Towards secure mobile cloud computing: A survey

Future Generation Computer Systems

Volumn 29, Issue 5, 2013, Pages 1278-1299

  Khan, Abdul Nasir ^a   Mat Kiah, M L ^a   Khan, Samee U ^b   Madani, Sajjad A ^c  

^a UNIVERSITY OF MALAYA   (Malaysia)

^b North Dakota State University   (United States)

^c Department of Physics   (Pakistan)

Author keywords

Cloud computing; Mobile cloud computing; Privacy; Security; Virtualization

Indexed keywords

CLOUD COMPUTING; DATA PRIVACY; SECURITY SYSTEMS; SURVEYS; VIRTUALIZATION;

LITERATURE REVIEWS; POTENTIAL PROBLEMS; RESEARCH ORGANIZATION; SECURITY; SECURITY AND PRIVACY; SECURITY POLICY; SECURITY THREATS; STATE OF THE ART;

MOBILE CLOUD COMPUTING;

EID: 84866668858     PISSN: 0167739X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.future.2012.08.003     Document Type: Article

References (71)

1. M. Armbrust, A. Fox, R. Griffith, A.D. Joseph, R.H. Katz, A. Konwinski, G. Lee, D.A. Patterson, A. Rabkin, I. Stoica, M. Zaharia, Above the clouds: a Berkeley view of cloud computing, Technical Report UCB/EECS-2009-28, EECS Department, University of California, Berkeley, Feb. 2009.
2. R. Ranjan, A. Harwood, R. Buyya, Grid federation: an economy based distributed resource management system for large-scale resource coupling, Technical Report GRIDS-TR-2004-10, Grid Computing and Distributed Systems Laboratory, University of Melbourne, Australia, 2004.
3. R. Buyya, R. Ranjan, Federated resource management in grid and cloud computing systems, Future Generation Computer Systems 26 (8) (2006) 1189-1191.
4. B. Sotomayor, R.S. Montero, I.M. Lorente, I. Foster, Virtual infrastructure management in private and hybrid clouds, IEEE Internet Computing 13 (5) (2009) 14-22.
5. L. Wang, J. Tao, M. Kunze, H. Von, D. Kramer, W. Karl, Scientific cloud computing: early definition and experience, in: Proc. 10th IEEE Int. Conference on High Performance Computing and Communications, HPCC '08, Dalian, China, Sep. 2008.
6. F. Hu, M. Qiu, J. Li, T. Grant, D. Tylor, S. Mccaleb, L. Butler, R. Hamner, A review on cloud computing: design challenges in architecture and security, Journal of Computing and Information Technology 19 (1) (2011) 25-55.
7. A. Nathani, S. Chaudhary, G. Somani, Policy based resource allocation in IaaS cloud, Future Generation Computer Systems 26 (1) (2012) 94-103.
8. L. Wang, G.V. Laszewski, A. Younge, X. He, M. Kunze, J. Tao, C. Fu, Cloud computing: a perspective study, New Generation Computing 28 (2) (2010) 137-146.
9. B. Rochwerger, D. Breitgand, E. Levy, A. Galis, K. Nagin, I.M. Lorente, R. Montero, Y. Wolfsthal, E. Elmroth, J. Caceres, M. Benyhuda, W. Emmerich, F. Galan, The reservoir model and architecture for open federated cloud computing, IBM Journal of Research and Development 53 (4) (2009) 1-11.
10. J. Murty, Programming Amazon Web Services: S3, EC2, SQS, FPS, and SimpleDB, first ed., O'Reilly Media, 2008.
11. E.Y. Chen, M. Itoh, Virtual smartphone over IP, in: Proc. IEEE Int. Symposium on A World of Wireless Mobile and Multimedia Networks, WoWMoM '10, Montreal, QC Canada, June 2010.
12. Google App Engine, September 02, 2011. https://developers.google.com/ appengine/.
13. Force.com Apex Code Developer's Guide, September 06, 2011. http://www.salesforce.com/us/developer/docs/apexcode/index.htm.
14. B.P. Rimal, E. Choi, I. Lumb, A taxonomy and survey of cloud computing systems, in: Proc. 5th Int. Joint Conference of INC, IMS and IDC, NCM '09, Seoul, Korea, Nov. 2009.
15. H. Canepa, D. Lee, A virtual cloud computing provider for mobile devices, in: Proc. 1st ACM Workshop on Mobile Cloud Computing & Services Social Networks and Beyond, MCS '10, San Francisco, USA, June 2010.
16. K. Kumar, Y.H. Lu, Cloud computing for mobile users: can offloading computation save energy? IEEE Journal Computer 43 (4) (2010) 51-56.
17. D. Zissis, D. Lekkas, Addressing cloud computing security issues, Future Generation Computer Systems 28 (3) (2012) 583-592.
18. S. Subashini, V. Kavitha, A survey on security issues in service delivery models of cloud computing, Journal of Network and Computer Applications 34 (1) (2011) 1-11.
19. R. Buyya, C.S. Yeo, S. Venugopal, J. Broberg, I. Brandic, Cloud computing and emerging IT platforms: vision, hype, and reality for delivering computing as the 5th utility, Future Generation Computer Systems 25 (6) (2009) 599-616.
20. C.O. Diaz, M. Guzek, J.E. Pecero, P. Bouvry, S.U. Khan, Scalable and energy-efficient scheduling techniques for large-scale systems, in: Proc. 11th IEEE Int. Conference on Computer and Information Technology, CIT '11, Pafos, Cyprus, Sep. 2011.
21. C. Cai, L. Wang, S.U. Khan, J. Tao, Energy-aware high performance computing: a taxonomy study, in: Proc. 17th IEEE Int. Conference on Parallel and Distributed Systems, ICPADS '11, Tainan, Taiwan, Dec. 2011.
22. I. Goiri, J.L. Berral, J.O. Fitó, F. Julià, R. Nou, J. Guitart, R. Gavaldà, J. Torres, Energy-efficient and multifaceted resource management for profit-driven virtualized data centers, Future Generation Computer Systems 28 (5) (2012) 718-731.
23. D. Kliazovich, P. Bouvry, S.U. Khan, DENS: data center energy-efficient network-aware scheduling, in: Proc. ACM/IEEE Int. Conference on Green Computing and Communications, GreenCom '10, Hangzhou, China, Dec. 2010.
24. P. Lindberg, J. Leingang, D. Lysaker, S.U. Khan, J. Li, Comparison and analysis of eight scheduling heuristics for the optimization of energy consumption and makespan in large-scale distributed systems, Journal of Supercomputing 59 (1) (2012) 323-360.
25. D.M. Quan, F. Mezza, D. Sannenli, R. Giafreda, T-alloc: a practical energy efficient resource allocation algorithm for traditional data centers, Future Generation Computer Systems 28 (5) (2012) 791-800.
26. C.O. Diaz, M. Guzek, J.E. Pecero, G. Danoy, P. Bouvry, S.U. Khan, Energy-aware fast scheduling heuristics in heterogeneous computing systems, in: Proc. ACM/IEEE/IFIP Int. Conference on High Performance Computing and Simulation, HPCS '11, Istanbul, Turkey, July 2011.
27. S.U. Khan, C. Ardil, A weighted sum technique for the joint optimization of performance and power consumption in data centers, International Journal of Electrical, Computer, and Systems Engineering 3 (1) (2009) 35-40.
28. S.U. Khan, A self-adaptive weighted sum technique for the joint optimization of performance and power consumption in data centers, in: Proc. 22nd Int. Conference on Parallel and Distributed Computing and Communication Systems, PDCCS '09, Louisville, KY, USA, Sep 2009.
29. W. Ren, L. Yu, R. Gao, F. Xiong, Lightweight and compromise resilient storage outsourcing with distributed secure accessibility in mobile cloud computing, Journal of Tsinghua Science and Technology 16 (5) (2011) 520-528.
30. D. Kovachev, Y. Cao, R. Klamma, Mobile cloud computing: a comparison of application models, Computing Research Repository, CoRR, vol. abs/1009.3088, 2010.
31. L. Guan, X. Ke, M. Song, J. Song, A survey of research on mobile cloud computing, in: Proc. 10th IEEE/ACIS International Conference on Computer and Information Science, ICIS '11, Sanya, China, Nov. 2011.
32. H.T. Dinh, C. Lee, D. Niyato, P. Wang, A survey of mobile cloud computing: architecture, applications, and approaches, Wireless Communication and Mobile Computing. http://dx.doi.org/10.1002/wcm.1203 (in press).
33. N. Santos, K.P. Gummadi, R. Rodrigues, Towards trusted cloud computing, in: Proc. Hot Topics in Cloud Computing, HotCloud '09, San Diego, CA, June 2009.
34. X. Zhang, J. Schiffman, S. Gibbs, A. Kunjithapatham, S. Jeong, Securing elastic applications on mobile devices for cloud computing, in: Proc. ACM workshop on Cloud computing security, CCSW '09, Chicago, IL, USA, Nov. 2009.
35. B.G. Chun, P. Maniatis, Augmented smartphone applications through clone cloud execution, in: Proc. 12th Workshop on Hot Topics in Operating Systems, HotOS '09, Monte Verità, Switzerland, May 2009.
36. I. Giurgiu, O. Riva, D. Juric, I. Krivulev, G. Alonso, Calling the cloud: enabling mobile phones as interfaces to cloud applications, in: Proc. 10th ACM/IFIP/USENIX Int. Conference on Middleware, Middleware '09, Champaign, IL, USA, Nov. 2009.
37. J. Rellermeyer, O. Riva, G. Alonso, Alfredo: an architecture for flexible interaction with electronic devices, in: Proc. 9th ACM/IFIP/USENIX Int. Conference on Middleware, Middleware '08, Leuven, Belgium, Dec. 2008.
38. W. Itani, A. Kayssi, A. Chehab, Energy-efficient incremental integrity for securing storage in mobile cloud computing, in: Proc. Int. Conference on Energy Aware Computing, ICEAC '10, Cairo, Egypt, Dec. 2010.
39. M. Bellare, O. Goldreicha, S. Goldwasser, Incremental cryptography: the case of hashing and signing, in: Proc. 14th Annual Int. Cryptology Conference on Advances in Cryptology, Santa Barbara, California, USA, Aug. 1994.
40. M. Bellare, O. Goldreich, S. Goldwasser, Incremental cryptography and application to virus protection, in: Proc. 27th Annual ACM Symposium on Theory of Computing, STOC '95, Las Vegas, NV, USA, May 1995.
41. W. Jia, H. Zhu, Z. Cao, L. Wei, X. Lin, SDSM: a secure data service mechanism in mobile cloud computing, in: Proc. IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS, Shanghai, China, Apr. 2011.
42. J. Shao, Z. Cao, CCA-secure proxy re-encryption without pairings in public key cryptography, in: Proc. 12th Int. Conference on Practice and Theory in Public Key Cryptography, PKC '09, Irvine, CA, USA, Mar. 2009.
43. S. Yu, C. Wang, K. Ren, W. Lou, Achieving secure scalable and fine-grained data access control in cloud computing, in: Proc. IEEE INFOCOM, INFOCOM '10, San Diego, CA, USA, Mar. 2010.
44. M. Green, G. Ateniese, Identity-based proxy re-encryption, in: Proc. 5th Int. Conference on Applied Cryptography and Network Security, ACNS '07, Zhuhai, China, June 2007.
45. S.C. Hsueh, J.Y. Lin, M.Y. Lin, Secure cloud storage for conventional data archive of smart phones, in: Proc. 15th IEEE Int. Symposium on Consumer Electronics, ISCE '11, Singapore, June 2011.
46. J. Yang, H. Wang, J. Wang, C. Tan, D. Yu1, Provable data possession of resource constrained mobile devices in cloud computing, Journal of Networks 6 (7) (2011) 1033-1040.
47. Q. Wang, C. Wang, J. Li, K. Ren, W. Lou, Enabling public verifiability and data dynamics for storage security in cloud computing, in: Proc. 14th European Conference on Research in Computer Security, ESORICS '09, Saint Malo, France, Sep. 2009.
48. D.A. Carts, A review of the Diffie-Hellman algorithm and its use in secure internet protocols, November 02, 2011. http://www.sans.org/reading-room/ whitepapers/vpns/review-diffie-hellman-algorithm-secure-internet-protocols-751.
49. D. Boneh, C. Gentry, Aggregate and verifiably encrypted signatures from bilinear maps, in: Proc. 22nd Int. Conference on Theory and Applications of Cryptographic Techniques, EUROCRYPT '03, Warsaw, Poland, May 2003.
50. R.C. Merkle, Protocols for public key cryptosystems, in: Proc. IEEE Symposium on Security and Privacy, Oakland, California, USA, Apr. 1980.
51. Z. Zhou, D. Huang, Efficient and secure data storage operations for mobile cloud computing, IACR Cryptology ePrint Archive: 185, 2011.
52. J. Bethencourt, A. Sahai, B. Waters, Ciphertext-policy attribute-based encryption, in: Proc. 28th IEEE Symposium on Security and Privacy, SP '07, California, USA, May 2007.
53. A. Shamir, How to share a secret, Communications of the ACM 22 (11) (1979) 612-616.
54. Z. Zhou, D. Huang, An optimal key distribution scheme for secure multicast group communication, in: Proc. 29th Conference on Information Communications, INFOCOM '10, San Diego, USA, Mar. 2010.
55. X. Zhang, S. Jeong, A. Kunjithapatham, S. Gibbs, Towards an elastic application model for augmenting computing capabilities of mobile platforms, Journal of Mobile Networks and Applications 16 (3) (2011) 270-284.
56. S. Xiao, W. Gong, Mobility can help: protect user identity with dynamic credential, in: Proc. 11th Int. Conference on Mobile Data Management, MDM '10, Missouri, USA, May 2010.
57. S. Wang, X.S. Wang, In-device spatial cloaking for mobile user privacy assisted by the cloud, in: Proc. 11th Int. Conference on Mobile Data Management, MDM '10, Missouri, USA, May 2010.
58. W.G. Aref, H. Samet, Efficient processing of window queries in the pyramid data structure, in: Proc. 9th ACM SIGACT-SIGMOD-SIGART Symposium on Principles of Database Systems, PODS '90, Nashville, TN, USA, April 1990.
59. M.F. Mokbel, C. Chow, W.G. Aref, The new casper: query processing for location services without compromising privacy, in: Proc. 32nd Int. Conference on Very Large Databases, VLDB '06, Seoul, Korea, Sep. 2006.
60. D. Huan, X. Zhang, M. Kang, J. Luo, MobiCloud: building secure cloud framework for mobile computing and communication, in: Proc. 5th IEEE Int. Symposium on Service Oriented System Engineering, SOSE '10, Nanjing, China, June 2010.
61. J. Lockwood, N. McKeown, G. Watson, G. Gibb, P. Hartke, J. Naous, R. Raghuraman, J. Luo, NetFPGa-an open platform for gigabitrate network switching and routing, in: Proc. IEEE Int. Conference on Microelectronic Systems Education, MSE '07, San Diego, California, June 2007.
62. R. Chow, M. Jakobsson, R. Masuoka, J. Molina, Y. Niu, E. Shi, Z. Song, Authentication in the clouds: a framework and its application to mobile users, in: Proc. ACM Cloud Computing Security Workshop, CCSW '10, Chicago, USA, Oct. 2010.
63. D. Huang, Z. Zhou, L. Xu, T. Xing, Y. Zhong, Secure data processing framework for mobilecloud computing, in: Proc. IEEE INFOCOM Workshop on Cloud Computing, INFOCOM '11, Shanghai, China, June 2011.
64. L. Barkhuus, A. Dey, Location-based services for mobile telephony: a study of user's privacy concerns, in: Proc. Int. Conference on Human-Computer Interaction, INTERACT '03, Zurich, Switzerland, Sep. 2003.
65. Y.J. Chen, L.C. Wang, A security framework of group location-based mobile applications in cloud computing, in: Proc. Int. Conference on Parallel Processing Workshops, ICPPW '11, Taipei, Taiwan, Sep. 2011.
66. I. Bilogrevica, M. Jadliwalaa, P. Kumarb, S.S. Waliab, J.P. Hubauxa, I. Aadc, V. Niemic, Meetings through the cloud: privacy-preserving scheduling on mobile devices, Journal of Systems and Software 84 (11) (2011) 1910-1927. (Special Issue on Mobile Applications: Status and Trends).
67. T. ElGamal, A public key cryptosystem and a signature scheme based on discrete logarithms, IEEE Transactions on Information Theory 31 (4) (1985) 469-472.
68. P. Paillier, Public-key cryptosystems based on composite degree residuosity classes, in: Proc. 7th Int. Conference on Theory and Application of Cryptographic Techniques, EUROCRYPT '99, Prague, Czech Republic, May 1999.
69. S. Goldwasser, S. Micali, Probabilistic encryption, Journal of Computer and System Sciences 28 (2) (1984) 270-299.
70. K. Emura, A. Miyaji, A. Nomura, K. Omote, M. Soshi, A ciphertext-policy attribute-based encryption scheme with constant ciphertext length, in: Proc. 5th Int. Conference on Information Security Practice and Experience, ISPEC '09, Xi'an, China, Apr. 2009.
71. G. Castagnos, B.C. Mames, Towards a DL-based additively homomorphic encryption scheme, in: Proc. 10th Int. Information Security Conference, ISC '07, Valparaíso, Chile, Oct. 2007.