Securing the cloud storage audit service: Defending against frame and collude attacks of third party auditor

IET Communications

Volumn 8, Issue 12, 2014, Pages 2106-2113

  Huang, Kun ^a   Xian, Ming ^a   Fu, Shaojing ^a   Liu, Jian ^a  

^a NATIONAL UNIVERSITY OF DEFENSE TECHNOLOGY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

MOBILE SECURITY;

AUDIT SERVICES; CLOUD SERVICE PROVIDERS; CLOUD STORAGE SYSTEMS; CLOUD STORAGES; FEED-BACK BASED; PUBLIC VERIFICATIONS; SECURITY AND PERFORMANCE; SECURITY PROBLEMS;

DIGITAL STORAGE;

EID: 84928345806     PISSN: 17518628     EISSN: None     Source Type: Journal    
DOI: 10.1049/iet-com.2013.0898     Document Type: Article

References (28)

1. Amazon S3 Versioning 2010. Available at: http://www.doc.s3.amazonaws.com/betadesign/Versioning.html [accessed 02.11.10].
2. Helft, M.: 'Google confirms problems with reaching its services' (The New York Times, 2009), http://www.developmentguruji.com/news/99/Googleconfirms-problems-with-reaching-its-services.html.
3. Stern, A.: 'Update from amazon regarding friday S3 downtime' (CenterNetworks, 2008), http://www.centernetworks.com/amazon-s3-downtime-update.
4. Wingfield, N., Microsoft.: 'T-Mobile Stumble with Sidekick Glitch' (The Wall Street Journal, 2009), http://www.online.wsj.com/article/SB10001424052748703790404574467431941990194.html.
5. Ateniese, G., Burns, R., Curtmola, R.: 'Provable data possession at untrusted stores'. Proc. 14th ACM Conf. on Computer and Communications Security, New York, Alexandria, VA, October 2007, pp. 598-609.
6. Erway, C., Kupcu, A., Papamanthou, C., Tamassia, R.: 'Dynamic provable data possession'. Proc. 16th ACM Conf. on Computer and Communications Security, New York, Chicago, November 2009, pp. 213-222.
7. Curtmola, R., Khan, O., Burns, R., Ateniese, G.: 'MR-PDP: multiple-replica provable data possession'. Proc. ICDCS'08, 2008, pp. 411-420.
8. Curtmola, R., Khan, O., Burns, R.: 'Robust remote data checking'. Proc. Fourth ACM Int. Workshop on Storage Security and Survivability, StorageSS, 2008, pp. 63-68.
9. Ateniese, G., Pietro, R.D., Mancini, L.V., Tsudik, G.: 'Scalable and efficient provable data possession'. Proc. Securecomm, 2008, pp. 1-10.
10. Wang, Q., Wang, C., Li, J., Ren, K., Lou, W.: 'Enabling public verifiability and data dynamics for storage security in cloud computing'. Proc. 14th European Symp., Research in Computer Security (ESORICS 09), 2009, pp. 355-370.
11. Chen, B., Curtmola, R., Ateniese, G., Burns, R.: 'Remote data checking for network coding-based distributed storage systems'. Proc. 2010 ACM Workshop on Cloud Computing Security Workshop (CCSW'10), 2010, pp. 31-42.
12. Wang, C., Wang, Q., Ren, K., Lou, W.: 'Ensuring data storage security in cloud computing'. Proc. 17th Int. Workshop Quality of Service (IWQoS'09), July 2009, pp. 1-9.
13. Wang, C., Wang, Q., Ren, K., Lou, W.: 'Privacy-preserving public auditing for data storage security in cloud computing'. InfoCom2010, IEEE, March 2010, pp. 525-533.
14. Wang, C., Ren, K., Lou, W., Li, J.: 'Towards publicly auditable secure cloud data storage services', IEEE Netw. Mag., 2010, 24, (4), pp. 19-24 (doi: 10.1109/MNET.2010.5510914).
15. Wang, C., Wang, Q., Ren, K., Cao, N., Lou, W.: 'Toward secure and dependable storage services in cloud computing', IEEE Trans. Serv. Comput., 2012, 5, (2), pp. 220-232 (doi: 10.1109/TSC.2011.24).
16. Wang, C., Chow, S.S.W, Wang, Q., Ren, K., Lou, W.: 'Privacy-preserving public auditing for secure cloud storage', IEEE Trans. Comput., 2013, 62, (2), pp. 362-375 (doi: 10.1109/TC.2011.245).
17. Hao, Z., Zhong, S., Yu, N.: 'A privacy-preserving remote data integrity checking protocol with data dynamics and public verifiability', IEEE Trans. Knowl. Data Eng., 2011, 23, pp. 1432-1437 (doi: 10.1109/TKDE.2011.62).
18. Zhu, Y., Wang, H., Hu, Z., Ahn, G.J., Hu, H., Yau, S.S.: 'Dynamic audit services for integrity verification of outsourced storages in clouds'. Proc. 2011 ACM Symp. on Applied Computing (SAC'11), 2011, pp. 1550-1557.
19. Zhu, Y., Hu, H., Ahn, G., Yu, M.: 'Cooperative provable data possession for integrity verification in multi-cloud storage', IEEE Trans. Parallel Distrib. Syst., 2012, 23, (12), pp. 2231-2244 (doi: 10.1109/TPDS.2012.66).
20. Sebe, F., Domingo, J.F., Martinez, A.B., Deswarte, Y., Quisquater, J.: 'Efficient remote data possession checking in critical information infrastructures', IEEE Trans. Knowl. Data Eng., 2007, 20, (8), pp. 1034-1038 (doi: 10.1109/TKDE.2007.190647).
21. Yang, K., Jia, X.: 'An efficient and secure dynamic auditing protocol for data storage in cloud computing', IEEE Trans. Parallel Distrib. Syst., 2013, 24, (9), pp. 1717-1726 (doi: 10.1109/TPDS.2012.278).
22. Juels, A., Kaliski, B.S., Pors, Jr.: 'Proofs of retrievability for large files'. Proc. 14th ACM Conf. on Computer and Communications Security (CCS'07), 2007, pp. 584-597.
23. Shacham, H., Waters, B.: 'Compact proofs of retrievability'. Proc. 14th Int. Conf. on the Theory and Application of Cryptology and Information Security (ASIACRYPT'08), 2008, pp. 90-107.
24. Dodis, Y., Vadhan, S., Wichs, D.: 'Proofs of retrievability via hardness amplification'. Proc. Sixth Theory of Cryptography Conf. on Theory of Cryptography (TCC'09), 2009, pp. 109-127.
25. Bowers, K.D., Juels, A., Oprea, A.: 'Hail: a high-availability and integrity layer for cloud storage'. ACM Conf. on Computer and Communications Security, 2009, pp. 187-198.
26. Bowers, K.D., Juels, A., Oprea, A.: 'Proofs of retrievability: theory and implementation'. Proc. 2009 ACM Workshop on Cloud Computing Security (CCSW'09), 2009, pp. 43-54.
27. Zheng, Q., Xu, S.: 'Fair and dynamic proofs of retrievability'. Proc. first ACM Conf. on Data and Application Security and Privacy (CODASPY'11), 2011, pp. 237-248.
28. Xu, J.: 'Auditing the auditor: secure delegation of auditing operation over cloud storage'. Proc. IACR Cryptology ePrint Archive, 2011, p. 304.