Efficient management of security and privacy issues in mobile cloud environment

2013 Annual IEEE India Conference, INDICON 2013

Volumn , Issue , 2013, Pages

  Jana, Debasish ^a   Bandyopadhyay, Debasis ^b  

^a BIRLA INSTITUTE OF TECHNOLOGY   (India)

^b RS Software (India) Ltd   (India)

Author keywords

AAA Vulnarebilities; Cloud Computing; Mobile Cloud Computing; SecaaS; STRIDE

Indexed keywords

EID: 84894461122     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INDCON.2013.6726077     Document Type: Conference Paper

References (36)

1. Meeker M., Internet Trends @ StanFord-Bases, Presentation by Kleiner Perkins Caufield Buyers, Dec. 3, 2012, URL: www. kpcb. com/file/kpcb-2012- internet-trends-update, last accessed: June 2013.
2. Katy Huberty, Ehud Gelblum, Morgan Stanley Research. Data and Estimates as of 9/12
3. M. Reza Rahimi, Nalini Venkatasubramanian, Sharad Mehrotra, and Athanasios V. Vasilakos. 2012. MAPCloud: Mobile Applications on an Elastic and Scalable 2-Tier Cloud Architecture. In Proceedings of the 2012 IEEE/ACM Fifth International Conference on Utility and Cloud Computing (UCC '12). IEEE Computer Society, Washington, DC, USA, 83-90.
4. Information Supplement: PCI DSS Cloud Computing Guidelines. PCI Data Security Standard (PCI DSS), Ver. 2. 0, Date: Feb, 2013 by Cloud Special Interest Group, PCI Security Standards Council URL: https://www. pcisecuritystandards. org/pdfs/pr-130205-Cloud-SIG. pdf, last accessed: June 2013
5. Information Supplement: PCI DSS Wireless Guidelines Standard: PCI Data Security Standard (PCI DSS) Version: 2. 0 Date: August, 2011 by Wireless Special Interest Group (SIG) PCI Security Standards Council URL: https://www. pcisecuritystandards. org/pdfs/PCI-DSS-Wireless-Guidelin e-with-WiFi-and- Bluetooth-082211. pdf, last accessed: June 2013.
6. Shih-Hao Hung, Chi-Sheng Shih, Jeng-Peng Shieh, Chen-Pang Lee, and Yi-Hsiang Huang. 2012. Executing mobile applications on the cloud: Framework and issues. Comput. Math. Appl. 63, 2 (January 2012), 573-587.
7. Abdul Nasir Khan, M. L. Mat Kiah, Samee U. Khan, and Sajjad A. Madani. 2013. Towards secure mobile cloud computing: A survey. Future Gener. Comput. Syst. 29, 5 (July 2013), 1278-1299.
8. Hui Suo; Zhuohua Liu; Jiafu Wan; Keliang Zhou, "Security and privacy in mobile cloud computing," Wireless Communications and Mobile Computing Conference (IWCMC), 2013 9th International, vol., no., pp. 655,659, 1-5 July 2013
9. Debasish Jana and Debasis Bandyopadhyay, "Management of Identity and Credentials in Mobile Cloud Environment", Proceedings of the 2013 International Conference on Advanced Computer Science and Information Systems (ICACSIS 2013), September 28-29, 2013, Bali, Indonesia
10. Grzonkowski, S.; Corcoran, P. M.; Coughlin, T., "Security analysis of authentication protocols for next-generation mobile and CE cloud services," Consumer Electronics-Berlin (ICCE-Berlin), 2011 IEEE International Conference on, vol., no., pp. 83,87, 6-8 Sept. 2011.
11. The Essential OAuth Primer: Understanding OAuth for Securing Cloud APIs, White Paper, Ping Identity Corporation, 2011, URL: http://www. innovation-district. com/wp-content/uploads/2012/04/The-Essentials-of-OAuth. pdf, last accessed: June 2013
12. Yu-Jia Chen and Li-Chun Wang. 2011. A Security Framework of Group Location-Based Mobile Applications in Cloud Computing. In Proceedings of the 2011 40th International Conference on Parallel Processing Workshops (ICPPW '11). IEEE Computer Society, Washington, DC, USA, 184-190
13. Thomas Ristenpart, Eran Tromer, Hovav Shacham, and Stefan Savage. 2009. Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds. In Proceedings of the 16th ACM conference on Computer and communications security (CCS '09). ACM, New York, NY, USA, 199-212.
14. Richard Chow, Philippe Golle, Markus Jakobsson, Elaine Shi, Jessica Staddon, Ryusuke Masuoka, and Jesus Molina. 2009. Controlling data in the cloud: outsourcing computation without outsourcing control. In Proceedings of the 2009 ACM workshop on Cloud computing security (CCSW '09). ACM, New York, NY, USA, 85-90.
15. Raphael Barazzutti, Pascal Felber, Hugues Mercier, Emanuel Onica, and Etienne Riviere. 2012. Thrifty privacy: efficient support for privacypreserving publish/subscribe. In Proceedings of the 6th ACM International Conference on Distributed Event-Based Systems (DEBS '12). ACM, New York, NY, USA, 225-236.
16. Sanjit Kumar Dash, Debi Pr. Mishra, Ranjita Mishra, and Sweta Dash. 2012. Privacy preserving K-Medoids clustering: an approach towards securing data in Mobile cloud architecture. In Proceedings of the Second International Conference on Computational Science, Engineering and Information Technology (CCSEIT '12). ACM, New York, NY, USA, 439-443.
17. Bin Liu, Yurong Jiang, Fei Sha, and Ramesh Govindan. 2012. Cloudenabled privacy-preserving collaborative learning for mobile sensing. In Proceedings of the 10th ACM Conference on Embedded Network Sensor Systems (SenSys '12). ACM, New York, NY, USA, 57-70.
18. Zhibin Zhou and Dijiang Huang. 2012. Efficient and secure data storage operations for mobile cloud computing. In Proceedings of the 8th International Conference on Network and Service Management (CNSM '12), Jorge Lobo, Philippe Owezarski, and Hui Zhang (Eds. ). International Federation for Information Processing, Laxenburg, Austria, Austria, 37-45.
19. Martin Pirker, Daniel Slamanig, and Johannes Winter. 2012. Practical privacy preserving cloud resource-payment for constrained clients. In Proceedings of the 12th international conference on Privacy Enhancing Technologies (PETS'12), Simone Fischer-Hübner and Matthew Wright (Eds. ). Springer-Verlag, Berlin, Heidelberg, 201-220.
20. Mahadev Satyanarayanan. 2013. Cloudlets: at the leading edge of cloudmobile convergence. In Proceedings of the 9th international ACM Sigsoft conference on Quality of software architectures (QoSA '13). ACM, New York, NY, USA, 1-2.
21. AWS Identity and Access Management Using IAM API Version 2010-05-08, Documentation on Amazon Web Services, November 29, 2010 URL: http://aws. amazon. com/releasenotes/AWS-Identity-and-Access-Management/5539247863296373, last accessed: June 2013.
22. Chi-Yin Chow, Mohamed F. Mokbel, and Xuan Liu. 2011. Spatial cloaking for anonymous location-based services in mobile peer-to-peer environments. Geoinformatica 15, 2 (April 2011), 351-380.
23. Dinh, H. T., Lee, C., Niyato, D. and Wang, P., A survey of mobile cloud computing: architecture, applications, and approaches. Wireless Communications and Mobile Computing. October 2011.
24. Yong Xi. 2012. Location Privacy in Emerging Network-Based Applications. Ph. D. Dissertation. Wayne State University, Detroit, MI, USA. Advisor(s) Loren Schwiebert and Weisong Shi.
25. Yan Zhu, Di Ma, Dijiang Huang, and Changjun Hu. 2013. Enabling secure location-based services in mobile cloud computing. In Proceedings of the second ACM SIGCOMM workshop on Mobile cloud computing (MCC '13). ACM, New York, NY, USA, 27-32.
26. Security Guidance for Critical Areas of Focus in Cloud Computing V3. 0, Prepared by the Cloud Security Alliance, URL: https://downloads. cloudsecurityalliance. org/initiatives/guidance/csaguid e. v3. 0. pdf, last accessed: June 2013
27. Cloud Security Alliance SecaaS Guidance, Category 1: Identity and Access Management, 2012 by Cloud Security Alliance, URL: https://downloads. cloudsecurityalliance. org/initiatives/secaas/SecaaS-C at-1-IAM-Implementation- Guidance. pdf, last accessed: June 2013
28. Top Threats to Mobile Computing, Prepared by the Cloud Security Alliance, March 2010, URL: https://downloads. cloudsecurityalliance. org/initiatives/ mobile/top-threat s-mobile-CSA. pdf, last accessed: June 2013
29. The Notorious Nine Cloud Computing Top Threats in 2013, published by Cloud Security Alliance, February 2013, URL: https://downloads. cloudsecurityalliance. org/initiatives/top-threats/The- Notorious-Nine-Cloud- Computing-Top-Threats-in-2013. pdf, last accessed: June 2013
30. Sung-Kyoung Kim, Tae Hyun Kim, and Seokhie Hong. 2013. Fiatshamir identification scheme immune to the hardware fault attacks. ACM Trans. Embed. Comput. Syst. 12, 1s, Article 65 (March 2013), 11 pages
31. Cisco Identity Services Engine (ISE), CISCO, 2013, URL: http://www. cisco. com/en/US/prod/collateral/vpndevc/ps5712/ps11637/p s11195/at-a-glance- c45-654884. pdf, last accessed: June 2013
32. Dawn Song, Elaine Shi, Ian Fischer, and Umesh Shankar. 2012. Cloud Data Protection for the Masses. Computer 45, 1 (January 2012), 39-45
33. Karthik Kumar and Yung-Hsiang Lu. 2010. Cloud Computing for Mobile Users: Can Offloading Computation Save Energy?. Computer 43, 4 (April 2010), 51-56.
34. D. Bogdanov and A. Kalu. Pushing back the rain-how to create trustworthy services in the cloud. ISACA Journal, 3:49-51, 2013. Available at http://www. isaca. org/Journal/Past-Issues/2013/Volume-3/Pages/default. aspx, last accessed November 2013.
35. Popa, D.; Cremene, M.; Borda, M.; Boudaoud, K., "A security framework for mobile cloud applications," Roedunet International Conference (RoEduNet), 2013 11th, vol., no., pp. 1,4, 17-19 Jan. 2013.
36. Payment Card Industry (PCI) Hardware Security Module (HSM)-Security Requirement V 1. 0, whitepaper on security solutions published by PCI Security Standards Council, April 2009. URL: https://www. pcisecuritystandards. org/documents/PCI%20HSM%20Eval %20Vendor%20Questionnaire%201. 0%20final. pdf. Last Accessed: August 2013.