oman 32/2003 and Oman Ministerial Decree 286/2008 The evaluation was carried out by seven in-depth interviews from the six organiz...

Information Technology (IT) infrastructure and related research communities can help tackle environmental challenges in developing countries through environmentally sustainable models of economic development. The paper sought to examine the status of current and emerging environmentally friendly technologies, equipment and applications in supporting programs that play a role in addressing environment degradation in Kenya. It also sought to underscore the role of IT in environmentally sustainable consumption. The paper examines what constitutes environment degradation and explores the negative effects of IT infrastructure on the environment. The consequences of E-waste on environment are discussed followed by green IT as part of the solution to environment degradation as a result of adoption of IT. The papers also discuss the available IT infrastructure that can be used to combat the challenges of environment degradation. The paper ends with possible IT infrastructure measures that c...

The unmatchable progress in Information Technology based Products have encouraged the customers to use free unlimited and ever available cloud storages. The Cloud Storages save hardware investment of customers for storage. Rapid Data migration into cloud storages had been expected by IT industry with all of these developments. However, the growth of data migration has not adopted the pace as expected because of Data security and Speed of cryptographic algorithm's issues in cloud. In this paper, we are discussing mainly two mostly used Cryptographic algorithms AES and 3DES and in later section we are also comparing AES, 3DES with RC6, Twofish and Blowfish and we are analyzing the performance of these algorithms in terms of encryption and decryption time taken depending upon the four factors namely file type, file size, key type and key size. For performance analysis, we are introducing in-house developed Crypter tools where we have integrated five cryptographic algorithms 3DES, AES, RC6, Twofish and Blowfish.The Crypter tool is deployed in Amazon Cloud and Tool is capable to encrypt and decrypt different types of files (in terms of size and format) depending upon variable or fixed type of key using AES, 3DES, RC6, Twofish and Blowfish and The performance of these Cryptographic algorithms 3DES, AES, RC6, Twofish and Blowfish can be analyzed in terms of time taken depending upon different types of files and different types of Keys. Analysis of the result obtained will help the user's to take decision regarding the selection of best symmetric algorithm to be used while uploading data in cloud.

Lack of alignment between information technology (IT) and the business is a problem facing many organizations. Most organizations, today, fundamentally depend on IT. When IT and the business are aligned in an organization, IT delivers what the business needs and the business is able to deliver what the market needs. IT has become a strategic function for most organizations, and it is imperative that IT and business are aligned. IT governance is one of the most powerful ways to achieve IT to business alignment.

Cloud computing has gained a lot of publicity in the current IT world. After the internet, Cloud computing is the next big thing in the computer world. Cloud computing is the use of the Internet for the tasks performed on the computer and it is the nextgeneration architecture of IT Industry. Cloud computing is related to different technologies and the convergence of various technologies has emerged to be called cloud computing. Cloud Computing moves the application software and databases to the large data centers, where the management of the data and services may not be fully trustworthy. This unique attribute, however, poses many new security challenges which have not been well understood. In this paper, we discuss the design mechanisms that not only protect sensitive data with encrypted data, but also protect customers from malicious behaviors by enabling the validation of the computation result.

Cloud computing provides network based access to computing and data storage services on a pay per usage model. Cloud provides better utilization of resources and hence a reduced service access cost to individuals. Cloud services include software as a service, platform as a service, and infrastructure as a service. Cloud computing virtually and dynamically distributes the computing and data resources to a variety of users, based on their needs, with the use of virtualization technologies. As Cloud computing is a shared facility and is accessed remotely, it is vulnerable to various attacks including host and network based attacks (Brown 2012, and Grance 2009) and hence requires immediate attention. This paper identifies vulnerabilities responsible for well-known network based attacks on cloud and does a critical analysis on the security measures available in cloud environment. This paper focuses on a nonconventional technique for securing cloud network from malicious insiders and outsiders with the use of network profiling. With network profiling, a profile is created for each virtual machine (VM) in cloud that describes network behavior of each cloud user (an assigned VM). The behavior gathered is then used for determination (detection) of network attacks on cloud. The novelty of the approach lies in the early detection of network attacks with robustness and minimum complexity. The proposed technique can be deployed with minimal changes to existing cloud environment. An initial prototype implementation is verified and tested on private cloud with a fully functional implementation under progress.

ABSTACT
Fog computing is a prime example that extends Cloud computing and Internet of Things (IoT) application services to the edge of the network. Correlated to Cloud, Fog computing provides data transferring, larger and more immediate storage bandwidth and application services to end users. This innovative architecture stands in close correlation with its Cloud counterpart. As it is well known Cloud faces various security and privacy problems thus inheriting most of them to Fog computing along side some new security and privacy challenges because of Fog's distinct characteristics. Later on, we will cite these new challenges and threads.

Cloud computing is an Internet-based computing and next stage in evolution of the internet. It has received significant attention in recent years but security issue is one of the major inhibitor in decreasing the growth of cloud computing. It essentially shifts the user data and application software to large datacenters i.e, cloud, which is remotely located, at which user does not have any control and the management of data may not be completely secure. However, this sole feature of the cloud computing introduce many security challenges which need to be resolved and understood clearly. One of the most important and leading is security issue that needs to be addressed. Data Security concerns arising because both user data and program are located in provider premises. In this study, an attempt is made to review the research in this field. The results of review are categorized on the basis of type of approach and the type of validation used to validate the approach.

Cloud computing is the latest distributed computing paradigm and it offers tremendous opportunities to solve large-scale scientific problems. However, it presents various challenges that need to be addressed in order to be efficiently utilized for workflow applications. Although the workflow scheduling problem has been widely studied, there are very few initiatives tailored for cloud environments. Furthermore, the existing works fail to either meet the user's quality of service (QoS) requirements or to incorporate some basic principles of cloud computing such as the elasticity and heterogeneity of the computing resources. This paper proposes a resource provisioning and scheduling strategy for scientific workflows on Infrastructure as a Service (IaaS) clouds. We present an algorithm based on the meta-heuristic optimization technique, particle swarm optimization (PSO), which aims to minimize the overall workflow execution cost while meeting deadline constraints. Our heuristic is evaluated using CloudSim and various well-known scientific workflows of different sizes. The results show that our approach performs better than the current state-of-the-art algorithms.

Secure search over encrypted remote data is crucial in cloud computing to guarantee the data privacy and usability. To prevent unauthorized data usage, fine- grained access control is necessary in multi-user system. However, authorized user may intentionally leak the secret key for financial benefit. Thus, tracing and revoking the malicious user who abuses secret key needs to be solved imminently. In this paper, we propose a Privacy Protection Access Control and Keyword Search Scheme (PP- ACKS). The key escrow free mechanism could effectively prevent the key generation centre (KGC) from unscrupulously searching and decrypting all encrypted files of users. Also, the decryption process only requires ultra lightweight computation, which is a desirable feature for energy-limited devices. In addition, efficient user revocation is enabled after the malicious user is figured out. Moreover, the proposed system is able to support flexible number of attributes rather than polynomial bounded. Flexible multiple keyword subset search pattern is realized, and the change of the query keywords order does not affect the search result. Security analysis indicates that PP- ACKS is provably secure. Eff iciency analysis and experimental results show that PP- ACKS improves the efficiency and greatly reduces the computation overhead of users’ terminals.

—Cloud computing is a technological breakthrough in computing. It has affected each and every part of the information technology, from infrastructure to the software deployment, from programming to the application maintenance. Cloud offers a wide array of solutions for the current day computing needs aided with benefits like elasticity, affordability and scalability. But at the same time, the incidence of malicious cyber activity is progressively increasing at an unprecedented rate posing critical threats to both government and enterprise IT infrastructure. Account or service hijacking is a kind of identity theft and has evolved to be one of the most rapidly increasing types of cyber-attack aimed at deceiving end users. This paper presents an in depth analysis of a cloud security incident that happened on The New York Times online using account hijacking. Further, we present incident prevention methods and detailed incident prevention plan to stop future occurrence of such incidents.

Today, human being can " t think of surviving without internet as it becomes the inevitable part of their life where each and everything in this world is connected together with the help of internet. Connectivity is one of the fundamental challenges to achieve this, and for the same continuous efforts have been made and nowadays efforts have been made in the direction of sky or (towards the sky). As number of the users accessing internet keeps on increasing day by day, and for the same facebook makes an initiative in form of DRONES. This paper focuses on the mechanism which is a level ahead of the previous ones for providing internet services and the initiative taken by project handled by facebook and Internet.org in the form of " FACEBOOK DRONES ". Aiming to provide internet service to the areas of the world where humans have no or little internet access. It is a technique of providing internet services through huge drones which has a wingspan of a Boeing 737 weighing less than a car will operate at the height of 60,000 to 90,000 feet , in the air ,and can stay airborne for three months while offering the internet speeds of 10 gigabits per second.

This article contributes to the foundational understanding of the security vulnerabilities and risk towards wireless grid Edgeware technology. Since communication networks and devices are subject to becoming the target of exploitation by hackers (e.g., individuals who attempt to gain unauthorised access to computer systems), these individuals are gaining ever-increasing knowledge of the often widely-reported exploitable vulnerabilities in these types of innovative technologies; and thus are able to craft increasingly effective computer network attacks (CNA) against such technologies. This research responds to the overall proposition: what security vulnerability enumerations would contribute to the degradation and risk in using a wireless grid Edgeware application in a virtualised cloud environment? Using supporting research pertaining to cyber-attacks and vulnerabilities towards a wireless cloud (e.g., the integration of a cloud computing and a wireless grid architecture), security vulnerabilities in virtualisation environments and specific vulnerabilities exploited against a wireless grid Edgeware application, this research provides a greater understanding of the practical ways wireless grid Edgeware technology can be attacked and the risk in utilising this technology.

—In previous publications we have introduced the concept of using a component-based software engineering paradigm to build Internet-enabled applications. We have proposed that this design allows for greater flexibility in deployment, better utilisation of resources and a reduction in total application development effort. We have described a system and realised that system as an API that can be used to design, build and execute such components. In this report we provide an overview of the key system components and present an implementation of an application developed using the system. We use this application to perform experimental and functional comparisons to show that the system provides advancements over the status quo. Keywords—cloud computing; component-based software engineering; platform-as-a-service

Cloud computing provides IT services to users worldwide, Data centers in Clouds consume large amount of Energy leading to highly effective costs. Therefore green energy computing is solution for decreasing operational costs. This survey presents efficient resource allocation and Scheduling algorithm/Techniques analyzed on different network parameters without compromising network performance and SLA constraints. Results are analyzed on different measures, providing a significant cost saving and improvement in Energy Efficiency.

Cloud computing has captured a major attention of research community to provide efficient data management. SQL query processor based on cloud technology is an effort to introduce high-level needs like graphical interface which includes features of SQL-editing tool.  A novel design has been presented to implement the cloud based SQL query processor on various databases (DB).  The work presented in this study will support the ongoing development of technologies and research. A secure web based SQL editing system that will enable the students and staff to edit, execute the SQL statements and to perform syntax checking through GUI interface with the help of online interactive support and so that one can view the database through graphical representation has been developed with features like auto-complete/autosuggest that adds more user-friendliness to the system.

Keywords— Cloud Computing, Data Management, Query Processing, SQL, Web Services

Citation/Export
MLA

Aakib F. Bagwan, Bharti A. Gupta , Bhagyashri M. Dhole, Prof. Ashvini Y. Bhamare, “Web Based Image search Using Semantic Signature Re-ranking Technique”, January 15 Volume 3 Issue 1 , International Journal on Recent and Innovation Trends in Computing and Communication (IJRITCC), ISSN: 2321-8169, PP: 52 - 56, DOI: 10.17762/ijritcc2321-8169.150112
APA

Aakib F. Bagwan, Bharti A. Gupta , Bhagyashri M. Dhole, Prof. Ashvini Y. Bhamare, January 15 Volume 3 Issue 1, “Web Based Image search Using Semantic Signature Re-ranking Technique”, International Journal on Recent and Innovation Trends in Computing and Communication (IJRITCC), ISSN: 2321-8169, PP: 52 - 56, DOI: 10.17762/ijritcc2321-8169.150112

There has been a growing trend to use the cloud for largescale data storage. It has raised the important security issue of
controlling and preventing any unauthorized access of data
stored in the cloud. The role-based access control (RBAC)
one of the well known access control model provides flexible
controls and management by providing two mappings, one by
mapping users to the roles and another by roles to the
privileges on the data objects. In this we will discuss a rolebased encryption (RBE) scheme that has been used previously
with RBAC. A hybrid cloud storage of the RBE scheme
architecture permits an organization to store data secure in a
public cloud and maintains the private information related to
the organizational structure in a private cloud. In this we will
also focus on the models that are available in cloud
computing.

With expanding volumes of knowledgeable production and the variability of themes and roots, shapes and languages, most detectable issues related to the delivery of storage space for the information and the variety of treatment strategies in addition to the problems related to the flow of information and methods go down and take an interest in the advantage of them face the researchers. In any case, such a great
significance comes with a support of a great infrastructure that includes large data centers comprising thousands of server units and other supporting equipment. The cloud is not a small, undeveloped branch of it, it is a type of computing that is based on the internet, an image from the internet. Cloud Computing is a developed technology, cloud computing, possibly offers an overall economic benefit, in that end users shares a large, centrally achieved pool of storing and computing resources, rather than owning and managing their own systems. But, it needs to be environment friendly also. This review paper gives a general overview of cloud computing, also it describes cloud computing, architecture of cloud computing, characteristics of cloud computing, and different services and deployment model of cloud computing. This
paper is for anyone who will have recently detected regarding cloud computing and desires to grasp a lot of regarding cloud computing.