Abstract:Cloud Computing has been envisioned as the next-generation architecture of IT Enterprise. It moves the application software and databases to the centralized large data centers, where the management of the data and services may not be fully trustworthy. This unique paradigm brings about many new security challenges, which have not been well understood. This work studies the problem of ensuring the integrity of data storage in Cloud Computing. In particular, we consider the task of allowing a third party auditor (TPA), on behalf of the cloud client, to verify the integrity of the dynamic data stored in the cloud. The introduction of TPA eliminates the involvement of the client through the auditing of whether his data stored in the cloud are indeed intact, which can be important in achieving economies of scale for Cloud Computing. The support for data dynamics via the most general forms of data operation, such as block modification, insertion, and deletion, is also a significant step toward practicality, since services in Cloud Computing are not limited to archive or backup data only. While prior works on ensuring remote data integrity often lacks the support of either public auditability or dynamic data operations, this paper achieves both. We first identify the difficulties and potential security problems of direct extensions with fully dynamic data updates from prior works and then show how to construct an elegant verification scheme for the seamless integration of these two salient features in our protocol design. In particular, to achieve efficient data dynamics, we improve the existing proof of storage models by manipulating the classic Merkle Hash Tree construction for block tag authentication. To support efficient handling of multiple auditing tasks, we further explore the technique of bilinear aggregate signature to extend our main result into a multiuser setting, where TPA can perform multiple auditing tasks simultaneously. Extensive security and performance analysis show that the proposed schemes are highly efficient and provably secure.

Application-Assisted Dynamic Attestation for Jvm-Based Cloud

Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

Trust Model to Enhance Security and Interoperability of Cloud Environment

Application-Oriented Remote Verification Trust Model in Cloud Computing

��计算中基于可转换代理签密的可证安全的认证协议

Practical Verifiable Computation–A MapReduce Case Study

Trusted computing dynamic attestation using a static analysis based behaviour model

Trustworthy confidential virtual machines for the masses

A Watermark-Aware Trusted Running Environment for Software Clouds.

Research on eID-Based Virtual Machine Trusted Attestation System in IaaS Cloud

CloudCoT: A Blockchain-Based Cloud Service Dependency Attestation Framework

Dynamic Multiparty Authentication of Data Analytics Services within Cloud Environments

Partial Attestation: Towards Cost-Effective and Privacy-Preserving Remote Attestations

A Double-Blind Anonymous Evaluation-Based Trust Model in Cloud Computing Environments

Enabling Public Verifiability and Data Dynamics for Storage Security in Cloud Computing

vTrust: Remotely Executing Mobile Apps Transparently With Local Untrusted OS

Remote Attestation on Program Execution

Based on Trusted Computing User Security Model for Cloud Computing

A New Trusted and Collaborative Agent Based Approach for Ensuring Cloud Security

Scalable Attestation of Virtualized Execution Environments in Hybrid- and Multi-Cloud

Enhancing the Trustworthiness of 6G Based on Trusted Multi-Cloud Infrastructure: A Practice of Cryptography Approach